drozer is a comprehensive security assessment framework that enables penetration testers to identify vulnerabilities in Android apps and devices by interacting with the Android runtime and IPC mechanisms.
The Leading Security Assessment Framework for Android.
drozer is primarily used by security professionals and penetration testers to discover and exploit security weaknesses in Android applications and devices. It facilitates in-depth security testing by simulating app behavior and interacting with Android components to uncover vulnerabilities and misconfigurations.
This is a beta release rewritten to support Python 3, with known issues such as crashes when building custom agents. Using the provided Docker container is recommended for easier setup and compatibility. Ensure all software prerequisites are met before installation. The drozer Agent must be installed and running on the target Android device to enable testing.
Ensure Python 3.8 or greater is installed
Install Protobuf 4.25.2 or greater
Install PyOpenSSL 22.0.0 or greater
Install Twisted 18.9.0 or greater
Install Distro 1.8.0 or greater
Install Java Development Kit 11 or greater
Install drozer via pipx: pipx install drozer
Alternatively, download wheel from GitHub releases and install with pipx
Clone the repository: git clone https://github.com/ReversecLabs/drozer.git
Install from source: cd drozer && pip install .adb install drozer-agent.apk
Installs the drozer Agent APK on the Android test device.
drozer console connect --server <phone's IP address>
Connects the drozer Console on the PC to the drozer Agent running on the Android device over the network.
pipx install drozer
Installs the latest release of drozer using pipx.
git clone https://github.com/ReversecLabs/drozer.git
Clones the drozer source code repository.
pip install .
Installs drozer from the cloned source code directory.
export ANDROID_SDK=/path/to/android.jar
Sets the environment variable to specify the Android SDK path for building native components (Linux/macOS).
drozer Agent Embedded Server Enable
Starts the embedded server on the drozer Agent to allow incoming connections.