Droid Hunter Android Vulnerability Analysis Tool

Droid Hunter is an Android application vulnerability analysis and penetration testing tool designed to help security researchers inspect APK files and identify potential security issues. It combines application metadata inspection, code extraction, decompilation, and pattern-based information leakage detection in one workflow.

The tool supports Android APK analysis, including disassembling application code and extracting Java-related artifacts for further investigation. It can also be used for authorized penetration testing of connected Android devices.

Droid Hunter Features

• Application information: Inspect available metadata and details about an Android application package.
• Smali disassembly: Disassemble Android application code for closer inspection.
• APK decompilation: Examine application components and code through supported decompilation tools.
• Class extraction: Extract class files for additional analysis.
• Java code extraction: Recover readable code representations where supported by the application and its compiled artifacts.
• Pattern-based information leakage detection: Search for strings and patterns that may indicate exposed information or embedded secrets.
• Device penetration testing: Run the tool’s device-testing mode against an Android device within an authorized testing environment.

For another Android security project, see AhMyth Android RAT. Use Android testing tools only on applications and devices you own or have explicit permission to assess.

How to Install Droid Hunter

Droid Hunter is hosted on GitHub. Clone the repository and move into the project directory:

git clone https://github.com/hahwul/droid-hunter.git
cd droid-hunter

Install Ruby Dependencies

Install the Ruby gems used by the project:

gem install html-table
gem install colorize

You may need appropriate Ruby and RubyGems permissions for installation. Check the repository documentation for compatibility requirements before setting up the environment.

Configure External Tools

Droid Hunter relies on external utilities for Android package analysis. Open config/config.rb and check the configured paths for the tools required by your environment.

# Example paths from the project configuration
$p_adb = "/usr/bin/adb"
$p_aapt = "/usr/bin/aapt"
$p_dex2jar = File.dirname(__FILE__) + "/../ex_tool/dex2jar-0.0.9.15/dex2jar.sh"
$p_apktool = File.dirname(__FILE__) + "/../ex_tool/apktool/apktool_2.3.1.jar"
$p_jad = File.dirname(__FILE__) + "/../ex_tool/jad/jad"
$p_grep = "/bin/grep"
$p_unzip = "/usr/bin/unzip"
$p_sfilter = File.dirname(__FILE__) + "/../string_filter"

These paths are examples based on the supplied configuration and may not match your system. Verify that each required utility exists and update its path as needed. Tool versions and installation instructions may have changed since this project was released.

How to Run Droid Hunter

Start the application from the repository directory with Ruby:

ruby dhunter.rb

Use the built-in help option to review the commands supported by your checkout:

ruby dhunter.rb --help

Analyze an Android APK

Use the APK analysis option to inspect an application package:

ruby dhunter.rb --apk sample.apk

Replace sample.apk with the path to an APK you are authorized to examine. The original usage documentation also lists support for supplying multiple APK filenames, although the exact syntax should be verified against the installed version.

Run Device Penetration Testing

The documented device-testing option is --pentest. Its usage depends on the device identifier and the project’s expected Android Debug Bridge setup.

ruby dhunter.rb --pentest device

Replace device with the appropriate identifier accepted by your version of Droid Hunter. Connect only test devices you are authorized to assess, and verify the command syntax with the help output before running a test.

Development Roadmap

The project’s original to-do list identified several planned improvements:

• Add a vulnerability-scanning module.
• Update the string-matching patterns.
• Introduce an intent diagram to help visualize application intents.

These items describe the project’s stated roadmap and should not be interpreted as features available in every release.

Droid Hunter Screenshots

The following screenshots from the original article illustrate the tool’s interface:

For additional Android security analysis, explore the forensic toolkit collection for tools and resources that can support broader investigation workflows.

Project repository: Droid Hunter on GitHub