I am looking for a simple and efficient tool for auditing apk's.

I would like an application that given a APK,

1) obtain the technologies used so that can check the vulnerabilities (cordova version 4.0....), and

2) also follow the flow of the application, I mean, where does the APK stores a file, in what specific directory so that weak credentials could be accessed, check what files does the application leaves when removed...

Those 2 are the highest priorities, then, given the APK or the decompiled code, obtaining other vulnerabilities (SQL injection and other code bugs)

Thank you very much, so far I have come across those websites:



https://mobilesecuritywiki.com/ , where Drozer seems a pretty good one but doesn't seem to meet the requirements of what I am asking for.

Thank you in advance!

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.