androguard

androguard command [options] apkfile_

androguard is a Python tool for reverse engineering, malware analysis, and security assessment of Android applications. It can analyze APK files, decompile DEX code, parse Android manifests, and extract permissions and components.The tool provides both command-line utilities and a Python API for programmatic analysis, making it useful for both manual review and automated security scanning.

analyze

Open an IPython shell to start reverse engineering interactively

Decompile an APK to Java source and create control flow graphs

Disassemble Dalvik (DEX) bytecode

Parse and display the AndroidManifest.xml or other AXML files

Decode resources.arsc

Print the package name, version code, and version name of an APK

Print the fingerprints of all certificates inside an APK

Generate a call graph and export it to a graph format

Output directory (required for decompile)

Input APK (legacy; the APK is usually given as a positional argument)

Control flow graph format (png, jpg, raw)

Decompiler to use (default: DAD)

Limit processing to methods matching a regex

Decompilation is not always perfect; obfuscated code may be difficult to read. Some native code cannot be analyzed. Analysis of large APKs may consume significant memory.

androguard was developed by Anthony Desnos starting around 2012. It became one of the primary open-source tools for Android application security analysis.

apktool(1), jadx(1), dex2jar(1)

Source code · Documentation