Best: https://github.com/egirault/googleplay-api

Issues:
find ways to get settings value from home directory.

https://github.com/Nightbringer21/fridump

Requires frida to be installed.

URL : https://github.com/vaibhavpandeyvpz/apkstudio

Notes:
Looks good but has dependencies on QT
looks for apktool.jar in path but no option in setting to set it up.

Update: 6 April 2016
does stuf less then apk2java and has issues with running and decoding properly. Hence not added right now.

Repo: https://github.com/dorneanu/smalisca/
Fork: https://github.com/AndroidTamer/smalisca

Attempt1:

1. Using XPM python pip to installer realized 1 dependency is not listed in it (configparser)
2. Parsing section working but command in Readme incorrect
   smalisca parser -l ~/tmp/FakeBanker2/dumped/smali -s java -f sqlite -o fakebanker.sqlite
   Should be
   smalisca parser -l ~/tmp/FakeBanker2/dumped/smali -s smali -f sqlite -o fakebanker.sqlite
   as apktool gives out smali as .smali and not as .java
3. analyzer section requires a config to be present which is not provided by the pip installer
   Sample config on github page : https://github.com/dorneanu/smalisca/blob/master/smalisca/data/config/config.conf copy paste of this config results in error.

Current Status: Cant push to production as its not running fully.

https://github.com/dpnishant/appmon

Requires Frida and runs some server on the other side. need to investigate how to combine it with Tamer. otherwise this will be shifted to emulator project.

https://github.com/scottyab

Another software which assumes virtualbox is installed in base, need to play around with and see if vboxmanage code we wrote is going to work otherwise patch it out.

https://github.com/CalebFenton/resequencer

Provide a customized profile / version of chromium which has various extensions enabled.

http://paladion.ca/labs_zip/ScriptDriod.zip

version 1.9.6 is latest, debian only supports 1.8.12 as of now. either get django in backports or we get the new release via androidtamer repository.

i would prefer packing.

This will impact MobSF project. https://github.com/androidtamer/Mobile-Security-Framework-MobSF stuff like https://github.com/ajinabraham/Mobile-Security-Framework-MobSF/issues/159 would require a upgrade of django framework

A master wrapper over all tools available in androidtamer, good features would be to run all of them and combine results at one place.

awesome would be if co-relation and aggregation also happens.

Kind of like OWTF for android.

Original Repo: https://github.com/ajinabraham/Mobile-Security-Framework-MobSF
Fork: https://github.com/AndroidTamer/Mobile-Security-Framework-MobSF

Challenges:

• Rebuild / architect to ensure everything goes to userhome directory including config / settings file. Currently build with assumption that folder will be writable data is stored in root itself.
• multiple dependencies including using vbox on same machine. (vboxmanage package created to solve this challenge)
• ensuring upstream changes all go as cross platform. we can be specific to Linux but the project is cross platform so fixes acceptance upstream would depend on it being cross platform
• Multiple steps required to get Dynamic analysis working, document needs to outline that, if possible automate it out.

Work done So far:

• nullcon branch which contained pre-release version was modified to ensure we can play with this. TamerPlatform/Mobile-Security-Framework-MobSF@4badfd7 this added various path's that are required to be modified and this ensures that all data is now redirected to ~/.mobsf/ folder.
• Static analysis working, dynamic analysis working, but dynamic analysis need more testing.

TODO:

• procyon
• jd-core
• cfr
  and more, keep adding.

https://github.com/strazzere/ZjDroid

https://github.com/mwrlabs/drozer-modules

Custom protocol testing

https://github.com/ctxis/canape

https://github.com/JamesHabben/evolve

https://github.com/mkenne11/nogotofail-pii

Required for custom protocol app testing

https://github.com/MindMac/RepackageDetection

https://github.com/konloch/bytecode-viewer

https://sable.github.io/soot/

https://sable.github.io/heros/

Menu icons are not present for any package
Tamer Menu needs to be created which should re classify all these packages in proper places so its easy to spot each package.

probable target language: Python or Bash

A command which acts like a meta-wrapper giving us following stuff

apk download -> download that specific apk
apk decompile -> apk2java wrapper
apk recompile -> smalli build
apk secscan -> aggregated security scan of apk
apk secscan dynamic -> drozer and mobsf scan
apk sign -> apksigner and zip align.

instead of remembering different command we work with one command.

https://github.com/sysdream/fino

Original: https://github.com/maaaaz/androwarn
Fork: https://github.com/AndroidTamer/androwarn

Needs a lot of rework to get it working as per our need. This works only from its own folder and can only store reports in its own folder formats.
This could work out if it can write the report to a different folder and doesn't need any references besides the html file / txt file. But that would require a code change.

A shell script / python code which autosubmits to various online services and keep a tab when results are available.

preferably also co-related the results and agregates the list of findings or at the least list out all findings in one place where human can co-relate with them.

Todo:

• Identify various online services that will allow online assessment
• Identify how many will allow us to upload apk and later retrieve result.
• Store all results in a local DB (preferably sqlite)
• Display the data in a single page with tab's or views from each assessment website

Nice-to-have feature

• co-relation and unique finding view.

current version has issues as per WithSecureLabs/drozer#147 so need an update.

https://github.com/ac-pm/Inspeckage

https://github.com/programa-stic/marvin-django/blob/master/README_en.md

at this point we are trying to bundle SDK NDK and Studio in the OVA file itself. However after decompression the total used space by these 3 is 3.9GB out of which
2.7GB : NDK
0.6 GB : SDK
0.5 GB : Studio

Hence its decided to go ahead with Putting SDK and Studio in this release and then creating 2 installer packages which will basically download the zip file from google servers and unzip and configure them for the users

This will reduce the size of OVA considerably.

Alternatively we can also bundle the ZIP files which will be of small sizes and should take around 1.5GB total space and an option to decompress them via a installer-script be made available on the desktop.

https://code.google.com/archive/p/smartphonesdumbapps/downloads

https://github.com/strazzere/android-scripts

Raptor uses manitree : https://github.com/antitree/manitree/ and findsecbugs:

either enable raptor or assimilate these tools to ensure we have these available.

Original: https://github.com/Konloch/bytecode-viewer
Fork: https://github.com/AndroidTamer/bytecode-viewer/

On First Run downloads a large number of files this needs to be tested as /usr/share/ will not allow user write and no point downloading same dependency again and again if its already in path.

high level packages which make various other android tamer specific / debian packages as dependencies and make them install when called.

Source Compile fails for apktool in its current state on openjdk.
Issue tracked here: iBotPeaches/Apktool#1251

At this point build scripts are getting the jar directly if build failed
https://github.com/AndroidTamer/Packaging_Tools/blob/master/Build/apktool/build.sh#L26

See if it makes sense to include metasploit

Raptor
PMD
findbugs
find-sec bugs
VCG

http://jasmin.sourceforge.net/

https://github.com/strazzere/privmap

010-editor has binary templates such as http://www.sweetscape.com/010editor/templates/files/DEXTemplate.bt or http://www.sweetscape.com/010editor/templates/files/AndroidManifestTemplate.bt

okteta seems to be the only opensource product close to what 010-editor can offer. We need a way to port these templates to okteta format.

https://github.com/AndroidVTS/android-vts

http://www.sleuthkit.org/autopsy/download.php