Androguard module for Yara Logo

Androguard module for Yara

0
Free
Updated 11 March 2025
Visit Website

This module for Yara is part of the Koodous project https://koodous.com and it integrates static APK analysis with Yara. You can use it to find APKs by package name, permissions or API level, etc. Find the documentation for this module in the Koodous documentation's site: http://docs.koodous.com/yara/androguard/ Preparing compilation: If you want to use this module, first you need to re-compile Yara with the androguard module. To do so, you need to modify some files. Follow the basic steps in the official docs: http://yara.readthedocs.org/en/latest/writingmodules.html#building-our-hello-world Include the file androguard.c in folder libyara/modules. Modify "libyara/modules/module_list" and add "MODULE(androguard)" in the cuckoo block. The file should look like the following: MODULE(pe) MODULE(elf) MODULE(math) #ifdef CUCKOO MODULE(cuckoo) MODULE(androguard) #endif Modify "libyara/Makefile.am" to add androguard module ("MODULES += modules/androguard.c") in the cuckoo block: MODULES = modules/tests.c MODULES += modules/pe.c if CUCKOO MODULES += modules/cuckoo.c MODULES += modules/androguard.c endif Recompile Yara, but enabling cuckoo module.

FEATURES

SIMILAR TOOLS

ImmuniWeb® On-Demand is a web application penetration testing platform that combines AI-powered automation with manual security testing to provide comprehensive vulnerability assessments and compliance reporting.

WackoPicko is a vulnerable website with known vulnerabilities, now available as a Docker image and included in the OWASP Broken Web Applications Project.

A python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

CSRF crumb generation and validation tool for hapi framework.

A brute-force protection middleware for express routes that rate-limits incoming requests.

A PHP/MySQL web application designed to aid security professionals in testing their skills and tools in a legal environment.

A web-based tool for instrumenting and analyzing Android applications using Flask, Jinja, and Redis.

Open-Source framework for detecting and preventing dependency confusion leakage with a holistic approach and wide technology support.

Dynamic application security testing tool for identifying and fixing web application vulnerabilities.

CyberSecTools logoCyberSecTools

Explore the largest curated directory of cybersecurity tools and resources to enhance your security practices. Find the right solution for your domain.

Operated by:

Mandos Cyber • KVK: 97994448

Netherlands • contact@mandos.io

VAT: NL005301434B12

Copyright © 2025 - All rights reserved