A collection of tools and scripts for unpacking and analyzing protected Android applications, originally presented at Defcon 22.
Android Unpacker is a collection of security tools and scripts designed to unpack and analyze protected Android applications. It helps security researchers bypass commercial packers like APKProtect, Bangcle, LIAPP, and Qihoo Packer to examine the underlying code of obfuscated applications. The project originated from a Defcon 22 presentation on Android Hacker Protection Level 0.
Security researchers, malware analysts, and mobile application reverse engineers who need to examine protected Android applications for security assessment or malware analysis purposes.
Provides specialized, practical tools that work directly against real-world Android packers without heavy dependencies, with a focus on education and hands-on research in mobile application security.
Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
The native-unpacker runs without gdb dependencies for supported packers like APKProtect and Bangcle, offering a streamlined approach compared to script-based methods.
Includes hide-qemu hacks to bypass packer detection of debuggers and emulators, specifically tailored for APKProtect, enhancing stealth during analysis.
Comes with Defcon 22 presentation materials on Android Hacker Protection Level 0, providing context and learning aids for reverse engineering concepts.
Offers corellium-android-unpacking for realistic, automated dynamic unpacking, which is more effective against sophisticated protections than static methods alone.
Last updated in 2020, the toolkit only covers specific packers like APKProtect and Bangcle, making it potentially ineffective against newer or evolving protection mechanisms.
Tools like the gdb-scripts require gdb and adb setup, which can be challenging for users unfamiliar with debugging environments, and the README lacks detailed installation guides.
Beyond presentation slides, there's minimal documentation on tool usage, forcing users to rely on code inspection and trial-and-error for implementation.