SecureDroid Mobile Security Suite

SecureDroid is a comprehensive mobile application security testing platform designed to help security professionals identify and remediate vulnerabilities in Android and iOS applications.

Features

• 🔍 Static Analysis: Analyze application code without execution
• 🌐 Dynamic Analysis: Test applications during runtime with Frida and Objection
• ⭐ Device Management: Manage physical devices for testing
• 📱 Emulator Management: Create and manage emulators for testing
• 💻 Vulnerability Tracking: Track and manage identified vulnerabilities
• 🎨 Modern Dark/Light Theme UI: Sleek, modern interface with theme options
• 📊 Dashboard: Visualize security metrics and findings
• 📝 Reporting: Generate comprehensive security reports
• 🔄 OWASP Top 10 Mobile: Track vulnerabilities based on OWASP Mobile Top 10

Getting Started

Prerequisites

• Backend: Python 3.8+ (FastAPI)
• Frontend: Node.js (v14 or higher) and npm (v6 or higher)
• Database: MongoDB (optional for simple mode)

Installation

1. Clone the repository:

   git clone https://gitlab.com/shekharcharles/securedroid.git
   cd securedroid
   

2. Install dependencies:

   npm run install-all
   

Starting the Application

Option 1: Quick Start (Recommended)

One-Click Startup:

start_securedroid.bat

This will automatically:

• Check system requirements (Python, Node.js, MongoDB)
• Start the FastAPI backend on port 8000
• Start the React frontend on port 3000
• Open both in separate windows

Option 2: Manual Startup

1. Start the FastAPI Backend:

   cd backend
   start_backend.bat
   # OR manually:
   python main.py

2. Start the Frontend (in a separate terminal):

   cd frontend
   npm start

Option 3: Using Original Node.js Backend (Legacy)

cd backend_nodejs
npm run dev

Accessing the Application

• Frontend: http://localhost:3000
• FastAPI Backend: http://localhost:8000
• API Documentation: http://localhost:8000/docs (Swagger UI)
• API Endpoints: http://localhost:8000/api

Default Users

The application comes with three default users:

1. Admin User

   • Email: admin@securedroid.com
   • Password: admin123
   • Role: admin

2. Pentester User

   • Email: pentester@securedroid.com
   • Password: pentester123
   • Role: pentester

3. Regular User

   • Email: user@securedroid.com
   • Password: user123
   • Role: user

Backend Architecture

FastAPI Backend (New - Recommended)

• Framework: Python FastAPI with async support
• Database: MongoDB with Beanie ODM
• Authentication: JWT tokens with role-based access
• Documentation: Auto-generated Swagger UI
• Location: backend/ directory

Node.js Backend (Original)

• Framework: Express.js
• Database: MongoDB with Mongoose
• Authentication: JWT tokens
• Location: backend_nodejs/ directory

API Structure

Both backends provide the same API endpoints:

• /api/auth/* - Authentication endpoints
• /api/users/* - User management endpoints
• /api/applications/* - Application management endpoints
• /api/vulnerabilities/* - Vulnerability management endpoints
• /api/static-analysis/* - Static analysis endpoints
• /api/dashboard/* - Dashboard data endpoints

License

This project is developed by Shekhar Charles.

Backend Migration

This project now includes both Node.js and Python FastAPI backends:

Why FastAPI?

• Performance: Faster than Express.js with async support
• Type Safety: Built-in type validation with Pydantic
• Documentation: Automatic API documentation generation
• Modern: Latest Python async/await patterns
• Testing: Better testing capabilities

Migration Benefits

• ✅ API Compatibility: Same endpoints and request/response formats
• ✅ Enhanced Security: Improved authentication and validation
• ✅ Better Documentation: Auto-generated Swagger UI
• ✅ Type Safety: Full type checking and validation
• ✅ Performance: Async operations and better scalability

Choosing a Backend

• Use FastAPI (backend/) for new development and better performance
• Use Node.js (backend_nodejs/) for compatibility with existing deployments

Acknowledgments

• FastAPI - Modern Python web framework
• React - The web framework used
• Express - The original backend framework
• MongoDB - The database used
• Frida - The dynamic instrumentation toolkit
• Objection - Runtime mobile exploration toolkit