Awesome REA
中文Star on GitHubStar1.1k stars
Star on GitHubStar1.1k stars

Tool

APKiD

PEiD-style identifier for Android packages from RedNaga. It scans APK and DEX files, nested ZIP entries and the native ELF libraries, PE DLLs and resources inside them with YARA rules, using the yara-python-dex DEX module, and reports the compilers, packers, protectors, obfuscators and anti-VM or anti-disassembly tricks it recognizes, per file or as JSON. Optional tracker rules attributed to the Exodus API flag embedded tracking SDKs; APKiD only identifies, and does not unpack or deobfuscate anything.

Targets
App
Category
Android tools
Relationship
Foundation tool
Sources reviewed

Requirements & limits

  • Latest release at review: 3.1.0, tagged and uploaded to PyPI on 2026-04-09; the reviewed master commit of 2026-10-07 adds later rules. pip install apkid pulls in yara-python-dex>=1.0.1. setup.py declares no python_requires and its classifiers name Python 3.6 and 3.7, while Travis CI uses 3.9 and the Dockerfile uses Python 3.11; on Windows the README pins Yara 3.11.0 and a separately built yara-python-dex wheel.
  • Provide APK, DEX or directory inputs you are entitled to examine. By default the CLI picks entries by file magic, searches nested ZIPs two levels deep, scans entries up to 100 MB and stops each YARA scan after 30 seconds; tracker rules are compiled separately and apply only with --scan-trackers. The README's usage block still shows v2.1.2 and omits --scan-trackers and --include-types.
  • Detection is signature-based, so unrecognized or modified packers and protectors go unreported; the README asks for unknown samples by file hash to write new rules. Tests compile and lint the rules and scan generated ZIP files; the repository has no sample corpus.
  • Dual-licensed: GPL-3.0, or a perpetual commercial license that allows distributing APKiD binaries and rules in commercial products but no source redistribution, which is why GitHub reports NOASSERTION.

About this entry

The description was reviewed against primary sources.

Report an outdated entry Suggest a translation fix

Primary sources

  1. README.md GitHub · rednaga/APKiD · Revision 5cb6b25
  2. apkid/main.py GitHub · rednaga/APKiD · Revision 5cb6b25
  3. apkid/apkid.py GitHub · rednaga/APKiD · Revision 5cb6b25
  4. apkid/rules.py GitHub · rednaga/APKiD · Revision 5cb6b25
  5. apkid/rules/apk/trackers.yara GitHub · rednaga/APKiD · Revision 5cb6b25
  6. setup.py GitHub · rednaga/APKiD · Revision 5cb6b25
  7. apkid/__init__.py GitHub · rednaga/APKiD · Revision 5cb6b25
  8. Dockerfile GitHub · rednaga/APKiD · Revision 5cb6b25
  9. .travis.yml GitHub · rednaga/APKiD · Revision 5cb6b25
  10. tests/test_scanner.py GitHub · rednaga/APKiD · Revision 5cb6b25
  11. LICENSE.GPL GitHub · rednaga/APKiD · Revision 5cb6b25
  12. LICENSE.COMMERCIAL GitHub · rednaga/APKiD · Revision 5cb6b25
  13. https://github.com/rednaga/APKiD/releases/tag/v3.1.0
  14. https://pypi.org/project/apkid/3.1.0/

More in Apps

All 174 entries in Apps

↑↓ move↵ open⌘↵ new tab