DroidDetective

DroidDetective is a Python tool for analysing Android applications (APKs) for potential malware related behaviour and configurations. When provided with a path to an application (APK file) Droid Detective will make a prediction (using it's ML model) of if the application is malicious. Features and qualities of Droid Detective include:

Analysing which of ~330 permissions are specified in the application's AndroidManifest.xml file. no_good

Analysing the number of standard and proprietary permissions in use in the application's AndroidManifest.xml file. abacus

Using a RandomForest machine learning classifier, trained off the above data, from ~14 malware families and ~100 Google Play Store applications. computer

https://github.com/user1342/DroidDetective

[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)