APKHunt: Introduction to Android Penetration Testing

APKHunt: Introduction to Android Penetration Testing

In an era where mobile applications have become integral to daily life, safeguarding the security of these applications is paramount. Android applications, in particular, hold a significant share of the market, making them an attractive target for cyberattacks. This article delves into the realm of APKHunt, a powerful solution powered by the OWASP Mobile Application Security Verification Standard (MASVS) Static Analyzer. We will uncover how APKHunt empowers developers and organizations to enhance Android app security and proactively defend against potential vulnerabilities.

APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.

With APKHunt, mobile software architects or developers can conduct thorough code reviews to ensure the security and integrity of their mobile applications, while security testers can use the tool to confirm the completeness and consistency of their test results. Whether you’re a developer looking to build secure apps or an infosec tester charged with ensuring their security, APKHunt can be an invaluable resource for your work.

NOTE: It is based on the OWASP MASVS v1.5.0 which was released in Jan 2023.

🎯 Features

  • Scan coverage: Covers most of the SAST (Static Application Security Testing) related test cases of the OWASP MASVS framework.
  • Multiple APK scanning: Supports scanning multiple APK files in a perticular path or folder.
  • Optimised scanning: Specific rules are designed to check for particular security sinks, resulting in an almost accurate scanning process.
  • Low false-positive rate: Designed to pinpoint and highlight the exact location of potential vulnerabilities in the source code.
  • Output format: Results are provided in a TXT file format for easy readability for end-users.

🕸️ Installation

  1. git clone https://github.com/Cyber-Buddy/APKHunt.git
  2. cd APKHunt
  3. go run apkhunt.go


  • Install Git: sudo apt-get install git
  • Install Golang: sudo apt install golang-go
  • Install JADX: sudo apt-get install jadx
  • Install Dex2jar: sudo apt-get install dex2jar


  • Only supported on Linux environments

⚙️ Usage

      _ _   __ __  _   __  _   _                _   
     / _ \ | _ _ \| | / / | | | |              | |  
    / /_\ \| |_/ /| |/ /  | |_| | _   _   _ _  | |_ 
    |  _  ||  __/ |    \  |  _  || | | |/  _  \|  _|                                                                                     
    | | | || |    | |\  \ | | | || |_| || | | || |_                                                                                      
    \_| |_/\_|    \_| \_/ \_| |_/\ _ _ /|_| |_|\_ _|                                                                                     
    OWASP MASVS Static Analyzer  

    APKHunt Usage:                                                                                                                       
          go run apkhunt.go [options] {.apk file}                                                                                        

         -h     For help                                                                                                                 
         -p     Provide the apk file-path
         -m     Provide the folder-path for multiple apk scanning
         -l     For logging (.txt file)

         APKHunt.go -p /Downloads/android_app.apk                                                                                        
         APKHunt.go -p /Downloads/android_app.apk -l
         APKHunt.go -m /Downloads/android_apps/
         APKHunt.go -m /Downloads/android_apps/ -l

📱 Security test-case coverage

The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security. It can be used by mobile software architects and developers seeking to develop secure mobile applications, as well as security testers to ensure completeness and consistency of test results.

V1Architecture, Design and Threat Modeling Requirements
V2Data Storage and Privacy Requirements
V3Cryptography Requirements
V4Authentication and Session Management Requirements
V5Network Communication Requirements
V6Environmental Interaction Requirements
V7Code Quality and Build Setting Requirements
V8Resiliency & Reverse Engineering Requirements

💻 Demo


🚧 Upcoming Features

  • Scanning of multiple APK files – DONE ☺️
  • More output format such as HTML – In the outer orbit! 🤔
  • Integration with third-party tools – Cannot commit! 😬

Also Read:

12 Best WiFi Hacking Tools for Secure Network Exploration

Reportly: is an AzureAD user activity report tool.

How to Monitor Your WiFI Network and See What People Are Doing

PentestGPT: A GPT-empowered penetration testing tool


No comments yet. Why don’t you start the discussion?

Leave a Reply