AwesomeREA.org

Tool

Andromeda

Interactive command-line tool by Lasha Khasaia for first-pass reverse engineering of Android APKs, written in C/C++ for speed. It unpacks an APK, parses AndroidManifest.xml, the signing certificate and the DEX files at the archive root, then opens a shell with tab completion for listing permissions, activities, services, receivers and likely entry points, listing and searching classes, methods and strings, disassembling a method's Dalvik bytecode and listing, hashing or extracting native libraries. Further commands report whether the app is debuggable, a creation date taken from its certificate, URL and email strings, and a guess at whether it was written in Java, Kotlin or Xamarin .NET.

Targets
App
Category
Android tools
Relationship
Foundation tool
Sources reviewed

Requirements & limits

  • Inactive early-stage project: the README says the tool is in the early development stage, and its 29 commits run from 2019-09-22 to the reviewed master commit of 2020-03-14, which removes an editor folder. There are no tags or releases, and GitHub does not mark the repository archived. Documenting the tool is still a TODO; the README shows the command list only as a screenshot, and the author notes very limited Android experience.
  • Built from source with make, which compiles everything with clang++ in C++17 mode (-std=c++1z) and debug flags (-g -O0), linking zlib and OpenSSL's libcrypto; the README's apt commands install clang, libz-dev and libssl-dev. The Makefile adds libstdc++fs on Linux and Homebrew [email protected] paths on macOS; Windows is not covered.
  • Input is an APK supplied by the user, run as ./bin/andromeda app.apk. The path must end in .apk, and the tool stops if the unpacked archive lacks AndroidManifest.xml or a DEX file at its root, so bare DEX files are not accepted. The repository contains no sample APKs.
  • Apache-2.0 license. third_party.md lists the bundled libraries with their own licenses: Google's dexter slicer (Apache-2.0), Claud Xiao's AxmlParser, linenoise-cpp, miniz and pugixml; the tree also bundles the digestpp hashing headers. The tool was not built or run, and no APK was analyzed.

About this entry

The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.

Report an outdated entry Suggest a translation fix

Primary sources

  1. README.md GitHub · secrary/Andromeda · Revision 50fdaaf
  2. Andromeda/Andromeda.cpp GitHub · secrary/Andromeda · Revision 50fdaaf
  3. Andromeda/APK.hpp GitHub · secrary/Andromeda · Revision 50fdaaf
  4. Andromeda/patterns.hpp GitHub · secrary/Andromeda · Revision 50fdaaf
  5. Makefile GitHub · secrary/Andromeda · Revision 50fdaaf
  6. third_party.md GitHub · secrary/Andromeda · Revision 50fdaaf
  7. slicer GitHub · secrary/Andromeda · Revision 50fdaaf
  8. LICENSE GitHub · secrary/Andromeda · Revision 50fdaaf
  9. https://github.com/secrary/Andromeda/commits/50fdaaf59328fb3430d76d92c6319d2232766f7a

More in Apps

All 136 entries in Apps