AndroGuard

github.com/androguard/androguard Security Tools Open-source projectOpen source

AndroGuard provides tools for reverse engineering and penetration testing Android applications.

github.com/androguard/androguard
AndroGuard homepage screenshot

About AndroGuard

AndroGuard is an open-source Python toolkit for reverse engineering and penetration testing Android applications. It can open an APK, inspect the manifest and DEX, disassemble or decompile code, look up cross-references, run vulnerability scanners, examine native ARM64 code, and decode or rebuild APK project trees. Optional extras enable disassembly, decompilation, ARM support and patching. The project also ships Claude Code skills and an MCP server so LLM hosts can call typed analysis tools.

Version 5 lives in this repository and is not the package published on PyPI, which is androguard 4.1.4. Installing from the checkout requires a Rust toolchain for the optional extras, and Python 3.14 needs the PyO3 forward-compatibility flag. The project notes that versions 4.0.0 and later differ substantially from 3.3.5 and that some functionality has been removed.

Key features

  • APK and DEX analysis: package metadata, permissions, classes, methods, strings
  • Dalvik disassembly and control-flow graphs via androguard[disasm]
  • Java decompilation of methods, classes or whole packages via androguard[decompile]
  • Cross-reference lookup, vulnerability scanners and method emulation
  • Native ARM64 disassembly and decompilation of .so code via androguard[arm]
  • MCP server and Claude Code skills for LLM hosts
Best for: Security researchers, analysts and developers who work in Python and need to inspect, decompile or test Android application packages.
Good for
  • Open-source Python toolkit covering APK, DEX, manifest, resources and native code analysis
  • Optional extras add disassembly, decompilation, ARM support and APK patching
  • Includes runnable examples, an MCP server and Claude Code skills for agent-driven analysis
Watch out for
  • Version 5 must be installed from a checkout; a bare pip install androguard downloads 4.1.4
  • Optional extras require a Rust toolchain, and Python 3.14 needs the PyO3 forward-compatibility flag
  • Substantial differences from version 3.3.5; certain functionalities have been removed in 4.0.0 and later

AndroGuard at a glance

Type
Open-source project
Pricing
Not confirmed. Check the site
Platforms
Android
Open source
Yes · Source code
Language
English
Last checked
Oct 5, 2026 · Online when checked
Listed
Oct 5, 2026

AndroGuard alternatives

Tools and sites you could use instead, ranked by how closely they match.

All 24 alternatives

Popular in Security Tools

Well-known listings from the same topic.

All 202

AndroGuard FAQ

Does pip install androguard install version 5?
No. The package currently published on PyPI is androguard 4.1.4; installing it uninstalls 5.0.0. Version 5 is this repository and must be installed from a checkout.
What is required to install the optional features?
The extras such as disassembly, decompilation, ARM support and patching require a Rust toolchain when installed from the repository checkout.
Can AndroGuard be used from an LLM host?
Yes. It can run as an MCP server so hosts such as Claude Code and Cursor call typed analysis tools, and the repository ships Claude Code skills including /analyze-apk, /decompile-apk, /find-refs and /scan-vulns.
Is something wrong or out of date?

Tell us and an editor will check it.

Own this website?

Claim the listing and suggest updates yourself. An editor checks every claim first.

Claim this listing