Androguard

Androguard is a Python-based open-source tool for reverse engineering and security analysis of Android applications. It provides a comprehensive set of utilities for parsing, disassembling, and decompiling Android file formats. Supported file formats and capabilities include: - DEX and ODEX bytecode parsing and disassembly - APK file analysis - Android binary XML parsing - Android resource file analysis - Basic decompilation of DEX/ODEX files via the DAD (DAD is A Decompiler) component - Control flow graph (CFG) generation - Frida integration for dynamic analysis support - SQLite database for session persistence Androguard is installable via pip and is written entirely in Python. It includes a live WebAssembly (WASM) version accessible through a browser at ismyphonepwned.com, which runs locally without cloud connectivity and includes disassembler, decompiler, CFG, and security check functionality. The tool is used as a library or standalone utility by a number of other security projects, including MobSF, Cuckoo Sandbox, VirusTotal, Quark-Engine, Koodous, and others. A companion tool, Goauld, provides dynamic injection capabilities for Linux and Android environments. Androguard is licensed under the Apache License 2.0 and is maintained by the Androguard Team, originally authored by Anthony Desnos, with the DAD decompiler component authored by Geoffroy Gueguen.