Let's see another interesting tool that is Guarch and what extend for a quick and broad review kit,
and this is actually a command line tool that performs static analyses of Android applications by actually
compiling the epic file, using a lot of tools and then analyzing the source code for specific patterns
and specific vulnerabilities.
And Guarch was actually created by the security team on LinkedIn, and it can be actually downloaded
from their GitHub repository, their apps that I'm showing on screen.
OK, now let's launch Guarch.
Actually, I am sharing screenshots with you because work takes some time to scan a big file into decompiled.
OK, don't worry.
If you tried this in your machine, you will see some steps to use it.
You can launch it in interactive mode using the command that I am showing here.
Then you will ask if you want to download the Android SDK select.
Yes, for this example.
And then the tool is downloading it and installing the SDK.
Once it is done it the if you want to examine in a file or a source file.
And in this case I selected an epic file and then provided the path to that file.
And that's basically the same file that we use in the earlier example.
There you see that it actually starts on back in the file and it asks you if you want to inspect the
manifest.
Select.
Yes.
And here you can see the actual Android manifest.
Now one of them, it's to further the complete file and ask you if you want to begin to perform static.
Good analysis.
So let's actually do that.
Then you will see that Google performs a series of code analysis checks like looking for insecure functions,
access control checks, hardcoded APIs, crypto issues and many more.
So once it's done, it actually exports the findings to a report and even ask you if you want to build
and explode a file with any potential vulnerabilities that actually may have found.
So let's actually do that.
And once it's done with all this process, it also completes the report and tells you where stores that
report.
So let's open that report in a Web browser.
And it looks the same as here in our screenshot.
And there you can see that actually you found two potential vulnerabilities in the picture file that
I inspected.
And it also provided some warnings.
Some of them are information alert.
And you also see debug messages that can potentially help you troubleshoot or further examine other
errors in the application.
OK, so now you will also see the manifest.
Let's look at the pending inside section.
There you can see that actually found two potential vulnerabilities in Boudjellal files.
In this case, we found two potential vulnerabilities in those files.
And you can see this is actually a pretty powerful tool to perform in-depth Android application analyses.
Now let's go over another useful resource that was actually created by The Honeynet Project.
And basically they created a pretty handy virtual machine for reverse engineering called Herry, or
you can call it ERP, OK?
And it comes with many tools.
That includes an Brugada Android SDK, the API inspector, the EPICA tool that we actually mentioned
before then, the extruder that we mentioned before.
Next is Droid Box and many more.