ANDROCG(1)

πŸ“¦
version 3.4.0a1 Β· 2 versions
, in fedora 43

✨ NAME ✨

Okay bestie, meet androcg πŸ’… It's all about reverse engineering and pentesting for Android applications πŸ“± Literally iconic.


πŸ¦‹ SYNOPSIS πŸ¦‹

androcg [OPTIONS] APK

So you hand it an APK, toss in whatever options you want, and it does its thing 🧚


🌸 DESCRIPTION 🌸

Heads up, bestie, this little warning is baked right into the page, so don't panic if you see it πŸ’€

/usr/lib/python3.14/site-packages/androguard/core/bytecodes/apk.py:1039:
SyntaxWarning: "\>" is an invalid escape sequence. Such sequences will
not work in the future. Did you mean "\\>"? A raw string is also an
option.

Thus specifiying {"name": "foobar"} will match on <bla name="foobar" \> πŸ™ˆ

Create a call graph and export it into a graph format πŸ•ΈοΈ It's giving organized chaos.

The default is to create a file called callgraph.gml in the current directory! No cap, that's where it lands πŸ“‚

Classnames are found in the type "Lfoo/bar/bla;" ✨

Example:

$ androguard cg examples/tests/hello-world.apk

πŸ’– OPTIONS πŸ’–

  • -o, --output TEXT β€” Pick the filename for your output file. The extension decides which format gets used πŸ“ [default: callgraph.gml]
  • -s, --show β€” Instead of saving the graph, print it with mathplotlib πŸ–ΌοΈ (you might not see anything, so don't stress!)
  • -v, --verbose β€” Print more output, for when you want all the tea 🍡
  • --classname TEXT β€” Regex to filter by classname πŸ” [default: .*]
  • --methodname TEXT β€” Regex to filter by methodname πŸ”Ž [default: .*]
  • --descriptor TEXT β€” Regex to filter by descriptor 🧩 [default: .*]
  • --accessflag TEXT β€” Regex to filter by accessflags πŸšͺ [default: .*]
  • --no-isolated / --isolated β€” Don't store methods that have no xrefs πŸ™…β€β™€οΈ
  • --help β€” Show the help message and exit πŸ‘‘

androcg 3.4.0a1, September 2025, ANDROCG(1) 🌈 That's the whole tea, bestie! Go be a menace to some APKs πŸ’œπŸ«Ά

πŸ“¦ where this page comes from