Search the Community

StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications. This tool will look for interesting lines in the code which can contain: Hardcoded credentials API keys URL's of API's Decryption keys Major coding mistakes This tool was created with a big focus on usability and graphical guidance in the user interface. *: note that currently only apk files are supported, but ipa files will follow very shortly. Features The concept is that you drag and drop your mobile application file (an .apk or .ipa file) on the StaCoAn application and it will generate a visual and portable report for you. You can tweak the settings and wordlists to get a customized experience. The reports contain a handy tree viewer so you can easily browse trough your decompiled application. More info & Download [hide][Hidden Content]]