drozer is an security testing framework for Android.

drozer allows you to search for security vulnerabilities in apps and devices by assuming the role of an app and interacting with the Android Runtime, other apps' IPC endpoints and the underlying OS.

drozer provides tools to help you use, share and understand public Android exploits.

drozer is open source software, maintained by WithSecure, and can be downloaded from: https://labs.withsecure.com/tools/drozer/

This is an BETA release of a rewritten drozer version, this version is updated to support python3.

Currently, the following known issues are present:

• Building of custom agents functionality will crash the drozer client. This functionality is considered out of scope for the beta release of the revived drozer project.
• It is not possible to run drozer on a Windows host; you must run drozer on either a virtual machine or Docker image

To help with making sure drozer can be run on all systems, a Docker container was created that has a working build of Drozer.

• The Docker container and basic setup instructions can be found here.
• Instructions on building your own Docker container can be found here.

1. Python3.8
2. Protobuf 4.25.2 or greater
3. Pyopenssl 22.0.0 or greater
4. Twisted 18.9.0 or greater
5. Distro 1.8.0 or greater
6. Java Development Kit 11 or greater

You can use pip to install the latest release of drozer:

pip install drozer-<version>.whl

All of thee requirements can be installed via the following command:

sudo apt install python3 python3-pip python3-protobuf python3-openssl \
python3-twisted python3-yaml python3-distro git protobuf-compiler \
libexpat1 libexpat1-dev libpython3-dev python-is-python3 zip default-jdk

Then build drozer for Python wheel

git clone https://github.com/WithSecureLabs/drozer.git
cd drozer
python setup.py bdist_wheel

Finally, install drozer

pip install dist/drozer-<version>-py3-none-any.whl

On any arch based installation, until proper pkgbuilds and pip packages are created, please use an virtualenv.

git clone https://github.com/WithSecureLabs/drozer.git
cd drozer
virtualenv -p /usr/bin/python3 venv
source venv/bin/activate
python setup.py bdist_wheel
sudo pip install dist/drozer-<version>-py3-none-any.whl

If protobuf complains about the protobuf defintions being out of date. Copy the protobuf definition from here into common/protobuf.proto

Then run

cd common
protoc --python_out=../src/pysolar/api/ protobuf.proto

drozer can be installed using Android Debug Bridge (adb).

Download the latest drozer Agent here.

$ adb install drozer-agent.apk

You should now have the drozer Console installed on your PC, and the Agent running on your test device. Now, you need to connect the two and you’re ready to start exploring.

We will use the server embedded in the drozer Agent to do this.

You need to set up a suitable port forward so that your PC can connect to a TCP socket opened by the Agent inside the device or emulator. By default, drozer uses port 31415:

$ adb forward tcp:31415 tcp:31415

Now, launch the Agent, select the "Embedded Server" option and tap "Enable" to start the server. You should see a notification that the server has started.

On your PC, connect using the drozer Console:

$ drozer console connect

If using a real device, the IP address of the device on the network must be specified:

$ drozer console connect --server 192.168.0.10

You should be presented with a drozer command prompt:

selecting f75640f67144d9a3 (unknown sdk 4.1.1)  
dz>

The prompt confirms the Android ID of the device you have connected to, along with the manufacturer, model and Android software version.

drozer is released under a 3-clause BSD License. See LICENSE for full details.

drozer is Open Source software, made great by contributions from the community.

For full source code, to report bugs, suggest features and contribute patches please see our Github project:

https://github.com/WithSecureLabs/drozer

Bug reports, feature requests, comments and questions can be submitted here.