[APP][XPOSED] Inspeckage - Android Package Inspector - Xposed Framework Modules

CHANGELOG
https://github.com/ac-pm/Inspeckage/blob/master/CHANGELOG
Introduction
Inspeckage is a tool developed to offer dynamic analysis of Android applications. With this tool we can better understand what an Android application is doing at runtime.
* https://twitter.com/inspeckage
* https://play.google.com/store/apps/details?id=mobi.acpm.inspeckage
How it works?
It is a simply application (apk) with an internal HTTP server providing a friendly web interface.
Features
Information gathering
Requested Permissions
App Permissions
Shared Libraries
Exported Activities and Non Exported Activities
Exported Content Provider and Non Exported Content Provider
Exported Services and Non Exported Services
Exported Broadcast Receiver and Non Exported Broadcast Receiver
If is Debuggable
Version, UID and GIDs
etc
Hooks (until now)
With the hooks, we can see what the application is doing in real time.
Shared Preferences (log and file)
Serialization
Crypto
Hash
SQLite
HTTP (a http proxy tool it is still the best alternative)
File System
Miscellaneous (Clipboard, URL.Parse())
WebView
IPC
Actions
With the Xposed is possible do some actions like start a not exported activity!
Start any activity (exported and non exported)
Calling any provider (exported and non exported)
Disable FLAG_SECURE
SSL uncheck
Start, close and restart the application
Extras
APK Download
View the app's directory tree
Download the app files
Download the output generated by hooks in text file format
Printscreen
Configuration
Even with some hooks at HTTP libraries, using an external proxy tool it is still the best alternative to analyze the traffic.
Add a proxy to the target app
Enable and disable proxy
Add entries in the arp table
Requirements
Xposed Framework
Download
http://repo.xposed.info/module/mobi.acpm.inspeckage
Source Code
https://github.com/ac-pm/Inspeckage
Screenshots
Tab Screenshot
Reporting bugs
For bug reports and feature requests, please post them in the GitHub Issues page.
Genymotion
I made a small tutorial on how to get it ready for Inspeckage.
https://vimeo.com/156745941
XDA:DevDB Information
Inspeckage, Xposed for all devices (see above for details)
Contributors
acarlosmartins
Source Code: https://github.com/ac-pm/Inspeckage
Xposed Package Name: mobi.acpm.inspeckage
Version Information
Status: Stable
Current Stable Version: 1.4.1
Stable Release Date: 2016-07-19
Created 2016-02-29
Last Updated 2017-05-26

---

Crash on Marshmallow 6.x Stock LG G4,
Does not work with Adguard.
http://forum.xda-developers.com/android/apps-games/adguard-ad-blocker-doesnt-require-root-t2958895

---

great working like charm on sgs4 aosp lollipop rom

---

Nice one. Was looking for something like this for a long time. Will test it 2morrow. Hope the times of catlog are over
Thanks for your work

---

HorstiG said:
Crash on Marshmallow 6.x Stock LG G4,
Does not work with Adguard.
http://forum.xda-developers.com/android/apps-games/adguard-ad-blocker-doesnt-require-root-t2958895
Click to expand...
Click to collapse
Sorry, but it worked for me.
http://i.imgur.com/hQ3gEGM.png
Look, if the app does not use some libs, the tabs will be blank.
I'm testing with Genimotion android 5.1.0 API 22.

---

Awesome tool! Thank you!

---

I see `App is running: false`, and when app started. `The app is running?` Module enable: true | Version: 1.1b
Nexus 6, CM-13.0-20160305-NIGHTLY-shamu

---

@acarlosmartins: Please remove the "#" in front of the name at xposed repo

---

defim said:
@acarlosmartins: Please remove the "#" in front of the name at xposed repo
Click to expand...
Click to collapse
Done! Thank you for reminding me.
http://repo.xposed.info/module/mobi.acpm.inspeckage

---

d34dr00t said:
I see `App is running: false`, and when app started. `The app is running?` Module enable: true | Version: 1.1b
Nexus 6, CM-13.0-20160305-NIGHTLY-shamu
Click to expand...
Click to collapse
I will investigate. Thanks for the feedback!

---

Seems like a very nice app. Working well on my Lollipop device. Thanks!
Can you explain a bit more about what some of the features do, for example I see the app I launch says debuggable: no, what determines that?
Also The app I launched does make http requests but none showed up in the http tab, also what does the crypto tab show? that is probably the most interesting thing for me as someone interested in reverse engineering, is it possible to see clear text information that it is encrypting?

---

Hi,
The app doesn't work on Sony Xperia 4.1.2.
Logcat error:
6051 AndroidRuntime E FATAL EXCEPTION: main
6051 AndroidRuntime E java.lang.RuntimeException: Unable to instantiate activity ComponentInfo{mobi.acpm.inspeckage/mobi.acpm.inspeckage.ui.M
ainActivity}: java.lang.ClassNotFoundException: mobi.acpm.inspeckage.ui.MainActivity
6051 AndroidRuntime E at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:1987)
6051 AndroidRuntime E at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:2088)
6051 AndroidRuntime E at android.app.ActivityThread.access$600(ActivityThread.java:134)
6051 AndroidRuntime E at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1199)
6051 AndroidRuntime E at android.os.Handler.dispatchMessage(Handler.java:99)
6051 AndroidRuntime E at android.os.Looper.loop(Looper.java:137)
6051 AndroidRuntime E at android.app.ActivityThread.main(ActivityThread.java:4744)
6051 AndroidRuntime E at java.lang.reflect.Method.invokeNative(Native Method)
6051 AndroidRuntime E at java.lang.reflect.Method.invoke(Method.java:511)
6051 AndroidRuntime E at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:786)
6051 AndroidRuntime E at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:553)
6051 AndroidRuntime E at de.robv.android.xposed.XposedBridge.main(XposedBridge.java:132)
6051 AndroidRuntime E at dalvik.system.NativeStart.main(Native Method)
6051 AndroidRuntime E Caused by: java.lang.ClassNotFoundException: mobi.acpm.inspeckage.ui.MainActivity
6051 AndroidRuntime E at dalvik.system.BaseDexClassLoader.findClass(BaseDexClassLoader.java:61)
6051 AndroidRuntime E at java.lang.ClassLoader.loadClass(ClassLoader.java:501)
6051 AndroidRuntime E at java.lang.ClassLoader.loadClass(ClassLoader.java:461)
6051 AndroidRuntime E at android.app.Instrumentation.newActivity(Instrumentation.java:1053)
6051 AndroidRuntime E at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:1978)
6051 AndroidRuntime E ... 12 more

---

cybermapt said:
Hi,
6051 AndroidRuntime E FATAL EXCEPTION: main
6051 AndroidRuntime E java.lang.RuntimeException: Unable to instantiate activity ComponentInfo{mobi.acpm.inspeckage/mobi.acpm.inspeckage.ui.M
ainActivity}: java.lang.ClassNotFoundException: mobi.acpm.inspeckage.ui.MainActivity
Click to expand...
Click to collapse
I have this "ClassNotFoundException" also in an app by me, but not published yet. I'm not sure what's the cause, but it could be an Xposed failure. It happens for me also with the "main" activity

---

Same error/crash with Nexus 7, Android 4.4.4
I tried to install older version. These older versions get on but the module remains disabled and app doesn't work.
Thanks

---

Inspeckage - Android Package Inspector - new version v1.4
# Inspeckage - CHANGELOG
1.4
---------------
- tabs with badges (counter);
- for "+ Hooks", FLAG_SECURE and proxy options you dont need restart the app;
- enable/disable hooks (tabs);
- support to android 4.x (experimental);
- android:allowBackup in info area;
- app icon in ifo area;
- some bug fixes.
1.3
---------------
- New tab "+ Hooks". Now the user can specify new hook's dynamically.
- collapsible app info area
- some bug fixes
1.2
---------------
New logcat.html page. A experimental page with websocket to show some information from the logcat.
1.1b
---------------
Fix the backpressed crash
Fix intent launch not found
Improvements in the Start Activity option
1.0b
---------------
With Inspeckage, we can get a good amount of information about the application's behavior:
== Information gathering
* Requested Permissions;
* App Permissions;
* Shared Libraries;
* Exported and Non-exported Activities, Content Providers,Broadcast Receivers and Services;
* Check if the app is debuggable or not;
* Version, UID and GIDs;
* etc.
== Hooks (so far)
With the hooks, we can see what the application is doing in real time:
* Shared Preferences (log and file);
* Serialization;
* Crypto;
* Hashes;
* SQLite;
* HTTP (an HTTP proxy tool is still the best alternative);
* File System;
* Miscellaneous (Clipboard, URL.Parse());
* WebView;
* IPC.
== Actions
With Xposed it's possible to perform actions such as start a unexported activity and much else:
* Start any activity (exported and unexported);
* Call any provider (exported and unexported);
* Disable FLAG_SECURE;
* SSL uncheck;
* Start, stop and restart the application.
== Extras
* APK Download;
* View the app's directory tree;
* Download the app's files;
* Download the output generated by hooks in text file format;
* Take a screen capture;
== Configuration
Even though our tool has some hooks to the HTTP libraries, using an external proxy tool is still the best option to analyze the app's traffic. With Inspeckage, you can:
* Add a proxy to the target app;
* Enable and disable proxy;
* Add entries in the arp table.

---

Hello,
I'm trying to get Inspeckage running on my LG G4 (H815, marshmallow v20e-208-01) .
I've tried with xposed v86 for arm64, then v85 for arm64 without success. I have get Inspeckage running fine (module installed, server started, webgui running) but when I try to start an application (i've tried for exemple FM radio) it fails with the system message "application has stop running"
Where could I be wrong ? Should I install another version of xposed ?
Thank you in advance.

---

Inspeckage - Android Package Inspector - v1.4.1 released
https://twitter.com/inspeckage
# Inspeckage - CHANGELOG
1.4.1
---------------
- add the option "Bind to address" on "Config" app screen - now you can bind to all interfaces, any specific local IP address, or to just the loopback interface.
Note: if you choose a non-loopback interface, other computers maybe can access the Inspeckage.
- bug fix - the "App is running:" always false
1.4
---------------
- tabs with badges (counter);
- for "+ Hooks", FLAG_SECURE and proxy options you dont need restart the app;
- enable/disable hooks (tabs);
- support to android 4.x (experimental);
- android:allowBackup in info area;
- app icon in info area;
- some bug fixes.
1.3
---------------
- New tab "+ Hooks". Now the user can specify new hook's dynamically.
- collapsible app info area
- some bug fixes
1.2
---------------
New logcat.html page. A experimental page with websocket to show some information from the logcat.
1.1b
---------------
Fix the backpressed crash
Fix intent launch not found
Improvements in the Start Activity option
1.0b
---------------
With Inspeckage, we can get a good amount of information about the application's behavior:
== Information gathering
* Requested Permissions;
* App Permissions;
* Shared Libraries;
* Exported and Non-exported Activities, Content Providers,Broadcast Receivers and Services;
* Check if the app is debuggable or not;
* Version, UID and GIDs;
* etc.
== Hooks (so far)
With the hooks, we can see what the application is doing in real time:
* Shared Preferences (log and file);
* Serialization;
* Crypto;
* Hashes;
* SQLite;
* HTTP (an HTTP proxy tool is still the best alternative);
* File System;
* Miscellaneous (Clipboard, URL.Parse());
* WebView;
* IPC.
== Actions
With Xposed it's possible to perform actions such as start a unexported activity and much else:
* Start any activity (exported and unexported);
* Call any provider (exported and unexported);
* Disable FLAG_SECURE;
* SSL uncheck;
* Start, stop and restart the application.
== Extras
* APK Download;
* View the app's directory tree;
* Download the app's files;
* Download the output generated by hooks in text file format;
* Take a screen capture;
== Configuration
Even though our tool has some hooks to the HTTP libraries, using an external proxy tool is still the best option to analyze the app's traffic. With Inspeckage, you can:
* Add a proxy to the target app;
* Enable and disable proxy;
* Add entries in the arp table.

---

AlaskanMalamute said:
Hello,
I'm trying to get Inspeckage running on my LG G4 (H815, marshmallow v20e-208-01) .
I've tried with xposed v86 for arm64, then v85 for arm64 without success. I have get Inspeckage running fine (module installed, server started, webgui running) but when I try to start an application (i've tried for exemple FM radio) it fails with the system message "application has stop running"
Where could I be wrong ? Should I install another version of xposed ?
Thank you in advance.
Click to expand...
Click to collapse
Please, try the version 1.4.1.
Thanks

---

doesnt work on mate7 mashmellow. when trying to inspect apk. lauching it just crash. no webgui

---

acarlosmartins said:
CHANGELOG
https://github.com/ac-pm/Inspeckage/blob/master/CHANGELOG
Introduction
Inspeckage is a tool developed to offer dynamic analysis of Android applications. With this tool we can better understand what an Android application is doing at runtime.
* https://twitter.com/inspeckage
* https://play.google.com/store/apps/details?id=mobi.acpm.inspeckage
How it works?
It is a simply application (apk) with an internal HTTP server providing a friendly web interface.
Features
Information gathering
Requested Permissions
App Permissions
Shared Libraries
Exported Activities and Non Exported Activities
Exported Content Provider and Non Exported Content Provider
Exported Services and Non Exported Services
Exported Broadcast Receiver and Non Exported Broadcast Receiver
If is Debuggable
Version, UID and GIDs
etc
Hooks (until now)
With the hooks, we can see what the application is doing in real time.
Shared Preferences (log and file)
Serialization
Crypto
Hash
SQLite
HTTP (a http proxy tool it is still the best alternative)
File System
Miscellaneous (Clipboard, URL.Parse())
WebView
IPC
Actions
With the Xposed is possible do some actions like start a not exported activity!
Start any activity (exported and non exported)
Calling any provider (exported and non exported)
Disable FLAG_SECURE
SSL uncheck
Start, close and restart the application
Extras
APK Download
View the app's directory tree
Download the app files
Download the output generated by hooks in text file format
Printscreen
Configuration
Even with some hooks at HTTP libraries, using an external proxy tool it is still the best alternative to analyze the traffic.
Add a proxy to the target app
Enable and disable proxy
Add entries in the arp table
Requirements
Xposed Framework
Download
http://repo.xposed.info/module/mobi.acpm.inspeckage
Source Code
https://github.com/ac-pm/Inspeckage
Screenshots
Tab Screenshot
Reporting bugs
For bug reports and feature requests, please post them in the GitHub Issues page.
Genymotion
I made a small tutorial on how to get it ready for Inspeckage.
https://vimeo.com/156745941
XDA:DevDB Information
Inspeckage, Xposed for all devices (see above for details)
Contributors
acarlosmartins
Source Code: https://github.com/ac-pm/Inspeckage
Xposed Package Name: mobi.acpm.inspeckage
Version Information
Status: Stable
Current Stable Version: 1.4.1
Stable Release Date: 2016-07-19
Created 2016-02-29
Last Updated 2016-07-19
Click to expand...
Click to collapse
First I have heard of this, apparently around a bit.
So ... can this be used to place Google Now pane as widget on someone else's launcher? (Want a Nobel?)
Other Google hacks?