Skip to content

OutrageousStorm/android-permission-auditor

Folders and files

NameName
Last commit message
Last commit date

Latest commit

Β 

History

7 Commits
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 

Repository files navigation

πŸ” Android Permission Auditor

Audit every app on your Android for dangerous permissions β€” via ADB, no root required. CLI + HTML report.

Python ADB No Root License: MIT

Stop wondering what your apps are doing behind your back. Android Permission Auditor scans every installed app and tells you exactly which dangerous permissions they've been granted β€” in seconds.


✨ Features

  • πŸ” Scans all installed apps (third-party or all including system)
  • 🎯 Detects 30+ dangerous permissions (camera, microphone, location, SMS, etc.)
  • πŸ”΄ Risk scoring β€” HIGH / MEDIUM / LOW per app
  • πŸ“„ Beautiful HTML report with dark theme
  • πŸ’Ύ JSON export for scripting/automation
  • πŸŽ›οΈ Filter by package name
  • πŸ“± Multi-device support
  • ⚑ No root required β€” pure ADB

πŸ“¦ Requirements


πŸš€ Quick Start

# Clone
git clone https://github.com/OutrageousStorm/android-permission-auditor
cd android-permission-auditor

# Connect your phone via USB, enable USB Debugging, then:
python audit.py

# Generate an HTML report too
python audit.py --html

# Include system apps
python audit.py --all --html

# Filter by a specific app
python audit.py --filter com.facebook

πŸ“Š Example Output

πŸ” Android Permission Auditor
   Connected device: R3CN80XXXXX
   Scanning 87 third-party apps

============================================================
  AUDIT RESULTS β€” 2025-01-15 14:32
============================================================

  πŸ”΄ HIGH β€” com.facebook.katana
  ──────────────────────────────────────────────────────
    β€’ πŸ“ Precise GPS location
    β€’ πŸŽ™οΈ Use your microphone
    β€’ πŸ“· Use your camera
    β€’ πŸ“‡ Read your contacts
    β€’ πŸ’¬ Read your SMS messages
    β€’ πŸ’Ύ Read files/photos

  🟑 MEDIUM β€” com.instagram.android
  ──────────────────────────────────────────────────────
    β€’ πŸ“ Precise GPS location
    β€’ πŸ“· Use your camera
    β€’ πŸŽ™οΈ Use your microphone

πŸ›‘οΈ Dangerous Permissions Detected

Permission Risk
ACCESS_FINE_LOCATION Precise GPS tracking
RECORD_AUDIO Microphone access
CAMERA Camera access
READ_SMS Read all text messages
SEND_SMS Send SMS (could cost money)
READ_CONTACTS Access your contact list
READ_CALL_LOG See all call history
READ_PHONE_STATE Read IMEI & device identifiers
ACCESS_BACKGROUND_LOCATION Track you even when app is closed
PROCESS_OUTGOING_CALLS Intercept your calls
... and 20+ more

πŸ“„ HTML Report

Run with --html to generate a beautiful dark-themed report you can open in any browser:

python audit.py --html --output my_audit.html

πŸ”§ Full Usage

usage: audit.py [-h] [--device DEVICE] [--all] [--filter FILTER]
                [--html] [--output OUTPUT] [--json JSON]

Options:
  --device, -d    Target device serial (from adb devices)
  --all, -a       Include system apps
  --filter, -f    Filter packages by name substring
  --html          Generate HTML report
  --output, -o    HTML output filename (default: permission_audit.html)
  --json, -j      Save results as JSON

🀝 Contributing

PRs welcome! Ideas:

  • Watch mode (re-audit after installs)
  • Permission diff between audits
  • ADB over Wi-Fi support
  • App store lookup integration

πŸ“œ License

MIT β€” free to use, modify, and share.


Built with ❀️ for Android privacy nerds. No data ever leaves your machine.

About

πŸ” Audit every app on your Android for dangerous permissions β€” via ADB, no root required. CLI + HTML report.

Topics

Resources

License

Contributing

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors

Languages