jabari

Android security assessment from the terminal. Connect via USB or Wi-Fi (ADB) to evaluate device posture, application hardening, and system exposures with reproducible evidence.

The seven stages

  • DISCOVERY, ADB device enumeration: manufacturer, model, build, patch level, kernel, root indicators
  • ENUMERATION, package inventory, system properties and posture facts gathered from the device
  • ANALYSIS, rule engine evaluates posture. AND-001..007 detect debuggable, rooted, outdated or exposed devices
  • VALIDATION, non-destructive confirmation of findings with honest low-confidence attribution
  • EVIDENCE, SHA-256-hashed evidence store ties every finding to a reproducible artifact
  • RISK, severity × confidence scoring ranks what to fix first
  • REPORTING, offline re-renderable sessions: table, JSON, YAML, text, Markdown or HTML

Authorization guarantee

Jabari assesses only explicitly authorized USB and network-connected Android devices. High-risk modules require confirmation or explicit flags.

Install

git clone https://github.com/QYVORA/qyvora-jabari && cd qyvora-jabari && make install-user

Usage

  • jabari assess usb
  • jabari assess ip 192.168.1.50 -p deep -y
  • jabari report --list