1. Project Overview

A mobile app information collection and scanning tool for HW action, red team, penetration testing teams, can help penetration testers, attack team members, red team members quickly collect mobile app or static web site key asset information and provide basic information output, such as: Title, Domain, CDN, fingerprint information, status information, etc.

2. Open Source License

Licensed under GPL-3.0

3. Screenshots

Partial Screenshots

4. Feature Overview

Applicable scenarios

• Daily penetration testing against APPs to collect key asset information, such as URL addresses, IP addresses, keywords, etc.
• Large-scale attack and defense exercise scenarios against APPs to collect key asset information, such as URL addresses, IP addresses, keywords, etc.
• Collecting URL addresses, IP addresses, keywords, etc. information from web site source code (can be open-source code or right-click web page source code save as)
• Collecting URL addresses, IP addresses, keywords, etc. information from H5 pages
• Collecting key information from a specific APP

Function introduction:

• Supports directory-level batch scanning
• Supports information collection for DEX, APK, IPA, MACH-O, HTML, JS, Smali, ELF files
• Supports automatic download and one-click information collection for APK, IPA, H5 files
• Supports custom request headers, request messages, request methods
• Supports custom rules, scan rules can be customized at will
• Supports custom ignoring resource files
• Supports custom configuring Android shell rules
• Supports custom configuring middleware rules
• Supports detecting Android shell, IPA official shell
• Supports collecting information for IP addresses, URL addresses, middleware (JSON components and XML components)
• Supports collecting contents under corresponding package names for Android
• Supports network sniffing function, provides basic information output
• Supports Windows systems, MacOS systems, *nux series systems
• Has simple AI recognition function, can quickly filter third-party URL addresses
• Fingerprint recognition module
• Add international language package
• One-click automatic repair for APK files
• Automatically perform shell removal after shell detection

5. Tech Stack

Environment explanation

• Apk file parsing requires JAVA environment, JAVA version 1.8 and below
• Python3 runtime environment

Directory explanation

AppInfoScanner
    |-- libs  Program's core code
        |-- core
            |-- __init__.py Global configuration information
            |-- parses.py Used to parse static information in files
            |-- download.py Used to automatically download APP or H5 pages
            |-- net.py Used to perform network sniffing and get basic information
        |-- task
            |-- __init__.py Directory initialization file
            |-- base_task.py Unified task scheduling center
 			|-- android_task.py Used to handle Android-related tasks
            |-- download_task.py Used to handle automatic download of APP or H5 tasks            
			 |-- ios_task.py Used to handle iOS-related tasks
            |-- net_task.py Used to handle network sniffing-related tasks
            |-- web_task.py Used to handle Web-related tasks, such as webpage right-click source code, H5 static information
​    |-- tools Program-dependent tools
​        |-- apktool.jar Used to decompile apk files, may need to switch platforms themselves
​        |-- baksmali.jar Used to decompile dex files, may need to switch platforms themselves
​        |-- strings.exe Used to get IPA string information on Windows 32
​        |-- strings64.exe Used to get IPA string information on Windows 64
​    |-- __init__.py Directory initialization file 
    |-- app.py Main running program
​    |-- config.py Entire program configuration file
​    |-- README.md Program usage instructions
    |-- requirements.txt Libraries required by the program
    |-- update.md Program historical version information