AwesomeREA.org

Tool

House

NCC Group’s Python and Flask web interface for Frida-based runtime analysis of Android apps, intended to make writing Frida scripts simpler. From a local browser page the analyst can enumerate loaded classes, the classes in a DEX file, class loaders and a class’s methods, then generate and keep tracing scripts for several functions, including ones in dynamically loaded DEX or JAR files. A configurable monitor logs file, HTTP, WebView, SQL, IPC and SharedPreferences calls.

Requirements & limits

  • The reviewed master commit c3641e3 dates from 2020-12-27; the project has no releases or tags. The README says House was tested with Frida 12.8.6 and needs Frida 12.8.3 or later for DEX/JAR hooking, while requirements.txt and the Pipfile leave frida unpinned, so current Frida releases may not work without changes.
  • Runs from source with Python 3 and pip or pipenv (Flask, Flask-SocketIO 4.3.2, Flask-Login, Jinja2, IPython and frida), serving the interface on 127.0.0.1, port 8000 by default. The README requires a rooted Android device connected over USB with a frida-server matching the local frida-python version, and recommends attaching only one USB device. The Stetho sideload option expects the analyst to place a stetho.jar on the device; it is not bundled.
  • The repository bundles the README’s demo app test_apk/overloads.apk (package com.ha0k3.overloads) and a small test_apk/dyhello.dex as test fixtures, plus copies of the Ace editor and Bootstrap for the web interface. The monitor’s hook list in scripts/monitor/monitor_hook.json is described as experimental. Intended for apps the analyst is authorized to test.
  • MIT (NCC Group). Frida and the bundled web libraries keep their own licenses. The reviewed sources establish no REA connection; nothing was installed or run in this review.

About this entry

Type
Tool
Category
Android tools
Relationship
Foundation tool
Targets
App

Sources reviewed

The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.

Report an outdated entry Suggest a translation fix

Primary sources

  1. README.md GitHub · nccgroup/house · Revision c3641e3
  2. requirements.txt GitHub · nccgroup/house · Revision c3641e3
  3. Pipfile GitHub · nccgroup/house · Revision c3641e3
  4. app.py GitHub · nccgroup/house · Revision c3641e3
  5. scripts/monitor/monitor_hook.json GitHub · nccgroup/house · Revision c3641e3
  6. test_apk GitHub · nccgroup/house · Revision c3641e3
  7. LICENSE GitHub · nccgroup/house · Revision c3641e3

More in Apps

All 113 entries in Apps