sh4hin / androl4b Goto Github PK

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

mobile-security android malware-analyzer penetration-testing reverse-engineering application-security

androl4b's Introduction

Androl4b

AndroL4b is an android security virtual machine based on ubuntu-mate includes the collection of latest framework, tutorials and labs from different security geeks and researchers for reverse engineering and malware analysis.

What's new in Androl4b v.3?

Tools are updated
New tools and lab added
Upgraded to Ubuntu mate 17.04
Some cleanup

Mega Part 1

Mega Part 2

Google Drive Part 1

Google Drive Part 2

Follow me

Username : andro

Password : andro

Emulator Pin: 1234

Tools

Radare2 Unix-like reverse engineering framework and commandline tools

Frida Inject JavaScript to explore native apps on Windows, macOS, Linux, iOS, Android, and QNX.

ByteCodeViewer Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger)

Mobile Security Framework (MobSF) (Android/iOS) Automated Pentesting Framework (Just Static Analysis in this VM)

Drozer Security Assessment Framework for Android Applications

APKtool Reverse Engineering Android Apks

AndroidStudio IDE For Android Application Development

BurpSuite Assessing Application Security

Wireshark Network Protocol Analyzer

MARA Mobile Application Reverse engineering and Analysis Framework

FindBugs-IDEA Static byte code analysis to look for bugs in Java code

AndroBugs Framework Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications

Qark Tool to look for several security related Android application vulnerabilities

Labs:

Damn Insecure and vulnerable App for Android(DIVA) Vulnerable Android Application

InsecureBankv2 Vulnerable Android Application

Android Security Sandbox An app showcase of some techniques to improve Android app security

GoatDroid A fully functional and self-contained training environment for educating developers and testers on Android security

Sieve: A Password Manager App, showcasing some common Android vulnerabilities

androl4b's People

Contributors

Stargazers

Watchers

Forkers

drptbl sunnyjiang lucabongiorni march0 sunyinhuicoding pandazheng b1gw00d hxp2k6 micxu dansesu curehsu shuixi2013 mylovetop iamckn-mobile stevenliuit tobey123 whb224117 tunelko jiangzhonghui securitywarrior rajivraj paran0ids0ul ruikuang h3len odin1314 lian1988 shinyvince linkp2p leoaccount v0re m0x14o workidea varthdader jmdebugger kipyegonmark ltoad droid-sec qingchen1984 mingyong lehakim unforeseenocean hazer redteamcaliber coffiner jumbo-wjb tanxulong yaoyi2008 junejuly sigma-random hackertool r00tak vsloong hawking2013 dromero1452 emorasoul peterdocter awesome-security kibercthulhu urwithajit9 pyq881120 deki0r 0x3301 izogain xtiankisutsa 0xb1ab1a shekkbuilder themenucha lorien22 chillia319 rlgnszzz endliang fishso vaginessa lee-0x00 securextools mxr00t y0d4a ztencmcp olivierh59500 manfis hscale fouroctets nothrowforwardit iicudsc mrmugiwara aosp-mousquetaires dnhdang94 jeperez mgcfish umutbasal zerocool443 ahen0910 sammysaita qqgirllianxin alessandrocarrese hcheruku hotelzululima guiguzi1110 davedacoda s4yhell0

androl4b's Issues

md5 checksum

can you provide md5sum for the image?

drozer could not find or compile a required extension library

I am getting the following error with the drozer 'scanner.provider.finduris' command.
% run scanner.provider.finduris -a jakhar.aseem.diva
Scanning jakhar.aseem.diva...
drozer could not find or compile a required extension library.

Posts suggested to run 'make apks', but that also fails and throws this exception:
com.android.dx.cf.iface.ParseException: bad class file magic (cafebabe) or version (0034.0000)
....
....
...while parsing FileUtil.class

The Java version in the Androl4b VM is:
openjdk version "1.8.0_151"

blinking cursor at boot up

I get to this screen and then it goes away and all I see is a blinking cursor

integrity of files failed - md5sum: WHY?

MD5SUM
6710c2b1f583644a8b03e4301d13cc1c Androl4b.ova.7z
3e8c42edc0b336325f8a5dd2d45549b3 Androl4b.ova.7z.001
0d9a3bfadb122f357bfa274853ce2592 Androl4b.ova.7z.002

I am use cat to merge files, but this had damaged.

Please a help.

Tools request - Android.

It will be great if you can include these tools in next release. I was able to install them successfully on the current branch.

jadx - https://github.com/skylot/jadx
gplaycli - https://github.com/matlink/gplaycli

Trouble opening ZIP

Any way I open the first part of the zip to extract files, it says it's corrupted. Am I doing something wrong?

能否加我qq：348925656 找你合作

Use Vagrant

May I suggest that you distribute a Vagrant-file instead of a binary image?
I find the idea for an android pen testing vm compelling, but have no interest in downloading some untrusted vm to my machine.

no Drozer in Androl4b

Logs

It is better to clean on your logs in system

Adding APK Studio?

It would be nice to add APK studio. It would help whoever wants to attach a debugger to decompiled codes

vm login

andro/androlab not logging me in

Suggestion about downloads

It would be cool if you hosted somewhere other than mega too as you can't download the VM all at once because the files too big with a free mega account

Fix first link to Mega

Hi, the first link to Mega is a link to Google Drive. If you can fix it, it would be great!

Not an issue, but requesting knowledge

Hi. Would you share how you are running that android emulator inside the VM? I am trying to setup a newer version of android, but am having issues emulating the VM.

Thanks!

Supported Virtualization Software

The VM image seems to be exported as OVA 2, which VMware Player 14 does not support.
I tried a work around, by importing on VirtualBox, and then exporting as OVA 1.0, that VMware takes. But still, the VM does not start correctly. Not sure if this is an issue with the version or in my env. In any case, I'd suggest to add a note in the readme stating that the VM is for use on VirtualBox only if that's the case.