# kelvinBen/AppInfoScanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

Repository: https://github.com/kelvinBen/AppInfoScanner
Canonical: https://ross.abutalabs.com/products/appinfoscanner
Language: Python
License: GPL-3.0
License Family: copyleft
Topics: security, python3, tools, apk, apk-dex, android, ipa, scanner, web-hacking, security-tools, hacking, hacking-tool, penetration-testing-tools, penetration-test, network-security
Last push: 2022-12-18T11:33:34+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 2234, "days_push": 1354, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3554, forks 405 (observed 2026-08-28T04:08:09.626736+00:00)

## What it is
A Python-based static information-gathering scanner for mobile apps (Android APK/DEX, iOS IPA/Mach-O) and static web content (HTML, JS, H5). It extracts key assets such as URLs, IP addresses, domains, CDN info, titles, and fingerprints for penetration testing and red team operations.

## Use cases
- extract urls and ips from an apk during a pentest
- collect asset information from an ios ipa file
- scan saved website source code for domains and endpoints
- analyze h5 pages for sensitive information
- detect android packing/obfuscation shells in an apk
- batch scan a directory of mobile app files for key assets

## When to choose
- you need quick static asset extraction from APK/IPA/H5 files during red team or HW exercises
- you want a CLI tool that runs on Windows, macOS, or Linux with Python3
- you need customizable scanning rules and shell detection for Android apps

## When to avoid
- you need dynamic analysis or runtime instrumentation of mobile apps
- you require fingerprint identification or automatic unpacking, which are unimplemented features
- you need a GUI-driven mobile security analysis platform

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: security, web-scraping, parser, osint, developer-tools
- domain: security, penetration-testing, mobile-development, crawlers
- platform: python, cli, windows
- tags: red-team, apk-analysis, ios-analysis, information-gathering, static-analysis, h5, asset-discovery, macos, linux

## Member repositories
- kelvinBen/AppInfoScanner (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:08:09.626736+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:34:17.908150+00:00, confidence not recorded.
  - readme: https://github.com/kelvinBen/AppInfoScanner (fetched 2026-08-28T04:08:09.626736+00:00, sha 3fd65ffb2a8a)
- Data as of 2026-08-30T08:39:29.467469+00:00.