View Issue Details

IDProjectCategoryView StatusLast Update
0009808Kali LinuxNew Tool Requestspublic2026-08-01 11:35
ReporterSyscallX-18113 Assigned To 
PrioritynormalSeverityminorReproducibilityhave not tried
Status newResolutionopen 
Summary0009808: Apkx-Hunter is an Android Static Analysis Framework written entirely in C
Description

[Name] - Apkx-Hunter
[Version] - v2.6.0
[Github Link] - https://github.com/SyscallX-18113/Apkx-Hunter
[Download] - https://github.com/SyscallX-18113/Apkx-Hunter/releases/tag/v2.6.0
[Author] - Devesh Kachhawaha (SyscallX-18113)
[Licence] - Apache License 2.0

[Description] -
APKX-Hunter is an open-source Android Static Analysis Framework written entirely in c for Android reverse engineering malware analysis, OWASP MASVS security assessments, bug bounty hunting, and penetration testing It supports APK, APKS, APKM, XAPK, and ZIP formats with Recursive Multi-APK Scanning and Silent Batch Mode for large scale Android application analysis. The framework performs AndroidManifest analysis, permission analysis, exported component detection, endpoint discovery, hardcoded secret detection, cloud configuration discovery, native library detection, and comprehensive OWASP MASVS scanning across 15 security categories with over 166 detection patterns. APKX-Hunter also includes a lightweight Machine Learning-based Secret Classification Engine, written entirely in C, which automatically scores detected secrets by confidence and severity to reduce false positives and accelerate vulnerability triage. The framework has successfully identified multiple security issues during testing, including vulnerabilities in the OWASP UnCrackable Level 4 application, demonstrating its effectiveness for real-world Android security research.

[Dependencies] - Jadx, Apktool, Unzip

[Similar Tools] - Similar tools include QARK AndroBugs Framework, Quark Engine, APKLeaks, APKHunt, and SUPER Android Analyzer. APKX-Hunter differs by being written entirely in C, providing recursive bulk analysis of APK, APKS, APKM, XAPK, and ZIP packages, integrating OWASP MASVS scanning across 15 security categories with 166+ detection patterns, and including a lightweight machine learning-based secret classification engine that reduces false positives and prioritizes high-confidence findings.

[Activity] - APKX-Hunter development began in 2026

[How To Install] - APKX-Hunter can be installed either from the Debian package or compiled from the official release source.

Compile from the official release:

wget https://github.com/SyscallX-18113/Apkx-Hunter/archive/refs/tags/v2.6.0.tar.gz
tar -xzf v2.6.0.tar.gz
cd Apkx-Hunter-2.6.0
make
sudo make install

[How to use] - Basic usage examples:

Install required external dependencies:

apkxhunter --install-dependencies

Display the help menu:

apkxhunter --help

Scan a single Android application:

apkxhunter sample.apk <flags>

[Packaged] - Yes. APKX-Hunter is already packaged as a native Debian package (.deb) with a complete Debian packaging structure desktop launcher integration, application menu entry, man page, documentation, and system-wide installation support The package has been successfully built and tested on Debian-based distributions.

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2026-08-01 11:35 SyscallX-18113 New Issue