Skip to content

v1.5.0

Choose a tag to compare

@dthkhang dthkhang released this 18 Sep 04:17
· 20 commits to main since this release

πŸ” Major Update: APK Analysis Toolkit

adbrv v1.5.0 transforms from a simple ADB utility into a comprehensive Android security analysis toolkit. This release introduces powerful new features for APK analysis, security assessment, and modular architecture.

✨ New Features

πŸ” APK .so File Finder (--findso)

  • Quick identification of APK files containing native libraries
  • Color-coded output: Red for no .so files, Green for APKs with native code
  • Perfect first step in APK analysis workflow

πŸ›‘οΈ Library Security Analyzer (--libsec)

  • MASTG-compliant security analysis following Mobile Application Security Testing Guide
  • Three critical security checks:
    • MASTG-TEST-0222: PIE/PIC (Position Independent Executable/Code) verification
    • MASTG-TEST-0223: Stack Canary protection detection
    • MASTG-TEST-0288: Debug symbols presence check
  • Color-coded results: Green (PASS), Red (FAIL), Yellow (WARN)

πŸ—οΈ Architecture Improvements

Modular Design

  • 8 specialized modules for better maintainability and testing
  • Single responsibility principle - each module has a clear purpose
  • Enhanced error handling and user feedback

New Modules:

  • fridaTools.py - Frida server management
  • checkSymbols.py - Native library symbol checking
  • resignAPK.py - APK resigning functionality
  • findSOfile.py - APK .so file finder
  • libSecurity.py - Library security analysis
  • utils.py - Common utilities and constants

πŸ“š Enhanced Documentation

  • Comprehensive README with APK analysis workflow
  • CHANGELOG.md for version tracking
  • Detailed examples and usage instructions
  • MASTG compliance documentation

πŸ”„ APK Analysis Workflow

# 1. Find APKs with native code
adbrv --findso

# 2. Check security features
adbrv --libsec

# 3. Decompile APK with apktool
apktool d target.apk

# 4. Analyze symbols in decompiled folder
adbrv --checksym target

# 5. Resign for testing (if needed)
adbrv --resign --apk target.apk

🎯 Use Cases

  • Security Researchers: Comprehensive security assessment of Android apps
  • Mobile App Testers: Quick identification of security vulnerabilities
  • Reverse Engineers: Detailed symbol analysis and APK modification
  • Penetration Testers: MASTG-compliant security testing

πŸ”§ Technical Details

  • Backward Compatibility: All existing features preserved
  • Enhanced Error Handling: Clear user feedback and error messages
  • Color-coded Output: Improved visual experience
  • Cross-platform: Works on macOS and Linux

οΏ½οΏ½ Installation

pip install git+https://github.com/dthkhang/adbrv.git@v1.5.0

οΏ½οΏ½ What's New

  • βœ… APK .so file finder with visual feedback
  • βœ… MASTG-compliant security analysis
  • βœ… Modular architecture for better maintainability
  • βœ… Comprehensive documentation and examples
  • βœ… Enhanced user experience with color-coded output
  • βœ… Professional changelog and version tracking

οΏ½οΏ½ Links


adbrv v1.5.0 - Your comprehensive Android security analysis toolkit! πŸ”’πŸ“±

Perfect for security researchers, mobile app testers, and penetration testers who need reliable, MASTG-compliant Android analysis tools.