eHost Recommended

Sunday

Inspeckage - The Android Package Inspector For Dynamic Analysis With API Hooks







Inspeckage- The Android Package Inspector For Dynamic Analysis With API Hooks



Android Package Inspector – dynamic analysis with api hooks, start unexported activities and more. 


Inspeckage is a tool developed to offer dynamic analysis of Android applications. By applying hooks to functions of the Android API, Inspeckage will help you understand what an Android application is doing at runtime.


Features


With Inspeckage, we can get a good amount of information about the application’s behavior:


Information gathering

  • Requested Permissions;

  • App Permissions;

  • Shared Libraries;

  • Exported and Non-exported Activities, Content Providers,Broadcast Receivers and Services;

  • Check if the app is debuggable or not;

  • Version, UID and GIDs;

  • etc.

Hooks (so far)

With the hooks, we can see what the application is doing in real time:


  • Shared Preferences (log and file);

  • Serialization;

  • Crypto;

  • Hashes;

  • SQLite;

  • HTTP (an HTTP proxy tool is still the best alternative);

  • File System;

  • Miscellaneous (Clipboard, URL.Parse());

  • WebView;

  • IPC;

  • + Hooks (add new hooks dynamically)

Actions


With Xposed it’s possible to perform actions such as start a unexported activity and much else:


  • Start any activity (exported and unexported);

  • Call any provider (exported and unexported);

  • Disable FLAG_SECURE;

  • SSL uncheck (bypass certificate pinning – JSSE, Apache and okhttp3);

  • Start, stop and restart the application;

  • Replace params and return value (+Hooks tab).

Extras


  • APK Download;

  • View the app’s directory tree;

  • Download the app’s files;

  • Download the output generated by hooks in text file format;

  • Take a screen capture;

  • Send text to android clipboard.

Configuration


Even though our tool has some hooks to the HTTP libraries, using an external proxy tool is still the best option to analyze the app’s traffic. With Inspeckage, you can:


  • Add a proxy to the target app;

  • Enable and disable proxy;

  • Add entries in the arp table.

Logcat


Logcat.html page. A experimental page with websocket to show some information from the logcat.





Installation


Requirements: Xposed Framework

Xposed Installer


  1. Go to Xposed Installer, select “Download”

  2. Refresh and search for “Inspeckage”

  3. Download the latest version and install

  4. Enable it in Xposed

  5. Reboot and enjoy!

Xposed Repository


Get it from Xposed repo: http://repo.xposed.info/module/mobi.acpm.inspeckage


 adb install mobi.acpm.inspeckage.apk


  • Enable it in Xposed

  • Reboot and enjoy!


0 comments:

Post a Comment

Got questions? Ask ’em below! While we’re here, you might like to give any feedback about this Post, Your comment inspire us to continuous Improvement of This Blog and Contents. Your words are your own, so be nice and helpful if you can. Please, only use your REAL NAME, not your business name or keywords. Using business name or keywords instead of your real name will lead to the comment being deleted. Anonymous commenting is not allowed either. Limit the amount of links submitted in your comment. We accept clean XHTML in comments, but don't overdo it please.

Popular Posts

Categories

Blogger Seo How To Widgets apps Global News Games Android Tricks Tools Apk Internet Tips From Source Social Media Blogger Tips Blog Designs Adsense Personalization Others Blogging BLOGGING TIPS Posts css Comments Make Money Music-Audio Role Playing Tech News Adventure Facebook Image Effects jQuery Menus Photography Productivity Social Theme Racing Tech Tips Action Arcade Reviews Smart Phone Alexa Business GPS Launchers Maps Navigation Weather Windows featured Affiliate Blogger Tools Communication Domain Google Health-Fitness Infolinks Live Wallpapers Samsung Simulation Travel-Local Tutorial Utility world Affilate Media-Video OS Tech Plugin Strategy Themes blogger page money people wise founder Board Books-Reference Business Tycoon Card Cyber News Gadgets Google Search HTC Hosting JS Keywords Online Shopping Rapper Root Security Tech Facts Twitter WiFi billionaire entrepreneur goals iPad rich success Actor Alain Wertheimer Antivirus App Apple Arcade-Action CK Hutchison Holdings Camera Candy Crush Cracking Disqus Email Marketing Entertainment Exploits Extensions Game Gucci Mane Net Worth HTML Hackers Hacking House of Chanel Hutchison Whampoa Information Gathering JOB TIPS Joomla Kid Rock Net Worth Laurene Powell Jobs Laurene Powell Jobs Net Worth Li Ka-shing Li Ka-shing Net Worth Lifestyle Mobile Hacking Nepal Office PHP Payoneer Personalisation Producer Puzzle Releted Posts Review Scripts Singer Steve Jobs Template Video Players-Editors Virtual Card Vulnerability Web Development Web Hosting Website Hacking Website Security Zero Day bill gates chanel company dreams drug dubai eCommerce first million gucci mane 2015 net worth gucci mane net worth 2015 gucci mane networth health how much money is gucci mane worth iPhone instagram investor kid rock net worth 2015 kid rock net worth 2016 kid rock networth kid rocks net worth l Marketing lana rose life luxury millionaire mo vlogs modafinil motivation slideshows star wealth youtube

Blog Archive