Tool
Andromeda
Interactive command-line tool by Lasha Khasaia for first-pass reverse engineering of Android APKs, written in C/C++ for speed. It unpacks an APK, parses AndroidManifest.xml, the signing certificate and the DEX files at the archive root, then opens a shell with tab completion for listing permissions, activities, services, receivers and likely entry points, listing and searching classes, methods and strings, disassembling a method's Dalvik bytecode and listing, hashing or extracting native libraries. Further commands report whether the app is debuggable, a creation date taken from its certificate, URL and email strings, and a guess at whether it was written in Java, Kotlin or Xamarin .NET.
- Targets
- App
- Category
- Android tools
- Relationship
- Foundation tool
- Sources reviewed
Requirements & limits
- Inactive early-stage project: the README says the tool is in the early development stage, and its 29 commits run from 2019-09-22 to the reviewed master commit of 2020-03-14, which removes an editor folder. There are no tags or releases, and GitHub does not mark the repository archived. Documenting the tool is still a TODO; the README shows the command list only as a screenshot, and the author notes very limited Android experience.
- Built from source with make, which compiles everything with clang++ in C++17 mode (-std=c++1z) and debug flags (-g -O0), linking zlib and OpenSSL's libcrypto; the README's apt commands install clang, libz-dev and libssl-dev. The Makefile adds libstdc++fs on Linux and Homebrew [email protected] paths on macOS; Windows is not covered.
- Input is an APK supplied by the user, run as ./bin/andromeda app.apk. The path must end in .apk, and the tool stops if the unpacked archive lacks AndroidManifest.xml or a DEX file at its root, so bare DEX files are not accepted. The repository contains no sample APKs.
- Apache-2.0 license. third_party.md lists the bundled libraries with their own licenses: Google's dexter slicer (Apache-2.0), Claud Xiao's AxmlParser, linenoise-cpp, miniz and pugixml; the tree also bundles the digestpp hashing headers.
About this entry
The description was reviewed against primary sources.
Primary sources
- README.md GitHub · secrary/Andromeda · Revision 50fdaaf
- Andromeda/Andromeda.cpp GitHub · secrary/Andromeda · Revision 50fdaaf
- Andromeda/APK.hpp GitHub · secrary/Andromeda · Revision 50fdaaf
- Andromeda/patterns.hpp GitHub · secrary/Andromeda · Revision 50fdaaf
- Makefile GitHub · secrary/Andromeda · Revision 50fdaaf
- third_party.md GitHub · secrary/Andromeda · Revision 50fdaaf
- slicer GitHub · secrary/Andromeda · Revision 50fdaaf
- LICENSE GitHub · secrary/Andromeda · Revision 50fdaaf
- https://github.com/secrary/Andromeda/commits/50fdaaf59328fb3430d76d92c6319d2232766f7a
More in Apps
- Dex-Editor-Android · Tool
- smali/baksmali · Tool
- dalvikus · Tool
- paranoid-deobfuscator · Tool
- Katalina · Tool
- Doldrums · Tool