OWASP APK DISSECTOR - Revision history

Dibyendu Sikdar at 03:37, 5 April 2017

2017-04-05T03:37:23Z

Dibyendu Sikdar at 03:06, 5 April 2017

2017-04-05T03:06:47Z

Dibyendu Sikdar at 02:59, 5 April 2017

2017-04-05T02:59:33Z

Dibyendu Sikdar at 02:42, 5 April 2017

2017-04-05T02:42:47Z

Dibyendu Sikdar at 02:41, 5 April 2017

2017-04-05T02:41:59Z

Claudia casanovas: Created page with "=Main=
link=
{| style="padding: 0;margin:0;margin-top:10px;t..."

2017-03-24T01:26:50Z

Created page with "=Main= <div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">link=</div> {| style="padding: 0;margin:0;margin-top:10px;t..."

New page

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Droid 10==

# OWASP Droid10

OWASP Droid10 is an opensource handheld based (android) web pen testing tool. It can scan for web application vulnerability from any android device.Some features can be customized according to testers need. Droid10 is a handheld system based (android) web pen testing tool. It can scan for web application bugs from any android device. The world is moving towards handheld systems . There isn't any mobile based tool from owasp to do web app pen testing from handheld systems . This app is going to be OWASP first ever mobile app to test web app security. Apart from this this tool will be developed in such a way that it can be customized in an easy way .User supplied vectors can be added easily . It will have encoders,decoders and they can be integrated with different modules easily example (Url encoding with XSS Module). In short this project will have the combined features of modern day scanners as an a mobile app .

Some cool features list:

* Automated Scan - Automated Scan to find vulnearabilities
* Live Scan - Live View of results against attack vectors
* Repeater - Request / Response Tester

You too can extend the project

* Easy to add new modules
* Easy to add new vectors
* Easy to maintain

And this is still in development phase!

This is on [OWASP](https://www.owasp.org/index.php/OWASP_Droid10_Project) website. This project will soon be available in Google's Play Store.

If you would like to be a contributor to this project please [contact me](http://dibsy.github.io/).

Download and import this project in Android Studio to test all its features

[[File:Newdroid10.PNG]][[File:droid103.png]]

==Description==
The file will be available in form of apk file which runs on android device . This file can be downloaded from the github / owasp site / Google's app store .

==Licensing==

This program is free software: you can redistribute it and/or modify it under the terms of the [http://www.gnu.org/licenses/agpl-3.0.html link GNU Affero General Public License 3.0] as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Project Resources ==
Github[https://github.com/dibsy/OWASP_Droid10]

== Project Leader ==

[mailto:dibyendu.coder@gmail.com Dibyendu Sikdar]

== Related Projects ==
[[OWASP_JSEC_CVE_Details]]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
| align="center" valign="top" width="50%"| [[File:Owasp-breakers-small.png|link=Breakers]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [[File:Agplv3-155x51.png|link=http://www.gnu.org/licenses/agpl-3.0.html|Affero General Public License 3.0]]
|-
| colspan="2" align="center" | [[File:sillycon.png|link=http://www.sillycon.org]]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News ==

|}

=FAQs=



==How can I participate in your project?==
All you have to do is make the Project Leader's aware of your available time to contribute to the project. It is also important to let the Leader's know how you would like to contribute and pitch in to help the project meet it's goals and milestones. There are many different ways you can contribute to an OWASP Project, but communication with the leads is key.

==If I am not a programmer can I participate in your project?==
Yes, you can certainly participate in the project if you are not a programmer or technical. The project needs different skills and expertise and different times during its development. Currently, we are looking for researchers, writers, graphic designers, and a project administrator. See the Road Map and Getting Involved tab for more details.

= Acknowledgements =
==Contributors==



The first contributors to the project were:

* [mailto:dibyendu.coder@gmail.com Dibyendu Sikdar]

= Road Map and Getting Involved =

==Roadmap==
Currently all owasp tools are running on pc . The world is moving towards handheld systems . There isn't any mobile based tool from owasp to do web app pen testing from handheld systems . This app is going to be OWASP first ever mobile app to test web app security.
Apart from this this tool will be developed in such a way that it can be customized in an easy way .User supplied vectors can be added easily . It will have encoders,decoders and they can be integrated with different modules easily example (Url encoding with XSS Module). In short this app will have the combined features of modern day scanners with an added mobility & easy customization feature . The application will be opensource . So others can fork and extend and contribute easily .

==Getting Involved==

Some of the ways you can help are as follows:

===Coding===
===Localization===
===Testing===
===Feedback===

=Minimum Viable Product=

The scanner has various module . Each module is independent of other . The project will be extended by adding more modules to it.

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

@@ Line 5: / Line 5: @@
 {| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
 | valign="top"  style="border-right: 1px dotted gray;padding-right:25px;" |
+OWASP APK Dissector is an automated tool to perform static security analysis of Mobile Application. The tool is uses useful opensource application and tries to automate the process of security analysis. Right now it can perform automation on APK files only and there is a plan to enrich its features.
 == OWASP Apk Dissector  ==
-−
-# OWASP Apk Dissector
+[[File:Gitpic.png]](https://sourceforge.net/projects/apkdissector/files/latest/download)
 Basic useful feature list:
@@ Line 21: / Line 18: @@
   * Decompile the DEX files to JAVA source files (.dex to .java) [ New feature in v2.0 ]
-## How to use this application ?
+How to use this application ?
-.From source
+ * By building from git source
-.Executable Jar
+ * - You can clone/download the source and import in Eclipse and then run the ApkDissector.java file
-.You can clone/download the source and import in Eclipse and then run the ApkDissector.java file
+Usage
 Double click and open the jar file
@@ Line 36: / Line 33: @@
   * Decompile APK/DEX - Decompile and extracts the contents on the APK file.
-## How to decompile an APK file ?
+How to decompile an APK file ?
 Once you click decompile it will create a folder called extract and inside that you will find a folder having same name as the file where you will get all the extracted contents of the apk
@@ Line 44: / Line 41: @@
   * All the extracted files will be with in extracts directory within the folder name <apkfileName>.apk
-## How to decompile the DEX file ?
+How to decompile the DEX file ?
   * Select APK/DEX - Click this button to browse and select the DEX file which will be located inside the extracts/<apkfileName>.apk directory
   * Decompile APK/DEX - Click this button to  decompile and extracts the contents on the DEX file.
   * All the extracted files will be under extracts within <apkFilename.apk>\DEX_extracts

@@ Line 53: / Line 53: @@
 == Project Resources ==
-Github[https://github.com/dibsy/OWASP_Droid10]
+Github[https://github.com/dibsy/ApkDissector]
 == Project Leader ==

@@ Line 113: / Line 113: @@
 ==Roadmap==
 ==Getting Involved==
@@ Line 124: / Line 122: @@
 ===Testing===
 ===Feedback===
 =Minimum Viable Product=

@@ Line 98: / Line 98: @@
     | colspan="2" align="center"  | [[File:Agplv3-155x51.png|link=http://www.gnu.org/licenses/agpl-3.0.html|Affero General Public License 3.0]]
     |-
-    | colspan="2" align="center"  | [[File:sillycon.png|link=http://www.sillycon.org]]
     |}

@@ Line 7: / Line 7: @@
-==OWASP Droid 10==
+== OWASP Apk Dissector  ==
-# OWASP Droid10
+# OWASP Apk Dissector
-OWASP Droid10 is an opensource handheld based (android) web pen testing tool. It can scan for web application vulnerability from any android device.Some features can be customized according to testers need. Droid10 is a handheld system based (android) web pen testing tool. It can scan for web application bugs from any android device. The world is moving towards handheld systems . There isn't any mobile based tool from owasp to do web app pen testing from handheld systems . This app is going to be OWASP first ever mobile app to test web app security. Apart from this this tool will be developed in such a way that it can be customized in an easy way .User supplied vectors can be added easily . It will have encoders,decoders and they can be integrated with different modules easily example (Url encoding with XSS Module). In short this project will have the combined features of modern day scanners as an a mobile app .
+## Java Based APK Decompiler
-Some cool features list:
+Basic useful feature list:
-  * Automated Scan - Automated Scan to find vulnearabilities
+  * Purely Java Based
-  * Live Scan - Live View of results against attack vectors
+ * Analyze the contents of the APK file
-  * Repeater - Request / Response Tester
+  * Decompile and extract the contents of the APK file
+  * Decompile the DEX files to JAVA source files (.dex to .java) [ New feature in v2.0 ]
- * Easy to add new modules
+. Download and extract the zip file containing the executable Jar file from https://sourceforge.net/projects/apkdissector/
-And this is still in development phase!
+Double click and open the jar file
-This is on [OWASP](https://www.owasp.org/index.php/OWASP_Droid10_Project) website. This project will soon be available in Google's Play Store.
+ * Select APK/DEX - Click this button to browse and select the APK file.
-If you would like to be a contributor to this project please [contact me](http://dibsy.github.io/).
-Download and import this project in Android Studio to test all its features
+## How to use this project ?
-[[File:Newdroid10.PNG]][[File:droid103.png]]
+If your are trying to fork or extented the project here are some information regarding this project.
 ==Description==
 The file will be available in form of apk file which runs on android device . This file can be downloaded from the github / owasp site / Google's app store .