Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: Honeynet Project: Android Reverse Engineering (A.R.E.) Virtual Machine released - SANS Internet Storm Center SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Honeynet Project: Android Reverse Engineering (A.R.E.) Virtual Machine released

Christian (@cseifert) of the Honeynet Project advised us that they've released A.R.E, the Android Reverse Engineering Virtual Machine.

This VirtualBox-ready VM includes the latest Android malware analysis tools as follows:

  • Androguard
  • Android sdk/ndk
  • APKInspector
  • Apktool
  • Axmlprinter
  • Ded
  • Dex2jar
  • DroidBox
  • Jad
  • Smali/Baksmali

A.R.E. is freely available from

Given the probable exponential growth in mobile malware, A.R.E. presents an opportunity to test, learn, and analyze.

Russ McRee


Russ McRee

204 Posts
ISC Handler
Nov 1st 2011
Christian is aware of the issues some were having earlier with download speeds. He says torrents will be up soon (and I personally am seeing a 10x increase in download speed from what I was seeing this morning). Also, the wiki page has been updated with SHA256 and SHA512 hashes for the .tar.gz file.

423 Posts
ISC Handler
Note that the default keyboard layout is AZERTY, in case of confusion.
1 Posts

Sign Up for Free or Log In to start participating in the conversation!