|  | 
|  | 1 | +# Androick | 
|  | 2 | + | 
|  | 3 | +Androick is a python tool to help in forensics analysis on android. | 
|  | 4 | +Put the package name, some options and the programm will download automatically apk, datas, files permissions, manifest, databases and logs. | 
|  | 5 | +It is easy to use and avoid all repetitives tasks ! | 
|  | 6 | + | 
|  | 7 | + | 
|  | 8 | +## Installation | 
|  | 9 | +Simply clone this git repository | 
|  | 10 | + | 
|  | 11 | +### Dependencies | 
|  | 12 | + | 
|  | 13 | +#### Python | 
|  | 14 | +-	python >= 2.6 | 
|  | 15 | +-	[Python-magic](https://github.com/ahupp/python-magic/) | 
|  | 16 | + | 
|  | 17 | +#### SDK | 
|  | 18 | +-	aapt | 
|  | 19 | +-	adb | 
|  | 20 | +-	hprof-conv | 
|  | 21 | + | 
|  | 22 | +#### Others | 
|  | 23 | +-	a rooted device | 
|  | 24 | +-	sqlite3	 | 
|  | 25 | + | 
|  | 26 | +## How to use | 
|  | 27 | +	1) show help message | 
|  | 28 | +		./androick.py -h | 
|  | 29 | + | 
|  | 30 | +	2) show informations | 
|  | 31 | +		./androick.py -a | 
|  | 32 | + | 
|  | 33 | +	3) select device to use | 
|  | 34 | +		./androick.py -D serial_number PACKAGE_NAME_1 PACKAGE_NAME_2 ETC... | 
|  | 35 | +		./androick.py --device serial_number PACKAGE_NAME_1 PACKAGE_NAME_2 ETC... | 
|  | 36 | + | 
|  | 37 | +	4) find package name | 
|  | 38 | +		./androick.py [-v] -f <Part of package name> | 
|  | 39 | + | 
|  | 40 | +	5) download all related things of application | 
|  | 41 | +		./androick.py [-v] -A PACKAGE_NAME_1 PACKAGE_NAME_2 ETC... | 
|  | 42 | +	 | 
|  | 43 | +	6) select only things you want extract | 
|  | 44 | +		./androick.py [-v] [-d --datas] [-s --sql] [-m --manifest] [-p --permissions] [-m --memory-dump]  [-l --logs] [--keyLogs="keywords"] PACKAGE_NAME_1 PACKAGE_NAME_2 ETC... | 
|  | 45 | + | 
|  | 46 | +	7) how to use option --keyLogs | 
|  | 47 | +			--keyLogs="key1,key2,key3" | 
|  | 48 | +		if more than one package | 
|  | 49 | +			--keyLogs="key1_P1,key2_P1|key1_P2|key1_P3,key2_P3,key3_P3" | 
|  | 50 | +		 | 
|  | 51 | +		Example : | 
|  | 52 | +			./androick.py -l --keyLogs="antivirus,protection|music,licence" com.package.antivirus com.music.player | 
|  | 53 | +	 | 
|  | 54 | +	/!\ The memory dump option will mostly not works with production builds | 
|  | 55 | + | 
|  | 56 | +## Author | 
|  | 57 | +Written by Florian Pradines (Phonesec), this tool is a referenced OWASP Android security project since 2013. | 
|  | 58 | + | 
|  | 59 | +You can contact me via my [website](http://florianpradines.com) | 
|  | 60 | + | 
|  | 61 | +## Licence | 
|  | 62 | +	This program is free software: you can redistribute it and/or modify | 
|  | 63 | +	it under the terms of the GNU General Public License as published by | 
|  | 64 | +	the Free Software Foundation, either version 3 of the License, or | 
|  | 65 | +	(at your option) any later version. | 
|  | 66 | + | 
|  | 67 | +	This program is distributed in the hope that it will be useful, | 
|  | 68 | +	but WITHOUT ANY WARRANTY; without even the implied warranty of | 
|  | 69 | +	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the | 
|  | 70 | +	GNU General Public License for more details. | 
|  | 71 | + | 
|  | 72 | +	You should have received a copy of the GNU General Public License | 
|  | 73 | +	along with this program.  If not, see <http://www.gnu.org/licenses/>. | 
0 commit comments