Android Essentials Toolbox
The Android Essentials Toolbox is a collection program analysis tools specifically developed for analyzing Android applications. The toolbox aids in mapping Android Permission Groups and Protection Levels to Permissions as well as Permissions to the respective permission protected Android APIs.
Website: https://ensoftcorp.github.io/android-essentials-toolbox
The Android Essentials Toolbox aims to make program analysis of Android apps simpler. The most useful features are outlined below.
- Includes documented (public) and undocumented (private) Permissions, Permission Groups, and Protection Levels
Permission
Java object that encodes Android Permissions and their attributes (simple/qualified name, description, API level, and deprecation status) and maps thePermission
to the corresponding permission protected API methods (based on the results of the University of Toronto’s PScout tool)PermissionGroup
Java object that encodes Android Permission Groups with their attributes (simple/qualified name, description, API level, and deprecation status) and maps thePermissionGroup
to the correspondingPermission
objectsProtectionLevel
Java object that encodes Android Protection Levels with their attributes (name, description, and protection level) and maps theProtectionLevel
to the correspondingPermission
objects- Support for seamlessly applying and querying the encoded relationships in the Atlas program graph
- Support for locating and parsing the Android Manifest in the Eclipse workspace
- Support for multiple Android API versions
The toolbox also includes a Permission Usage View that shows used permissions in red (categorized by permission group and protection level). At the lowest level of the tree is the callsite of the application method that called the permission protected method.