FSecureLABS/drozer
Drozer
Drozer is a security testing framework and runtime analyzer for Android applications and devices. It functions as an exploit management framework and a security toolset used to identify vulnerabilities, misconfigurations, and leaks within the Android operating system and its installed applications.
The framework enables the simulation of application behavior and the interaction with communication endpoints to detect security flaws. It manages the execution, analysis, and sharing of public exploits for mobile security research.
The system provides capabilities for application auditing, vulnerability research, and the execution of specialized security modules. This includes the ability to interact with the Android runtime and device shell to assess the security posture of hardware and software.
Features
- Android Application Auditing - Provides a comprehensive toolset for auditing the security posture and identifying misconfigurations in running Android apps.
- Android Remote Execution Agents - Provides a client-server system to route security testing commands to an agent process on Android devices.
- Android Security Testing Frameworks - Offers a structured framework for assessing Android security through runtime interaction and vulnerability detection.
- Android Security Tools - Ships a versatile security toolset for simulating application behavior and identifying flaws in Android apps.
- Android Device Shell Management - Provides an interactive Linux shell to execute administrative commands directly on a connected Android device.
- Android Application Penetration Testing - Facilitates security assessments of Android applications by simulating malicious behavior and testing communication endpoints.
- Android Exploitation Frameworks - Provides a framework for executing, analyzing, and sharing public exploits targeting the Android operating system.
- Vulnerability Research - Enables systematic research into Android operating system and hardware vulnerabilities through runtime analysis.
- Android Runtime - Analyzes the Android runtime and device shell to detect vulnerabilities within installed applications.
- Runtime Manipulation - Allows altering the behavior of active Android applications by interacting directly with the system runtime.
- Security Module Management - Enables the execution of specialized testing modules to evaluate the security of installed apps and hardware.
- Android Shell Orchestration - Spawns and manages low-level Linux shell sessions to bypass high-level API restrictions on the device.
- Android IPC Interception - Enables probing and manipulating communication between Android applications via Binder and Intent interception.
- Plugin-Based Architectures - Implements a plugin-based architecture to extend security testing capabilities without modifying the core engine.
- Mobile Security Frameworks - Comprehensive security assessment framework for Android applications.
- Android Dynamic Analysis Tools - Framework for interacting with the Dalvik VM and OS endpoints.
- Dynamic Analysis Tools - Comprehensive security assessment and attack framework for Android.
- Mobile Security - Security assessment framework for Android applications.
- Security Analysis Frameworks - Security assessment framework for identifying Android vulnerabilities.
- Specialized Security Domains - Framework for Android security assessment and exploitation.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
