FrameX : APK & Security Audit

FrameX is the definitive privacy-first developer utility and on-device security audit suite for Android package inspection, static vulnerability analysis, framework detection, and APK extraction.

Engineered for Android developers, penetration testers, and security researchers, FrameX performs comprehensive bytecode, manifest, and asset inspection on installed packages or split APKs—with zero ads, zero tracking, and 100% offline processing.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
🛡️ STATIC SECURITY ANALYZER & AUDIT SUITE
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Perform on-device static vulnerability scans aligned with OWASP MASVS and CWE standards:
• Static Detection: Audits exported components, manifest configs, cryptographic flaws, and attack surfaces.
• Cryptographic Audit: Flags broken ciphers, default ECB modes, static IVs, and weak hashes (MD5, SHA-1).
• Hardcoded Secrets & Keys: Advanced Shannon entropy detection of leaked API keys, tokens, and credentials.
• Network & Web Security: Flags TLS hostname verifier bypasses, weak TrustManagers, and insecure WebViews.
• Anti-Tamper Posture: Audits screenshot prevention (FLAG_SECURE), root checks, Frida detection, and pinning.
• Tracker Radar: Identifies embedded third-party advertising, analytics, and tracking SDKs via Exodus rules.
• Report Exporter: Export comprehensive audit reports to PDF, GitHub Markdown (.md), or raw JSON with one tap.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
📁 APK PACKAGE INSPECTOR & APP BROWSER
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Explore the architecture of any APK package without unpacking to disk:
• Byte Breakdown: Proportional size analysis across DEX bytecode, native libs (.so), resources, and assets.
• Virtual File Explorer: Browse internal APK directories with live search and instant file extraction.
• DEX Header & Budget: Inspect multidex setups, total classes, and the 65,536 Dalvik method limit.
• APK Signatures: Verify v1, v2, v3, and v4 signing blocks with X.509 certificate details and Janus checks.
• Decoded Manifest: Read decoded AndroidManifest.xml with syntax highlighting and keyword search.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
🌐 7-DIMENSION DEVICE BROWSE ENGINE
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Filter, search, and cross-reference 600+ packages across 7 key dimensions:
• Declared Permissions, Signing Certificates (SHA-256/SHA-1), Target SDK, Min SDK, Install Source (Play Store, System, sideloaded), Shared Linux UIDs, and App Categories.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
🧩 ANDROID COMPONENTS & DEEP LINKS
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
• Components Inspector: Real-time inspection of Activities, Services, Receivers, and Content Providers. Launch exported and launcher activities directly.
• Deep Links & App Links: Audit custom URL schemes, intent filters, and verified Android App Links.
• Device Requirements: Evaluate declarations and OpenGL ES versions against host capabilities.
• Permissions Inspector: Categorized by protection levels (Dangerous, Signature, Normal) with grant status.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
🎨 ASSET VIEWERS & APK EXTRACTOR
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
• Media Inspection: Preview graphics (PNG, WebP, vector SVG), audio, video, SQLite databases, and hex dumps.
• Powerful APK Extractor: Extract single base APKs or split-APK bundles (.apks) to Downloads or SAF folders.
• Flutter Packages Scanner: Scans compiled Flutter binaries to list third-party open-source packages.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
🔒 PRIVACY-FIRST & ON-DEVICE
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
• 100% On-Device Analysis: All scanning and entropy checks execute locally. Your APKs and data are never uploaded.
• Zero Cloud Telemetry: No third-party trackers, no ads, and no data collection.

Download FrameX to inspect, analyze, and secure your Android applications!

Recent changes:
• Majar update
• Static Security Analyzer: On-device vulnerability & secrets detection
• Assets Manager: Inspect app assets, fonts, media & binary files
• Export audit reports to PDF, Markdown & JSON
• Performance improvements and bug fixes