FSecureLABS/drozer
Drozer
Drozer ist ein Sicherheits-Test-Framework und Laufzeit-Analysator für Android-Anwendungen und -Geräte. Es fungiert als Exploit-Management-Framework und Sicherheits-Toolset, das dazu dient, Schwachstellen, Fehlkonfigurationen und Lecks innerhalb des Android-Betriebssystems und der installierten Anwendungen zu identifizieren.
Das Framework ermöglicht die Simulation von Anwendungsverhalten und die Interaktion mit Kommunikationsendpunkten, um Sicherheitslücken aufzuspüren. Es verwaltet die Ausführung, Analyse und Weitergabe öffentlicher Exploits für die mobile Sicherheitsforschung.
Das System bietet Funktionen für Anwendungs-Audits, Schwachstellenforschung und die Ausführung spezialisierter Sicherheitsmodule. Dies umfasst die Möglichkeit, mit der Android-Laufzeitumgebung und der Geräte-Shell zu interagieren, um den Sicherheitsstatus von Hardware und Software zu bewerten.
Features
- Android Application Auditing - Provides a comprehensive toolset for auditing the security posture and identifying misconfigurations in running Android apps.
- Android Remote Execution Agents - Provides a client-server system to route security testing commands to an agent process on Android devices.
- Android Security Testing Frameworks - Offers a structured framework for assessing Android security through runtime interaction and vulnerability detection.
- Android Security Tools - Ships a versatile security toolset for simulating application behavior and identifying flaws in Android apps.
- Android Device Shell Management - Provides an interactive Linux shell to execute administrative commands directly on a connected Android device.
- Android Application Penetration Testing - Facilitates security assessments of Android applications by simulating malicious behavior and testing communication endpoints.
- Android Exploitation Frameworks - Provides a framework for executing, analyzing, and sharing public exploits targeting the Android operating system.
- Vulnerability Research - Enables systematic research into Android operating system and hardware vulnerabilities through runtime analysis.
- Android Runtime - Analyzes the Android runtime and device shell to detect vulnerabilities within installed applications.
- Runtime Manipulation - Allows altering the behavior of active Android applications by interacting directly with the system runtime.
- Security Module Management - Enables the execution of specialized testing modules to evaluate the security of installed apps and hardware.
- Android Shell Orchestration - Spawns and manages low-level Linux shell sessions to bypass high-level API restrictions on the device.
- Android IPC Interception - Enables probing and manipulating communication between Android applications via Binder and Intent interception.
- Plugin-Based Architectures - Implements a plugin-based architecture to extend security testing capabilities without modifying the core engine.
- Mobile Security Frameworks - Comprehensive security assessment framework for Android applications.
- Android Dynamic Analysis Tools - Framework for interacting with the Dalvik VM and OS endpoints.
- Mobile Security - Security assessment framework for Android applications.
- Security Analysis Frameworks - Security assessment framework for identifying Android vulnerabilities.
- Specialized Security Domains - Framework for Android security assessment and exploitation.
