ReversecLabs/drozer

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

4597 stars · 848 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

drozer is an open-source security assessment framework for Android that lets testers assume the role of an app and interact with the Android Runtime, other apps' IPC endpoints, and the underlying OS. It automates dynamic analysis tasks, supports exploit sharing, and is extensible with custom modules.

Use cases

• find security vulnerabilities in Android apps and devices
• test Android app IPC endpoints for exposed attack surface
• run dynamic Java code on an Android device during pentests
• assess Android devices in production state without USB debugging
• automate repetitive tasks in Android security assessments
• extend with custom modules to test for specific weaknesses

When to choose

• you need dynamic security analysis of Android apps or devices
• you want to probe IPC endpoints and app attack surfaces without writing custom test apps
• you need a scriptable, extensible Android pentesting toolkit

When to avoid

• you need static-only code analysis of Android apps
• you need a stable release and cannot tolerate beta bugs like broken custom agent building
• you are testing iOS or non-Android mobile platforms

Facets

framework · maturity active

penetration-testing security reverse-engineering cli security mobile-development penetration-testing android-tools python windows cli android-security mobile-pentesting ipc-testing dynamic-analysis exploitation-framework android linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ReversecLabs/drozer")