Skip to content
DeadDroid-v2.0---PhantomDroid GitHub Details, Stars and Alternatives | OpenRepoFinder
Home / Repositories / faizzyhon/DeadDroid-v2.0---PhantomDroid faizzyhon / repository
DeadDroid-v2.0---PhantomDroid The ultimate Android Penetration Testing Framework. A professional operations platform featuring automated APK binding, live TUI dashboards, Telegram remote control, AI-powered smali mutation, and Claude AI integration for security researchers.
#android-security-penetration #apk-binder #claude-ai-reverse-engineering #cybersecurity #ethical-hacking #exploit-development
View Repository on GitHub ↗ REPOSITORY OVERVIEW Live repository statistics ★ 7 Stars
⑂ 0 Forks
◯ 0 Open issues
◉ 7 Watchers
66 /100
OPENREPOHUB HEALTH SIGNAL Healthy signals A transparent discovery signal based on current public GitHub metadata.
Recent activity35% weight
100 Community adoption25% weight
13 Maintenance state20% weight
100 License clarity10% weight
0 Project information10% weight
75 This score does not audit code, security, maintainers, documentation quality, or suitability. Verify the repository and its current documentation before adoption.
README preview
██████╗ ███████╗ █████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██╗██████╗
██╔══██╗██╔════╝██╔══██╗██╔══██╗██╔══██╗██╔══██╗██╔═══██╗██║██╔══██╗
██║ ██║█████╗ ███████║██║ ██║██║ ██║██████╔╝██║ ██║██║██║ ██║
██║ ██║██╔══╝ ██╔══██║██║ ██║██║ ██║██╔══██╗██║ ██║██║██║ ██║
██████╔╝███████╗██║ ██║██████╔╝██████╔╝██║ ██║╚██████╔╝██║██████╔╝
╚═════╝ ╚══════╝╚═╝ ╚═╝╚═════╝ ╚═════╝ ╚═╝ ╚═╝ ╚═════╝ ╚═╝╚═════╝
DeadDroid v2.0 — PhantomDroid
Android Penetration Testing Framework
The most advanced open-source Android penetration testing framework — built for professionals.
⚠️ LEGAL DISCLAIMER
DeadDroid is developed for authorised penetration testing, security research, and educational purposes only .
Using this tool against systems without explicit written permission is illegal and may result in criminal prosecution.
The author assumes zero liability for misuse. You are solely responsible for your actions.
Table of Contents
★ What Makes DeadDroid Different
Every other Android pentest tool gives you a payload generator and a session shell.
DeadDroid gives you an entire operations platform — features that simply don't exist anywhere else.
Feature TheFatRat AhMyth Ghost AndroRAT DeadDroid Payload generation ✔ ✔ ✔ ✔ ✔ APK binding ✔ ✔ ✗ ✗ ✔ Session management ✗ ✔ ✔ ✔ ✔ Live TUI dashboard ✗ ✗ ✗ ✗ ✔ Telegram remote control ✗ ✗ ✗ ✗ ✔ Campaign manager ✗ ✗ ✗ ✗ ✔ Payload DNA tracking ✗ ✗ ✗ ✗ ✔ AI mutation engine ✗ ✗ ✗ ✗ ✔ Steganography delivery ✗ ✗ ✗ ✗ ✔ Android CVE scanner ✗ ✗ ✗ ✗ ✔ Mass payload batch ✗ ✗ ✗ ✗ ✔ Claude AI advisor ✗ ✗ ✗ ✗ ✔ HTML report generator ✗ ✗ ✗ ✗ ✔ Auto session keepalive ✗ ✗ ✗ ✗ ✔
✨ Features
Core Modules Module Description Payload Generator Generate Android APK payloads using msfvenom — 5 payload types, multiple encoders, auto-obfuscation APK Binder Inject Metasploit payloads into legitimate APKs — decompile → inject → recompile → sign, fully automated Session Manager Full Metasploit RPC integration — list sessions, run commands, device info, file ops, GPS, mic, camera ngrok Manager TCP & HTTP tunnel management via ngrok API v3 — start, list, stop tunnels in-tool Port Forwarding socat, SSH -L/-R tunnels, iptables PREROUTING — multi-backend forwarding engine Report Generator Generate professional HTML pentest reports with severity-rated findings AI Assistant Claude-powered pentest advisor — real-time guidance, technique suggestions, report help Configuration Persistent settings — MSF RPC credentials, default LHOST/LPORT, keepalive intervals
Extra Features (not found in other tools) Feature Description Auto Session Fetch Polls Metasploit RPC for new sessions — automatically starts keepalive on each new connection Long Session Keepalive Background thread sends periodic getuid heartbeats to prevent session timeout QR Payload Delivery Generate QR codes pointing to payload download URLs for social-engineering simulations Auto Multi-Handler One-click Metasploit listener launch with auto-run post-exploitation scripts SSL Pinning Bypass Auto-generate Frida scripts to bypass certificate pinning in Android apps ADB Helpers List devices, open shells, install APKs — ADB wrapped in a clean TUI Network Scanner nmap-powered live host discovery and port scanning Listener Monitor Poll a port and alert when a session connects — no more watching the terminal Claude AI Chat Persistent conversation with prompt caching — ask anything about Android pentesting
🏗 Architecture DeadDriod/
├── main.py ← Entry point — main menu, module loader
├── config.py ← Persistent settings (JSON-backed)
├── requirements.txt ← Python dependencies
├── setup.sh ← One-shot installer (Kali/Debian/Ubuntu)
└── core/
├── banner.py ← ASCII art, version, developer info
├── utils.py ← Shared helpers — IPs, tool checks, workspace
├── payload_gen.py ← msfvenom wrapper, payload menu, RC script gen
├── apk_binder.py ← Full APK injection pipeline (apktool + smali)
├── session_mgr.py ← Metasploit RPC client, keepalive, device ops
├── ngrok_handler.py ← ngrok v3 API — TCP/HTTP tunnel management
├── network.py ← socat, SSH tunnels, iptables forwarding
├── ai_assistant.py ← Claude AI with prompt caching, sign-in/out
├── reporter.py ← HTML report generator with severity badges
├── extras.py ← QR, auto-handler, ADB, scanner, Frida bypass
├── dashboard.py ← ★ Live TUI session dashboard
├── telegram_bot.py ← ★ Telegram push alerts + remote control
├── campaign.py ← ★ Campaign & target manager
├── payload_dna.py ← ★ Per-payload DNA tracking system
├── ai_mutator.py ← ★ AI-powered smali mutation engine
├── stego_delivery.py ← ★ LSB steganography payload delivery
├── cve_scanner.py ← ★ Android CVE fingerprint + NVD lookup
└── mass_payload.py ← ★ Batch payload generator with DNA + ZIP
Data stored in ~/.deaddroid/ ~/.deaddroid/
├── payloads/ ← Generated APKs, RC scripts, QR codes
├── sessions/ ← Session logs
├── reports/ ← HTML pentest reports
├── logs/ ← deaddroid.log
├── certs/ ← Debug keystore for APK signing
├── config.json ← User settings
└── ai_config.json ← Claude API key (encrypted path)
📋 Requirements
System (Linux — Kali recommended) Tool Purpose Install python3.10+Runtime apt install python3msfvenom / msfconsolePayload gen & handlers apt install metasploit-frameworkapktoolAPK decompile/recompile apt install apktoolkeytool / jarsignerAPK signing apt install default-jdkadbADB shell helpers apt install adbsocatPort forwarding apt install socatnmapNetwork scanner apt install nmapngrokTunnel management See ngrok.com/download fridaSSL pinning bypass pip install frida-tools
Python Packages rich>=13.7.0 # Beautiful terminal UI
anthropic>=0.25.0 # Claude AI API
pymetasploit3>=1.0.3 # Metasploit RPC client
qrcode[pil]>=7.4.2 # QR code generation
Pillow>=10.0.0 # Image handling
requests>=2.31.0 # HTTP utilities
🚀 Installation
Method 1 — Automated (Recommended for Kali/Debian) # Clone the repository
git clone https://github.com/faizzyhon/DeadDroid.git
cd DeadDroid
# Run the installer as root
chmod +x setup.sh
sudo ./setup.sh
# Launch from anywhere
deaddroid
Method 2 — Manual # 1. Clone
git clone https://github.com/faizzyhon/DeadDroid.git
cd DeadDroid
# 2. Install system tools (Kali / Debian / Ubuntu)
sudo apt update
sudo apt install -y python3 python3-pip python3-venv \
default-jdk apktool adb socat nmap \
metasploit-framework curl git
# 3. Install ngrok
curl -sSL https://ngrok-agent.s3.amazonaws.com/ngrok.asc \
| sudo tee /etc/apt/trusted.gpg.d/ngrok.asc >/dev/null
echo "deb https://ngrok-agent.s3.amazonaws.com buster main" \
| sudo tee /etc/apt/sources.list.d/ngrok.list
sudo apt update && sudo apt install ngrok
# 4. Create virtual environment
python3 -m venv venv
source venv/bin/activate
# 5. Install Python dependencies
pip install -r requirements.txt
# 6. Run
python3 main.py
Method 3 — Kali One-Liner git clone https://github.com/faizzyhon/DeadDroid.git && \
cd DeadDroid && sudo ./setup.sh
⚡ Quick Start # 1. Start Metasploit RPC (needed for session management)
start-msfrpc msf123 55553
# 2. Add your ngrok authtoken (optional, for remote testing)
ngrok config add-authtoken YOUR_NGROK_TOKEN
# 3. Launch DeadDroid
deaddroid
You'll see the main menu:
╭─────────────────── Main Menu ───────────────────╮
│ [1] ⚡ Payload Generator │
│ [2] 🔧 APK Binder │
│ [3] 📡 Session Manager │
│ [4] 🌐 ngrok Tunnel Manager │
│ [5] 🔀 Network & Port Forwarding │
│ [6] ✨ Extra Features │
│ [7] 📝 Report Generator │
│ [8] 🤖 AI Assistant (Claude) │
│ [9] ⚙️ Configuration │
│ [0] 🚪 Exit │
╰─────────────────────────────────────────────────╯
📖 Module Guide
1. Payload Generator Generate Android APK payloads using msfvenom.
# Payload Description 1 android/meterpreter/reverse_tcpClassic reverse TCP meterpreter 2 android/meterpreter/reverse_httpsEncrypted HTTPS (evades basic IDS) 3 android/shell/reverse_tcpLightweight raw shell 4 android/meterpreter/reverse_httpHTTP meterpreter 5 android/meterpreter/bind_tcpBind TCP (device listens)
Encoder selection (shikata_ga_nai, custom iterations)
ngrok integration — LHOST auto-set to tunnel address
Auto-generates Metasploit RC handler script
Payload saved to ~/.deaddroid/payloads/
# Example flow
Select payload: 2 (reverse_https)
LHOST: 192.168.1.10
LPORT: 4444
Use ngrok? Yes
→ Payload: ~/.deaddroid/payloads/payload_abc123.apk
→ Handler: ~/.deaddroid/payloads/payload_abc123.rc
2. APK Binder Inject a Metasploit payload into an existing APK for social-engineering assessment.
Decompile host APK with apktool
Generate msfvenom payload APK
Decompile payload APK
Copy payload smali classes into host
Merge required Android permissions
Hook launcher Activity's onCreate
Recompile with apktool
Sign with debug keystore (jarsigner)
# Example
Path to target APK: /home/user/whatsapp.apk
LHOST: 192.168.1.10
LPORT: 5555
→ Output: ~/.deaddroid/payloads/bound_whatsapp_ab12.apk
→ SHA-256: d4e5f6...
