charles2gan/GDA-android-reversing-Tool

𝕬 Interactive Operation:
    1. Cross-references for strings, classes, methods and fields;
    2. Searching for strings, classes methods and fields;
    3. Comments for java code;
    4. Rename methods,fields and classes;
    5. Save the analysis results in gda db file.
    ...
  
𝕭 Utilities for Assisted Analysis:
    1. Extracting DEX from ODEX;
    2. Extracting DEX from OAT;
    3. XML Decoder (Component filter);
    4. Algorithm tool(Support rolling encryption and almost all popular encryption algorithms);
    5. Device memory dump(Dump so, odex, dex, oat file);
    6. Path solving;
    7. Static vulnerability scanner;
    ...
    
𝕮 Good Features:
    1. Brand new dalvik decompiler in c++ with friendly GUI.
    2. Packers Recognition.
    3. Multi-DEX supporting.
    4. De-obfuscate.
    5. Malicious Behavior Scanning by API chains.
    6. Static vulnerability scanner based on stack state machine and dynamic rule interpreter.
    7. Taint analysis to preview the behavior of variables.
    8. Taint analysis to source the variables.
    9. APIs view with x-reference
    10. Deep URL extraction.
    11. Association of permissions with modules.
    12. Apk Forensics Analysis.
    13. Dual decompiler mode.
    14. Smart Rename.
    15. Device memory data dump, DEX file dump by memory searching.
    16. Support Frida to hook and call the selected method or class.
    17. Privacy leaking scanning.
    18. Sensitive Infomation extraction.
    19. Multi-DEX Merge.
    20. Path solving based on low-level intermediate representation(LIR).
    21. Junk instruction clearing.
    22. Support call-graph view.
    23. Smali instruction patch, apk repack and install.
    24. Support subclass and parentclass view.
    25. Support translation of the strings.
    ...

>gda.exe
  -sh src_file      --> start a Shell
  -sv src_file port --> start a Server
  -h                --> help
------------------------------------------------------------
>gda.exe -h
   Usage:gda.exe [option] [apk_file] [-o output_file]
      option:
      -h help
      -x show AndroidManifest.xml
      -p app package name
      -P permission
      -i apk base info
      -a attack surface
      -k packer
      -s all the strings
      -S referenced strings
      -c cert information
      -d decompile all code
------------------------------------------------------------

>gda.exe -sv text.apk 12345
  File Loading...
  GDA Server listening on port 12345...

>client_gda.py help

------------------------------------------------------------

>gda -sh test.apk
  >
  >
  GDA Shell >help
        subcmd [-args]... [-t filter_string]
        help       --> shell command help
        set -o file--> set output file
        exit/q     --> to exit
        axml       --> content of androidmainfest.xml
        binfo      --> apk base info
        pname      --> apk package name
        permission --> permissions of APP
        header n   --> header of the n-st dex file
        attsf      --> attacksurface
        packer     --> packer
        cert       --> certifacate
        appstr     --> strings referenced by methods
        malscan    --> malcious behavior
        sensinf    --> sensitive infos
        interface  --> list interface classes
        uri        --> url,path etc.
        native     --> list native methods
        api        --> list api methods
        listm cname--> list the methods of class(dot)
        sclass cidx--> list subclasses by class index(hex)
        pclass cidx--> list parent class by class index(hex)
        dasm option--> disasembly a method
            option:  @type(e.g., dasm method@0045F0)
                    -n name(signature name,e.g.,"Lcom/base/Binary;->add(Lcom/base/Binary;)V")
        dec option--> decompile a method or class,
            option:  @type (class/method type), e.g., dec method@21f
                    -c[-m] name(class/method signature name, e.g. , "Lcom/base/Binary;")
                    -a filepath(decompile the all classes)
        find option--> search object by name(match partial/regex)
             option: -c[-m][-M][-d][-s][-i][-a] name, e.g., find -C Frame (regex:~"Frame.*")
            |-c(match class name)  |-C(match class name with package)
            |-m(match method name) |-M(match method name with package)
            |-d(match field name)  |-i(match api method name)
            |-s(match string)      |-a(match all[classes,methods,field and strings]
        xref option --> search cross-reference of object
             option(1): @type (method/class/field/string type), e.g. ,xref string@22e
             option(2): -c[-m][-M][-d][-s][-i][-a] name(match partial), e.g. ,xref -m send
            |-c(xref of class name)  |-s(xref of string)
            |-m(xref of method name) |-r(xref of resource name)
            |-f(xref of field name)  |-a(xref of all[classes,methods,field and strings]