APK Viper

On-device Android APK security analyzer — 38+ detection engines, 9-phase pipeline, 100% offline.

Features Detection Engines (38+ across a 9-phase pipeline) Phase Engines What They Detect 1 · Extract & Hash XapkExtractor, HashUtils (SHA256/MD5), ApkIntegrityVerifier, KnownMalwareDB, KnownGoodDB File/XAPK extraction, integrity check, known-good & known-bad hash matching 2 · Decompile DecompilerManager, DexParser, SmaliDisassembler, AxmlDecoder, DexOpcodeAnalyzer, TaintAnalyzer (smali) DEX→Smali→Java stubs, binary AXML manifest decode, opcode & smali-level taint 3 · Static (13 parallel) ManifestAnalyzer, PermissionAnalyzer, CodeAnalyzer, StringExtractor, CertificateAnalyzer, PackerDetector, CryptoMinerDetector, BehavioralDetector, ApiCallGraphAnalyzer, PermissionRiskMatrix, SecretLeakScanner, TinyMLClassifier, TaintAnalyzer Manifest/permission/cert issues, code & string patterns, hardcoded secrets, miners, behaviors, ML probability 4 · Deep (3 parallel) ObfuscationDetector, EntropyAnalyzer, OpcodeNgramAnalyzer Obfuscation, entropy, N-gram byte patterns 5 · Signature & Native (11 parallel) MalwarePatternDetector, YaraEngine, NativeAnalyzer, NativeCallGraphCorrelator, NativeBytecodeScanner, NativeLibraryDiffer, EntropyPackerDetector, NetworkAnalyzer, FrameworkIntegrityChecker, CfgStructuralAnalyzer, IntentRelationGraphAnalyzer YARA rules, native .so behavior, network sinks, CFG similarity, intent graphs, framework tampering 6 · Supply Chain (2) SDKAnalyzer, FrameworkIntegrityChecker Vulnerable/outdated SDKs, framework integrity 7 · Anti-Evasion + Intel (2) AntiEvasionDetector, ThreatIntelDB Evasion (debugger/VM/sandbox), C2 IPs & malicious domains 8 · Behavioral Profiling (9 parallel) NativeBehaviorAnalyzer, PhishingOverlayAnalyzer, NetworkBehaviorProfiler, BehaviorTimelineAnalyzer, BackgroundResourceMonitor, ModApkDetector, ShizukuDetector, VirtualAppDetector, AccessibilityChainAnalyzer Overlay phishing, virtual environments, modded/repackaged apps, accessibility abuse, resource abuse 9 · Scoring (3) PrivacyScorer, ThreatScorer, ThreatClassifier Privacy risk, weighted threat score, classification + remediation