FSecureLABS/drozer
Drozer
Drozer este un framework de testare a securității și un analizor de runtime pentru aplicații și dispozitive Android. Acesta funcționează ca un framework de gestionare a exploit-urilor și un set de instrumente de securitate utilizat pentru a identifica vulnerabilități, configurări greșite și scurgeri de date în sistemul de operare Android și aplicațiile instalate pe acesta.
Framework-ul permite simularea comportamentului aplicațiilor și interacțiunea cu endpoint-urile de comunicare pentru a detecta breșe de securitate. Gestionează execuția, analiza și partajarea exploit-urilor publice pentru cercetarea securității mobile.
Sistemul oferă capabilități pentru auditarea aplicațiilor, cercetarea vulnerabilităților și execuția unor module de securitate specializate. Aceasta include capacitatea de a interacționa cu runtime-ul Android și cu shell-ul dispozitivului pentru a evalua postura de securitate a hardware-ului și software-ului.
Features
- Android Application Auditing - Provides a comprehensive toolset for auditing the security posture and identifying misconfigurations in running Android apps.
- Android Remote Execution Agents - Provides a client-server system to route security testing commands to an agent process on Android devices.
- Android Security Testing Frameworks - Offers a structured framework for assessing Android security through runtime interaction and vulnerability detection.
- Android Security Tools - Ships a versatile security toolset for simulating application behavior and identifying flaws in Android apps.
- Android Device Shell Management - Provides an interactive Linux shell to execute administrative commands directly on a connected Android device.
- Android Application Penetration Testing - Facilitates security assessments of Android applications by simulating malicious behavior and testing communication endpoints.
- Android Exploitation Frameworks - Provides a framework for executing, analyzing, and sharing public exploits targeting the Android operating system.
- Vulnerability Research - Enables systematic research into Android operating system and hardware vulnerabilities through runtime analysis.
- Android Runtime - Analyzes the Android runtime and device shell to detect vulnerabilities within installed applications.
- Runtime Manipulation - Allows altering the behavior of active Android applications by interacting directly with the system runtime.
- Security Module Management - Enables the execution of specialized testing modules to evaluate the security of installed apps and hardware.
- Android Shell Orchestration - Spawns and manages low-level Linux shell sessions to bypass high-level API restrictions on the device.
- Android IPC Interception - Enables probing and manipulating communication between Android applications via Binder and Intent interception.
- Plugin-Based Architectures - Implements a plugin-based architecture to extend security testing capabilities without modifying the core engine.
- Mobile Security Frameworks - Comprehensive security assessment framework for Android applications.
- Android Dynamic Analysis Tools - Framework for interacting with the Dalvik VM and OS endpoints.
- Mobile Security - Security assessment framework for Android applications.
- Security Analysis Frameworks - Security assessment framework for identifying Android vulnerabilities.
- Specialized Security Domains - Framework for Android security assessment and exploitation.
