Dynamic analysis tool for Android applications that monitors runtime behavior, detects information leaks, and visualizes app activity.
DroidBox is a dynamic analysis tool for Android applications that monitors runtime behavior during execution in an emulator. It tracks security-relevant operations like network activity, file access, information leaks, and cryptographic API usage to help identify malicious or suspicious app behavior. The tool generates detailed reports and visualizations to assist in understanding app interactions.
Security researchers, malware analysts, and Android developers focused on app security who need to analyze runtime behavior of Android applications, particularly for detecting malicious activity or information leaks.
DroidBox provides comprehensive runtime monitoring without requiring app source code, offers visualization of temporal behavior patterns, and detects multiple types of security vulnerabilities through dynamic execution analysis in a controlled emulator environment.
Dynamic analysis of Android apps
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Tracks diverse runtime activities like network data, file operations, and cryptographic API usage, offering detailed insights without source code access.
Identifies information leaks through network, file, and SMS channels, crucial for security auditing and malware analysis.
Generates temporal operation timelines and package similarity treemaps, helping researchers visualize and compare app behavior patterns.
Operates dynamically on APKs in an emulator, making it suitable for analyzing third-party or compiled applications.
Tested only on Android 4.1.2, which is an old version; this limits compatibility with modern apps and newer Android APIs.
Requires manual emulator setup and termination via Ctrl-C, lacking automation for batch processing or seamless integration into workflows.
The README provides basic setup but lacks advanced guides, troubleshooting tips, or detailed interpretation of generated reports.