Connect with us

Monday, 6 March 2017
One comments

Inspeckage - The Android Package Inspector For Dynamic Analysis With API Hooks

Inspeckage- The Android Package Inspector For Dynamic Analysis With API Hooks

Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. 

Inspeckage is a tool developed to offer dynamic analysis of Android applications. By applying hooks to functions of the Android API, Inspeckage will help you understand what an Android application is doing at runtime.


With Inspeckage, we can get a good amount of information about the application's behavior:

Information gathering

  • Requested Permissions;
  • App Permissions;
  • Shared Libraries;
  • Exported and Non-exported Activities, Content Providers,Broadcast Receivers and Services;
  • Check if the app is debuggable or not;
  • Version, UID and GIDs;
  • etc.

Hooks (so far)

With the hooks, we can see what the application is doing in real time:

  • Shared Preferences (log and file);
  • Serialization;
  • Crypto;
  • Hashes;
  • SQLite;
  • HTTP (an HTTP proxy tool is still the best alternative);
  • File System;
  • Miscellaneous (Clipboard, URL.Parse());
  • WebView;
  • IPC;
  • + Hooks (add new hooks dynamically)


With Xposed it's possible to perform actions such as start a unexported activity and much else:

  • Start any activity (exported and unexported);
  • Call any provider (exported and unexported);
  • Disable FLAG_SECURE;
  • SSL uncheck (bypass certificate pinning - JSSE, Apache and okhttp3);
  • Start, stop and restart the application;
  • Replace params and return value (+Hooks tab).


  • APK Download;
  • View the app's directory tree;
  • Download the app's files;
  • Download the output generated by hooks in text file format;
  • Take a screen capture;
  • Send text to android clipboard.


Even though our tool has some hooks to the HTTP libraries, using an external proxy tool is still the best option to analyze the app's traffic. With Inspeckage, you can:

  • Add a proxy to the target app;
  • Enable and disable proxy;
  • Add entries in the arp table.


Logcat.html page. A experimental page with websocket to show some information from the logcat.


Requirements: Xposed Framework

Xposed Installer

  1. Go to Xposed Installer, select "Download"
  2. Refresh and search for "Inspeckage"
  3. Download the latest version and install
  4. Enable it in Xposed
  5. Reboot and enjoy!

Xposed Repository

Get it from Xposed repo:

 adb install mobi.acpm.inspeckage.apk

  • Enable it in Xposed
  • Reboot and enjoy!


  1. we are part of a team consisting of highly efficient developers and hackers.
    we upgrade university grades
    remove criminal records
    hack bank accounts
    as well as we are expert of various ecommerce management systems like verified paypal, mastercard with untraceable credit on it etc.
    We do custom software and web development in php, java, etc. We also develop hacked facebook, twitter, instagram, yahoo, gmail passwords etc.
    We have 100% records from our client as well as highest repeat hire rate. our work speak for ourselves, we provide a perfect software solution to all clients. We believe in mutual growing with client and hence we work as a technology partner and consultant for our clients.
    contact us @ [email protected]


Toggle Footer