APK Inspector: AAB Analyzer

Sudo Ezekiel

About this app

APK Inspector opens Android app files and tells you what is inside them. Point it at an APK on your storage, an app installed on your device, or an app bundle, and get a full readable report. No ads, no accounts, no uploads. The app does not request the internet permission, so nothing you inspect can leave your device.

It is the only Android app that can open an .aab file. App bundles store their manifest and resources in protobuf rather than the binary formats an APK uses, so other tools on the Play Store cannot read them on-device. APK Inspector decodes both.

WHAT IT SHOWS

Manifest
- Fully decoded AndroidManifest.xml, as a browsable report or as pretty-printed XML
- Package name, version name and code, min / target / compile SDK
- Every permission, including the API level each one stops applying at
- Activities, services, receivers and providers, with exported components flagged
- Intent filters and deep links, including whether app links are verified

Signature
- Which signature schemes actually verify: v1, v2, v3, v4
- SHA-256, SHA-1 and MD5 certificate fingerprints, ready to paste into Firebase or an API console
- Issuer, subject, validity dates, key algorithm and key size

Build
- Which compiler produced the file and at what version
- Whether the code was shrunk by R8, and whether a mapping file was produced
- Per-dex method and class counts, with a warning as a dex approaches the 64K limit
- Exact versions of the libraries inside, read from the build's own markers
- Whether a baseline profile shipped

Contents
- Size breakdown by code, native code, resources, assets and metadata
- Native ABIs, bitness, and whether libraries are stored or compressed
- Resource table browser with search and a filter per type

Play readiness
- Target SDK against Play's current floor
- 16 KB memory page alignment for native libraries
- 64-bit support
- Explicit android:exported on components with intent filters
- Signature scheme coverage and certificate expiry
- Resource table packaging
- Debuggable and test-only flags
- Permissions that need a Play declaration

SUPPORTED FILES
.apk, .aab, .apks, .xapk, and any app installed on your device.

EXPORT
Save the report as Markdown or JSON, or the manifest as XML, into Download/ApkInspector, or send it through the share sheet.

PRIVACY
No internet permission. No analytics. No ads. No account. Nothing is uploaded, because the app is technically incapable of uploading anything.

Material 3 interface with System, Light and Dark themes. Android 8.0 and up.

Part of a small family of offline Android tools: APK Extractor, AAB to APK Converter, and AAB Signer.

What’s new

First-run walkthrough and a Help and FAQ section in the drawer.