[APP][XPOSED] Inspeckage - Android Package Inspector

acarlosmartins · Feb 29, 2016

CHANGELOG

https://github.com/ac-pm/Inspeckage/blob/master/CHANGELOG

Introduction

Inspeckage is a tool developed to offer dynamic analysis of Android applications. With this tool we can better understand what an Android application is doing at runtime.

* https://twitter.com/inspeckage
* https://play.google.com/store/apps/details?id=mobi.acpm.inspeckage

How it works?

It is a simply application (apk) with an internal HTTP server providing a friendly web interface.

Features

Information gathering

Requested Permissions
App Permissions
Shared Libraries
Exported Activities and Non Exported Activities
Exported Content Provider and Non Exported Content Provider
Exported Services and Non Exported Services
Exported Broadcast Receiver and Non Exported Broadcast Receiver
If is Debuggable
Version, UID and GIDs
etc

Hooks (until now)

With the hooks, we can see what the application is doing in real time.

Shared Preferences (log and file)
Serialization
Crypto
Hash
SQLite
HTTP (a http proxy tool it is still the best alternative)
File System
Miscellaneous (Clipboard, URL.Parse())
WebView
IPC

Actions

With the Xposed is possible do some actions like start a not exported activity!

Start any activity (exported and non exported)
Calling any provider (exported and non exported)
Disable FLAG_SECURE
SSL uncheck
Start, close and restart the application

Extras

APK Download
View the app's directory tree
Download the app files
Download the output generated by hooks in text file format
Printscreen

Configuration

Even with some hooks at HTTP libraries, using an external proxy tool it is still the best alternative to analyze the traffic.

Add a proxy to the target app
Enable and disable proxy
Add entries in the arp table

Requirements

Xposed Framework

Download

http://repo.xposed.info/module/mobi.acpm.inspeckage

Source Code

https://github.com/ac-pm/Inspeckage

Screenshots

Tab Screenshot

Reporting bugs

For bug reports and feature requests, please post them in the GitHub Issues page.

Genymotion

I made a small tutorial on how to get it ready for Inspeckage.

https://vimeo.com/156745941

XDA:DevDB Information
Inspeckage, Xposed for all devices (see above for details)

Contributors
acarlosmartins
Source Code: https://github.com/ac-pm/Inspeckage

Xposed Package Name: mobi.acpm.inspeckage

Version Information
Status: Stable
Current Stable Version: 1.4.1
Stable Release Date: 2016-07-19

Created 2016-02-29
Last Updated 2017-05-26

HorstiG · Feb 29, 2016

Crash on Marshmallow 6.x Stock LG G4,

Does not work with Adguard.

http://xdaforums.com/android/apps-games/adguard-ad-blocker-doesnt-require-root-t2958895

vip57 · Feb 29, 2016

great working like charm on sgs4 aosp lollipop rom

BIade · Feb 29, 2016

Nice one. Was looking for something like this for a long time. Will test it 2morrow. Hope the times of catlog are over

Thanks for your work

acarlosmartins · Feb 29, 2016

HorstiG said:
Crash on Marshmallow 6.x Stock LG G4,

Does not work with Adguard.

http://xdaforums.com/android/apps-games/adguard-ad-blocker-doesnt-require-root-t2958895

Sorry, but it worked for me.

http://i.imgur.com/hQ3gEGM.png

Look, if the app does not use some libs, the tabs will be blank.

I'm testing with Genimotion android 5.1.0 API 22.

sm4rk0 · Mar 9, 2016

Awesome tool! Thank you!

d34dr00t · Mar 10, 2016

I see `App is running: false`, and when app started. `The app is running?` Module enable: true | Version: 1.1b
Nexus 6, CM-13.0-20160305-NIGHTLY-shamu

defim · Mar 12, 2016

@acarlosmartins: Please remove the "#" in front of the name at xposed repo

acarlosmartins · Mar 12, 2016

defim said:
@acarlosmartins: Please remove the "#" in front of the name at xposed repo

Done! Thank you for reminding me.

http://repo.xposed.info/module/mobi.acpm.inspeckage

acarlosmartins · Mar 12, 2016

d34dr00t said:
I see `App is running: false`, and when app started. `The app is running?` Module enable: true | Version: 1.1b
Nexus 6, CM-13.0-20160305-NIGHTLY-shamu

I will investigate. Thanks for the feedback!

flamery · Apr 20, 2016

Seems like a very nice app. Working well on my Lollipop device. Thanks!

Can you explain a bit more about what some of the features do, for example I see the app I launch says debuggable: no, what determines that?

Also The app I launched does make http requests but none showed up in the http tab, also what does the crypto tab show? that is probably the most interesting thing for me as someone interested in reverse engineering, is it possible to see clear text information that it is encrypting?

cybermapt · May 24, 2016

Hi,
The app doesn't work on Sony Xperia 4.1.2.
Logcat error:

6051 AndroidRuntime E FATAL EXCEPTION: main
6051 AndroidRuntime E java.lang.RuntimeException: Unable to instantiate activity ComponentInfo{mobi.acpm.inspeckage/mobi.acpm.inspeckage.ui.M
ainActivity}: java.lang.ClassNotFoundException: mobi.acpm.inspeckage.ui.MainActivity
6051 AndroidRuntime E at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:1987)
6051 AndroidRuntime E at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:2088)
6051 AndroidRuntime E at android.app.ActivityThread.access$600(ActivityThread.java:134)
6051 AndroidRuntime E at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1199)
6051 AndroidRuntime E at android.os.Handler.dispatchMessage(Handler.java:99)
6051 AndroidRuntime E at android.os.Looper.loop(Looper.java:137)
6051 AndroidRuntime E at android.app.ActivityThread.main(ActivityThread.java:4744)
6051 AndroidRuntime E at java.lang.reflect.Method.invokeNative(Native Method)
6051 AndroidRuntime E at java.lang.reflect.Method.invoke(Method.java:511)
6051 AndroidRuntime E at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:786)
6051 AndroidRuntime E at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:553)
6051 AndroidRuntime E at de.robv.android.xposed.XposedBridge.main(XposedBridge.java:132)
6051 AndroidRuntime E at dalvik.system.NativeStart.main(Native Method)
6051 AndroidRuntime E Caused by: java.lang.ClassNotFoundException: mobi.acpm.inspeckage.ui.MainActivity
6051 AndroidRuntime E at dalvik.system.BaseDexClassLoader.findClass(BaseDexClassLoader.java:61)
6051 AndroidRuntime E at java.lang.ClassLoader.loadClass(ClassLoader.java:501)
6051 AndroidRuntime E at java.lang.ClassLoader.loadClass(ClassLoader.java:461)
6051 AndroidRuntime E at android.app.Instrumentation.newActivity(Instrumentation.java:1053)
6051 AndroidRuntime E at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:1978)
6051 AndroidRuntime E ... 12 more

defim · May 24, 2016

cybermapt said:
Hi,
6051 AndroidRuntime E FATAL EXCEPTION: main
6051 AndroidRuntime E java.lang.RuntimeException: Unable to instantiate activity ComponentInfo{mobi.acpm.inspeckage/mobi.acpm.inspeckage.ui.M
ainActivity}: java.lang.ClassNotFoundException: mobi.acpm.inspeckage.ui.MainActivity

I have this "ClassNotFoundException" also in an app by me, but not published yet. I'm not sure what's the cause, but it could be an Xposed failure. It happens for me also with the "main" activity

cybermapt · May 25, 2016

Same error/crash with Nexus 7, Android 4.4.4

I tried to install older version. These older versions get on but the module remains disabled and app doesn't work.

Thanks

acarlosmartins · Jul 7, 2016

Inspeckage - Android Package Inspector - new version v1.4

# Inspeckage - CHANGELOG

1.4
---------------

- tabs with badges (counter);
- for "+ Hooks", FLAG_SECURE and proxy options you dont need restart the app;
- enable/disable hooks (tabs);
- support to android 4.x (experimental);
- android:allowBackup in info area;
- app icon in ifo area;
- some bug fixes.

1.3
---------------

- New tab "+ Hooks". Now the user can specify new hook's dynamically.
- collapsible app info area
- some bug fixes

1.2
---------------

New logcat.html page. A experimental page with websocket to show some information from the logcat.

1.1b
---------------

Fix the backpressed crash
Fix intent launch not found
Improvements in the Start Activity option

1.0b
---------------

With Inspeckage, we can get a good amount of information about the application's behavior:

== Information gathering

* Requested Permissions;
* App Permissions;
* Shared Libraries;
* Exported and Non-exported Activities, Content Providers,Broadcast Receivers and Services;
* Check if the app is debuggable or not;
* Version, UID and GIDs;
* etc.

== Hooks (so far)

With the hooks, we can see what the application is doing in real time:

* Shared Preferences (log and file);
* Serialization;
* Crypto;
* Hashes;
* SQLite;
* HTTP (an HTTP proxy tool is still the best alternative);
* File System;
* Miscellaneous (Clipboard, URL.Parse());
* WebView;
* IPC.

== Actions

With Xposed it's possible to perform actions such as start a unexported activity and much else:

* Start any activity (exported and unexported);
* Call any provider (exported and unexported);
* Disable FLAG_SECURE;
* SSL uncheck;
* Start, stop and restart the application.

== Extras

* APK Download;
* View the app's directory tree;
* Download the app's files;
* Download the output generated by hooks in text file format;
* Take a screen capture;

== Configuration

Even though our tool has some hooks to the HTTP libraries, using an external proxy tool is still the best option to analyze the app's traffic. With Inspeckage, you can:

* Add a proxy to the target app;
* Enable and disable proxy;
* Add entries in the arp table.

AlaskanMalamute · Jul 11, 2016

Hello,

I'm trying to get Inspeckage running on my LG G4 (H815, marshmallow v20e-208-01) .

I've tried with xposed v86 for arm64, then v85 for arm64 without success. I have get Inspeckage running fine (module installed, server started, webgui running) but when I try to start an application (i've tried for exemple FM radio) it fails with the system message "application has stop running"

Where could I be wrong ? Should I install another version of xposed ?

Thank you in advance.

acarlosmartins · Jul 20, 2016

Inspeckage - Android Package Inspector - v1.4.1 released

https://twitter.com/inspeckage

# Inspeckage - CHANGELOG

1.4.1
---------------

- add the option "Bind to address" on "Config" app screen - now you can bind to all interfaces, any specific local IP address, or to just the loopback interface.
Note: if you choose a non-loopback interface, other computers maybe can access the Inspeckage.
- bug fix - the "App is running:" always false

1.4
---------------

- tabs with badges (counter);
- for "+ Hooks", FLAG_SECURE and proxy options you dont need restart the app;
- enable/disable hooks (tabs);
- support to android 4.x (experimental);
- android:allowBackup in info area;
- app icon in info area;
- some bug fixes.

1.3
---------------

- New tab "+ Hooks". Now the user can specify new hook's dynamically.
- collapsible app info area
- some bug fixes

1.2
---------------

New logcat.html page. A experimental page with websocket to show some information from the logcat.

1.1b
---------------

Fix the backpressed crash
Fix intent launch not found
Improvements in the Start Activity option

1.0b
---------------

With Inspeckage, we can get a good amount of information about the application's behavior:

== Information gathering

* Requested Permissions;
* App Permissions;
* Shared Libraries;
* Exported and Non-exported Activities, Content Providers,Broadcast Receivers and Services;
* Check if the app is debuggable or not;
* Version, UID and GIDs;
* etc.

== Hooks (so far)

With the hooks, we can see what the application is doing in real time:

* Shared Preferences (log and file);
* Serialization;
* Crypto;
* Hashes;
* SQLite;
* HTTP (an HTTP proxy tool is still the best alternative);
* File System;
* Miscellaneous (Clipboard, URL.Parse());
* WebView;
* IPC.

== Actions

With Xposed it's possible to perform actions such as start a unexported activity and much else:

* Start any activity (exported and unexported);
* Call any provider (exported and unexported);
* Disable FLAG_SECURE;
* SSL uncheck;
* Start, stop and restart the application.

== Extras

* APK Download;
* View the app's directory tree;
* Download the app's files;
* Download the output generated by hooks in text file format;
* Take a screen capture;

== Configuration

Even though our tool has some hooks to the HTTP libraries, using an external proxy tool is still the best option to analyze the app's traffic. With Inspeckage, you can:

* Add a proxy to the target app;
* Enable and disable proxy;
* Add entries in the arp table.

acarlosmartins · Jul 20, 2016

AlaskanMalamute said:
Hello,

I'm trying to get Inspeckage running on my LG G4 (H815, marshmallow v20e-208-01) .

I've tried with xposed v86 for arm64, then v85 for arm64 without success. I have get Inspeckage running fine (module installed, server started, webgui running) but when I try to start an application (i've tried for exemple FM radio) it fails with the system message "application has stop running"

Where could I be wrong ? Should I install another version of xposed ?

Thank you in advance.

Please, try the version 1.4.1.

Thanks

ahhl · Jul 20, 2016

doesnt work on mate7 mashmellow. when trying to inspect apk. lauching it just crash. no webgui

Dovidhalevi · Jul 20, 2016

acarlosmartins said:
CHANGELOG

https://github.com/ac-pm/Inspeckage/blob/master/CHANGELOG

Introduction

Inspeckage is a tool developed to offer dynamic analysis of Android applications. With this tool we can better understand what an Android application is doing at runtime.

* https://twitter.com/inspeckage
* https://play.google.com/store/apps/details?id=mobi.acpm.inspeckage

How it works?

It is a simply application (apk) with an internal HTTP server providing a friendly web interface.

Features

Information gathering

Requested Permissions

App Permissions

Shared Libraries

Exported Activities and Non Exported Activities

Exported Content Provider and Non Exported Content Provider

Exported Services and Non Exported Services

Exported Broadcast Receiver and Non Exported Broadcast Receiver

If is Debuggable

Version, UID and GIDs

etc

Hooks (until now)

With the hooks, we can see what the application is doing in real time.

Shared Preferences (log and file)

Serialization

Crypto

Hash

SQLite

HTTP (a http proxy tool it is still the best alternative)

File System

Miscellaneous (Clipboard, URL.Parse())

WebView

IPC

Actions

With the Xposed is possible do some actions like start a not exported activity!

Start any activity (exported and non exported)

Calling any provider (exported and non exported)

Disable FLAG_SECURE

SSL uncheck

Start, close and restart the application

Extras

APK Download

View the app's directory tree

Download the app files

Download the output generated by hooks in text file format

Printscreen

Configuration

Even with some hooks at HTTP libraries, using an external proxy tool it is still the best alternative to analyze the traffic.

Add a proxy to the target app

Enable and disable proxy

Add entries in the arp table

Requirements

Xposed Framework

Download

http://repo.xposed.info/module/mobi.acpm.inspeckage

Source Code

https://github.com/ac-pm/Inspeckage

Screenshots

Tab Screenshot

Reporting bugs

For bug reports and feature requests, please post them in the GitHub Issues page.

Genymotion

I made a small tutorial on how to get it ready for Inspeckage.

https://vimeo.com/156745941

XDA:DevDB Information
Inspeckage, Xposed for all devices (see above for details)

Contributors
acarlosmartins
Source Code: https://github.com/ac-pm/Inspeckage

Xposed Package Name: mobi.acpm.inspeckage

Version Information
Status: Stable
Current Stable Version: 1.4.1
Stable Release Date: 2016-07-19

Created 2016-02-29
Last Updated 2016-07-19

First I have heard of this, apparently around a bit.
So ... can this be used to place Google Now pane as widget on someone else's launcher? (Want a Nobel?)
Other Google hacks?

[APP][XPOSED] Inspeckage - Android Package Inspector

Member

Attachments

Senior Member

Senior Member

Senior Member

Member

Member

Member

Senior Member

Member

Member

Senior Member

New member

Senior Member

New member

Member

New member

Member

Member

Senior Member

Senior Member

Similar threads

Top Liked Posts