DroidLysis is a pre-analysis tool for Android apps: it performs repetitive and boring tasks we'd typically do at the beginning of any reverse engineering. It disassembles the Android sample, organizes output in directories, and searches for suspicious spots in the code to look at. The output helps the reverse engineer speed up the first few steps of analysis. DroidLysis can be used over Android packages (apk), Dalvik executables (dex), Zip files (zip), Rar files (rar) or directories of files. Installing DroidLysis Install required system packages sudo apt-get install default-jre git python3 python3-pip unzip wget libmagic-dev libxml2-dev libxslt-dev Install Android disassembly tools Apktool , Baksmali, and optionally Dex2jar and Obsolete: Procyon (note that Procyon only works with Java 8, not Java 11). $ mkdir -p ~/softs $ cd ~/softs $ wget https://bitbucket.org/iBotPeaches/apktool/downloads/apktool_2.9.3.jar $ wget https://bitbucket.org/JesusFreke/smali/downloads/baksmali-2.5.2.jar $ wget https://github.com/pxb1988/dex2jar/releases/download/v2.4/dex-tools-v2.4.zip $ unzip dex-tools-v2.4.zip $ rm -f dex-tools-v2.4.zip Get DroidLysis from the Git repository (preferred) or from pip Install from Git in a Python virtual environment (python3 -m venv, or pyenv virtual environments etc). $ python3 -m venv venv $ source ./venv/bin/activate (venv) $ pip3 install git+https://github.com/cryptax/droidlysis Alternatively, you can install DroidLysis directly…Read More
References
Back to Main