# androguard/androguard

Reverse engineering and pentesting for Android applications

Repository: https://github.com/androguard/androguard
Canonical: https://ross.abutalabs.com/products/androguard
Homepage: https://ismyphonepwned.com/droid2web/
Language: Python
License: Apache-2.0
License Family: permissive
Topics: android, dalvik, reverse-engineering, dex, odex, pentesting
Last push: 2026-08-13T17:59:02+00:00

## Health v2 (maintenance only)
Score: 83/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 97, release rhythm 55, longevity 100
- inputs: {"age_days": 4373, "days_push": 20, "days_rel": 89, "gap_med": 465, "n_releases_24m": 2}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 6209, forks 1146 (observed 2026-08-28T04:09:39.984603+00:00)

## What it is
Androguard is a full Python tool and library for reverse engineering and analyzing Android files, including DEX/ODEX bytecode disassembly and decompilation, APK parsing, binary XML, and resources. It also provides a browser-based WASM inspector (droid2web) for analyzing APK, DEX, AXML, and ARSC files locally.

## Use cases
- decompile an apk to java source
- analyze dex bytecode of an android app
- check android app permissions and security issues
- reverse engineer android malware
- inspect androidmanifest.xml binary xml
- static analysis of android apps for pentesting
- extract strings and classes from an apk
- compare two apk files for differences

## When to choose
- you need programmatic Python analysis of APK/DEX files
- you want a decompiler, disassembler, and control-flow graphs for Android bytecode
- you are doing mobile security research or malware analysis
- you want a fully local, browser-based APK inspector without uploading to the cloud

## When to avoid
- you need dynamic analysis or instrumentation only - use Frida directly
- you need a polished GUI decompiler like Ghidra or Jadx
- your project depends on Androguard 3.x APIs, since 4.x removed functionality
- you need iOS or non-Android mobile analysis

## Facets
- artifact type: library
- maturity: active
- function: reverse-engineering, parser, security, penetration-testing, cli, sdk
- domain: reverse-engineering, security, mobile-development, developer-tools, android-tools
- platform: python, cli, cross-platform, wasm, browser
- tags: android, apk-analysis, dex, dalvik, decompiler, disassembler, malware-analysis, frida, mobile-security, pentesting

## Member repositories
- androguard/androguard (main) score 83

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:09:39.984603+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T17:47:18.051931+00:00, confidence not recorded.
  - readme: https://github.com/androguard/androguard (fetched 2026-08-28T04:09:39.984603+00:00, sha 0a79c292e56a)
  - homepage: https://ismyphonepwned.com/droid2web/ (fetched 2026-08-29T08:43:39.560987+00:00, sha 1512b6eb400f)
  - registry_pypi: https://pypi.org/pypi/androguard/json (fetched 2026-08-29T08:43:39.563507+00:00, sha 7fe3b967ddeb)
- Data as of 2026-08-30T08:39:29.467469+00:00.