Androguard

is an open-source tool used for analyzing and reverse engineering Android applications. It allows users to perform various tasks such as decoding APK files, extracting information about the application's components and permissions, analyzing network traffic, and detecting vulnerabilities and malware.

is written in Python and provides a command-line interface as well as a graphical user interface. It can be used by security researchers, Android app developers, and anyone interested in understanding how Android applications work and identifying potential security issues.

Some of the features of include:

Overall, is a powerful tool for analyzing and reverse-engineering Android applications, and it is widely used in the Android security community.

It have lots of modules which usually we not use all of theme.

2.

Sometimes you get error relate to library and use Linux. Use this code:

First we need WSL. Please first enabled it and download ubuntu.

To install Python 3.7 on a Linux system using apt, you can follow these steps:

Then we need to create virtualenv:

The next step is to install :

A call graph is like a map that shows which parts of a computer program call other parts. It helps programmers understand how the program works and find problems. It's kind of like a family tree that shows the relationships between different functions or methods in the program.

To capturing Call Graph we can use this command with :

But you face error when using this command. The problem is related to library.

To fixing this issue downgrade library to version:

After this it worked.

can create files that can be read using graph visualization software, for example gephi.

After installing open the on it. The problem is we can’t analyze the data, because this function calls include all unnecessary calls which is related to Android. To filtering information we navigate to tab and

The select a data entry and press to select all nodes. Then Right-Click the select

Now we want to make it readable:

Now let’s go to filtering data. We want the call graph related to class and function.

The final approach:

We can delete other section which is not related to our goal. Final:

A control flow graph is a diagram that shows the flow of control in a method or function . It is a visual representation of the method/function logic, showing how the method/function instructions are executed in order.

We use to generate Control Flow Graph.

First to use this feature make sure you installed:

The use this command:

work like a regular expression to just create CFG for specified functions. This will decompile the app  into the folder outputfolder and limit the processing to all methods, where the classname starts with . Creating a CFG for all function take multiple hours.

Example of output:

Installing APK.