APKSIELD
Shaguftha KulsumBased on the attached APKSHIELD synopsis for CIDECODE Hackathon 2026, build a COMPLETE FULL-STACK WEB APPLICATION called APKSHIELD — an India-specific APK Threat Analysis Platform with C2 Detection for cybercrime investigators. Build an actual working application, not a UI mockup or demo. Use: Frontend: - React.js - Tailwind CSS - D3.js - WebSockets Backend: - Python 3.11 - FastAPI - Celery - Redis Database & Storage: - PostgreSQL - SQLAlchemy - MinIO APK Analysis: - androguard - apktool - JADX - Frida - Android Emulator/AVD - mitmproxy - tshark - scapy - YARA - scikit-learn Threat Intelligence: - VirusTotal API - AbuseIPDB - Shodan - MISP Implement: - JWT authentication - APK upload system - Static APK analysis - Dynamic sandbox analysis - Permission extraction - URL/IP extraction - Firebase-as-C2 detection - Telegram bot token extraction - Runtime API hooking - PCAP generation - DNS logging - Beaconing detection - IOC extraction - MITRE ATT&CK mapping - Threat scoring engine - Malware classification - D3.js infrastructure graph - Real-time WebSocket logs - FIR-ready PDF forensic reports - Evidence chain logging - Investigator dashboard - Role-based access control Make the platform India-specific by including: - fake Indian banking app detection - SBI/HDFC/ICICI/Paytm/PhonePe spoof detection - Aadhaar/IRCTC phishing APK detection - Indian cybercrime investigation workflows - FIR-ready reporting format Generate: - full frontend - full backend - API routes - database schema - Docker setup - Docker Compose - Celery workers - WebSocket implementation - reusable architecture - setup instructions - README.md The final output should resemble a real SOC-grade malware investigation platform used by Indian cybercrime investigators and must be fully runnable locally using Docker.
Comments (0)
Sign in to leave a comment
Project Tasks
148 planning tasksLanding
Login
Dashboard
Fix Dashboard review findings: Mobile: the Recent Activity table is rendered as a… (+2 more)
Fix Dashboard review finding: In Recent Activity rows, the APK package name and…
Fix Dashboard review findings: Mobile: the Recent Activity table is rendered as a… (+4 more)
Fix Dashboard review findings: frontend/src/components/Dashboard Analytics Overview.jsx… (+8 more)
Fix Dashboard review findings: frontend/src/components/Dashboard Analytics Overview.jsx… (+5 more)
Dashboard / Navigation
Dashboard / Analytics Overview
Dashboard / Quick Actions
Dashboard / Recent Activity
Dashboard / Sandbox Status
Dashboard / Footer
Users
Fix Users review findings: Users table is horizontally clipped at tablet and mobile… (+1 more)
Fix Users review findings: Users table is horizontally clipped at tablet and mobile… (+1 more)
Fix Users review findings: Users table is horizontally clipped at tablet and mobile… (+5 more)
Fix Users review findings: Users table is horizontally clipped at tablet and mobile… (+2 more)
Users / Navigation
Users / Header
Users / Filter Bar
Users / Table
Users / Pagination
Users / Permissions Modal
Users / Action Panel
Users / Footer
Settings
Fix Settings review findings: Mobile: the API Credentials tab bar overflows its… (+2 more)
Fix Settings review findings: Mobile: the API Credentials tab bar overflows its… (+6 more)
Fix Settings review findings: Mobile: the API configuration tab bar overflows its panel… (+9 more)
Fix Settings review findings: Mobile: the API configuration tab bar overflows its panel… (+6 more)
Settings / Navigation
Settings / Header
Settings / Api Configuration
Settings / Threat Feeds
Settings / Yara Rules
Settings / Footer
Sandbox
Fix Sandbox review findings: Mobile: large blank gap between the Resource Alerts… (+2 more)
Fix Sandbox review findings: Mobile: large blank gap between the Resource Alerts… (+12 more)
Fix Sandbox review findings: Mobile: large blank gap between the Resource Alerts… (+6 more)
Fix Sandbox review findings: Mobile: large blank gap between the Resource Alerts… (+3 more)
Fix Sandbox review findings: Mobile: large blank gap between the Resource Alerts… (+1 more)
Fix Sandbox review findings: Mobile: large blank gap between the Resource Alerts… (+2 more)
Fix Sandbox review findings: Mobile: large blank gap between the Resource Alerts… (+1 more)
Fix Sandbox review findings: Mobile: large blank gap between the Resource Alerts… (+1 more)
Fix Sandbox review findings: Mobile: large blank gap between the Resource Alerts… (+5 more)
Fix Sandbox review findings: Mobile: Quick Actions 'Primary Operations' panel is… (+8 more)
Fix Sandbox review findings: Mobile: large blank gap between the Resource Alerts… (+3 more)
Fix Sandbox review findings: Mobile: large blank gap between the Resource Alerts… (+3 more)
Sandbox / Navigation
Sandbox / Hero
Sandbox / Infrastructure Overview
Sandbox / Emulator Grid
Sandbox / Stats
Sandbox / Live Monitoring
Sandbox / Configuration Panel
Sandbox / Resource Alerts
Sandbox / Quick Actions
Sandbox / Footer
Database
Fix Database review findings: frontend/src/components/Database Filters.jsx with… (+1 more)
Fix 18 Database files: Reference Error: date Preset is not defined
Fix Database review findings: Threat Feeds table action buttons are clipped at the right… (+27 more)
Fix Database review findings: frontend/src/components/Database Hero.jsx: collection… (+10 more)
Fix Database review findings: frontend/src/components/Database Hero.jsx: collection… (+7 more)
Fix Database Hero.jsx: ✗ Build failed in 3.58s
Database / Navigation
Database / Hero
Database / Stats
Database / Filters
Database / Search
Database / Malware Table
Database / YARATable
Database / Threat Feeds Table
Database / Metrics
Database / Actions
Database / Footer
Logs
Upload
Fix Upload review findings: Duplicate submit action bars render stacked on top of each… (+7 more)
Fix Upload review findings: Duplicate submit action bars render stacked on top of each… (+17 more)
Fix Upload review findings: Duplicate submit action bars render stacked on top of each… (+16 more)
Fix Upload review findings: Duplicate submit action bars render stacked on top of each… (+12 more)
Fix Upload review findings: Duplicate submit action bars render stacked on top of each… (+9 more)
Upload / Navigation
Upload / Hero
Upload / Drop Zone
Upload / File List
Upload / Advanced Options
Upload / Analysis Options
Upload / Actions
Upload / Progress Tracker
Upload / Help Guide
Upload / Footer
Analysis
Fix Analysis review findings: Mobile: the Analysis Action Panel action buttons (Generate… (+10 more)
Fix Analysis review findings: Mobile: the Analysis Action Panel (Generate FIR Report /… (+12 more)
Fix Analysis review findings: Mobile: the Analysis Action Panel (Generate FIR Report /… (+9 more)
Analysis / Navigation
Analysis / Hero
Analysis / Upload Prompt
Analysis / Live Monitor
Analysis / Static Results
Analysis / Dynamic Results
Analysis / IOCExtraction
Analysis / MITREMappings
Analysis / C2Graph
Analysis / Action Panel
Analysis / Footer
Investigation
Fix Investigation review findings: Mobile: the IOC extraction table overflows horizontally… (+2 more)
Fix Investigation review findings: frontend/src/components/Investigation C2Graph.jsx… (+4 more)
Fix Investigation review findings: frontend/src/components/Investigation C2Graph.jsx… (+1 more)
Investigation / Navigation
Investigation / Orientation
Investigation / IOCExtraction
Investigation / Mitre Mappings
Investigation / C2Graph
Investigation / Footer
Reports
Fix Reports review findings: Mobile: the 'FILTER REPORTS' section header row is broken… (+6 more)
Fix Reports review findings: frontend/src/components/Reports Detail Modal.jsx: collection… (+9 more)
Fix Reports review findings: frontend/src/components/Reports Detail Modal.jsx: collection… (+6 more)
Reports / Navigation
Reports / Hero
Reports / Filters
Reports / List
Reports / Detail Modal
Reports / Stats
Reports / Export
Reports / Empty
Reports / Pagination
Reports / Footer
Cases
Retry Failed Pages
Retry Failed Pages
Retry Failed Pages
Retry Failed Pages
Retry Failed Pages
Retry Failed Pages
Retry Failed Pages
Retry Failed Pages
Retry Failed Pages
Retry Failed Pages
Retry Failed Pages
Retry Failed Pages
India's#1APKThreatAnalysisPlatform
Empowering Indian cybercrime investigators with forensic-grade APK analysis. Detect malware, extract IOCs, map C2 infrastructure, and generate FIR-ready reports — all from a single platform.
India Threat Map
Real-time APK threat levels across Indian states. Hover over regions to see active threats, or click to zoom into regional analysis.
Click on any region to zoom into regional analysis
Key Features
Comprehensive investigative tools purpose-built for Indian cybercrime units. From decompilation to court-ready reports — everything in one platform.
Static Analysis
Decompile and inspect APK manifests, permissions, embedded URLs, hardcoded credentials, and suspicious code patterns without executing the application.
Learn more→Dynamic Analysis
Execute APKs in isolated sandbox environments to monitor runtime behavior, network calls, file system changes, and privilege escalation attempts.
Learn more→IOC Extraction
Automatically extract Indicators of Compromise including domains, IPs, hashes, and registry keys mapped to known threat intelligence feeds.
Learn more→MITRE ATT&CK Mappings
Map discovered techniques to the MITRE ATT&CK Mobile framework for standardized threat classification and cross-case correlation.
Learn more→C2 Detection
Identify Command & Control infrastructure through traffic analysis, DGA detection, and encrypted channel fingerprinting linked to active threat actors.
Learn more→FIR Report Generation
Generate court-admissible First Information Reports with forensic evidence chains, MITRE references, and compliance-ready documentation for Indian law enforcement.
Learn more→Forensic-Grade Analysis Capabilities
APKSHIELD integrates industry-leading reverse engineering tools into a unified pipeline — from static decompilation to live runtime instrumentation.
- Androguard IntegrationDeep APK manifest parsing, permission analysis, and component enumeration for static threat assessment.
- JADX DecompilationFull Java/Kotlin source recovery from DEX bytecode with obfuscation-aware class resolution.
- Frida Dynamic InstrumentationRuntime hooking of crypto APIs, network calls, and native functions inside sandboxed emulators.
- YARA Rule MatchingPattern-based detection against 12,000+ signatures including India-specific banking trojan rules.
- Network Traffic AnalysisCapture and decode TLS-intercepted traffic to identify C2 servers, data exfiltration, and SMS gateways.
- MITRE ATT&CK MappingAutomated technique classification mapped to mobile ATT&CK framework with confidence scoring.
See Real-Time Analytics in Action
Monitor threat intelligence, APK analyses, and live investigation logs as they happen across India's cybercrime landscape.
What Cyber Crime Units Say
Law enforcement teams across India rely on APKSHIELD to accelerate investigations, strengthen evidence, and protect citizens from mobile threats.
Plans Built for Investigation Teams
Choose the right level of threat analysis power for your unit. All plans include core APK scanning and reporting capabilities.
Investigator
For individual cyber-crime officers running solo APK investigations.
Billed monthly, cancel anytime
What's included- Up to 50 APK scans per month
- Static analysis & threat scoring
- IOC extraction & YARA rules
- Basic forensic report generation
- MITRE ATT&CK mapping
- Email support (48hr SLA)
- Dynamic sandbox analysis
- Team case management
- Custom threat intelligence feeds
Team
For cyber-crime cells and investigation units needing collaborative tools.
Billed monthly, cancel anytime
What's included- Unlimited APK scans
- Static + dynamic analysis
- Advanced IOC & C2 infrastructure graphs
- FIR-ready forensic reports
- MITRE ATT&CK + CERT-In mapping
- Team case management (up to 15 users)
- Priority support (4hr SLA)
- Regional threat intelligence feeds
- Custom YARA rule builder
Enterprise
For state-level agencies and large organizations with dedicated infrastructure.
Tailored to your organization
What's included- Everything in Team, plus:
- Unlimited users & departments
- On-premise deployment option
- Dedicated sandbox cluster
- Custom API integrations
- White-label reporting
- Dedicated account manager
- 24/7 phone & on-site support
- SLA-backed uptime guarantee (99.9%)
All plans include SSL encryption, CERT-In compliant data handling, and 99.5% uptime. Need a custom plan? Talk to our team.
Enterprise Security & Compliance
APKSHIELD meets the highest security and regulatory standards required by Indian law enforcement agencies, ensuring your forensic data remains protected and legally admissible.
APKSHIELD maintains ISO 27001 certification, ensuring systematic management of sensitive data with rigorous access controls and audit trails.
End-to-End Encryption
AES-256 encryption for data at rest and TLS 1.3 for data in transit. Zero-knowledge architecture ensures only authorized investigators access case files.
SOC 2 Type II Audit
Annual third-party audits verify our security controls, availability, and confidentiality meet enterprise-grade standards for government agencies.
GDPR & DPDP Ready
Built-in compliance with India's Digital Personal Data Protection Act and international privacy frameworks for cross-border investigations.
Chain of Custody
Tamper-proof evidence logging with SHA-256 hashing, timestamped audit trails, and FIR-ready forensic reports accepted by Indian courts.
Ready to Analyze Threats?
Join hundreds of Indian law enforcement agencies using APKSHIELD to detect, analyze, and neutralize mobile threats with forensic-grade precision. Start your investigation in minutes.
India's#1APKThreatAnalysisPlatform
Empowering Indian cybercrime investigators with forensic-grade APK analysis. Detect malware, extract IOCs, map C2 infrastructure, and generate FIR-ready reports — all from a single platform.
India Threat Map
Real-time APK threat levels across Indian states. Hover over regions to see active threats, or click to zoom into regional analysis.
Click on any region to zoom into regional analysis
Key Features
Comprehensive investigative tools purpose-built for Indian cybercrime units. From decompilation to court-ready reports — everything in one platform.
Static Analysis
Decompile and inspect APK manifests, permissions, embedded URLs, hardcoded credentials, and suspicious code patterns without executing the application.
Learn more→Dynamic Analysis
Execute APKs in isolated sandbox environments to monitor runtime behavior, network calls, file system changes, and privilege escalation attempts.
Learn more→IOC Extraction
Automatically extract Indicators of Compromise including domains, IPs, hashes, and registry keys mapped to known threat intelligence feeds.
Learn more→MITRE ATT&CK Mappings
Map discovered techniques to the MITRE ATT&CK Mobile framework for standardized threat classification and cross-case correlation.
Learn more→C2 Detection
Identify Command & Control infrastructure through traffic analysis, DGA detection, and encrypted channel fingerprinting linked to active threat actors.
Learn more→FIR Report Generation
Generate court-admissible First Information Reports with forensic evidence chains, MITRE references, and compliance-ready documentation for Indian law enforcement.
Learn more→Forensic-Grade Analysis Capabilities
APKSHIELD integrates industry-leading reverse engineering tools into a unified pipeline — from static decompilation to live runtime instrumentation.
- Androguard IntegrationDeep APK manifest parsing, permission analysis, and component enumeration for static threat assessment.
- JADX DecompilationFull Java/Kotlin source recovery from DEX bytecode with obfuscation-aware class resolution.
- Frida Dynamic InstrumentationRuntime hooking of crypto APIs, network calls, and native functions inside sandboxed emulators.
- YARA Rule MatchingPattern-based detection against 12,000+ signatures including India-specific banking trojan rules.
- Network Traffic AnalysisCapture and decode TLS-intercepted traffic to identify C2 servers, data exfiltration, and SMS gateways.
- MITRE ATT&CK MappingAutomated technique classification mapped to mobile ATT&CK framework with confidence scoring.
See Real-Time Analytics in Action
Monitor threat intelligence, APK analyses, and live investigation logs as they happen across India's cybercrime landscape.
What Cyber Crime Units Say
Law enforcement teams across India rely on APKSHIELD to accelerate investigations, strengthen evidence, and protect citizens from mobile threats.
Plans Built for Investigation Teams
Choose the right level of threat analysis power for your unit. All plans include core APK scanning and reporting capabilities.
Investigator
For individual cyber-crime officers running solo APK investigations.
Billed monthly, cancel anytime
What's included- Up to 50 APK scans per month
- Static analysis & threat scoring
- IOC extraction & YARA rules
- Basic forensic report generation
- MITRE ATT&CK mapping
- Email support (48hr SLA)
- Dynamic sandbox analysis
- Team case management
- Custom threat intelligence feeds
Team
For cyber-crime cells and investigation units needing collaborative tools.
Billed monthly, cancel anytime
What's included- Unlimited APK scans
- Static + dynamic analysis
- Advanced IOC & C2 infrastructure graphs
- FIR-ready forensic reports
- MITRE ATT&CK + CERT-In mapping
- Team case management (up to 15 users)
- Priority support (4hr SLA)
- Regional threat intelligence feeds
- Custom YARA rule builder
Enterprise
For state-level agencies and large organizations with dedicated infrastructure.
Tailored to your organization
What's included- Everything in Team, plus:
- Unlimited users & departments
- On-premise deployment option
- Dedicated sandbox cluster
- Custom API integrations
- White-label reporting
- Dedicated account manager
- 24/7 phone & on-site support
- SLA-backed uptime guarantee (99.9%)
All plans include SSL encryption, CERT-In compliant data handling, and 99.5% uptime. Need a custom plan? Talk to our team.
Enterprise Security & Compliance
APKSHIELD meets the highest security and regulatory standards required by Indian law enforcement agencies, ensuring your forensic data remains protected and legally admissible.
APKSHIELD maintains ISO 27001 certification, ensuring systematic management of sensitive data with rigorous access controls and audit trails.
End-to-End Encryption
AES-256 encryption for data at rest and TLS 1.3 for data in transit. Zero-knowledge architecture ensures only authorized investigators access case files.
SOC 2 Type II Audit
Annual third-party audits verify our security controls, availability, and confidentiality meet enterprise-grade standards for government agencies.
GDPR & DPDP Ready
Built-in compliance with India's Digital Personal Data Protection Act and international privacy frameworks for cross-border investigations.
Chain of Custody
Tamper-proof evidence logging with SHA-256 hashing, timestamped audit trails, and FIR-ready forensic reports accepted by Indian courts.
Ready to Analyze Threats?
Join hundreds of Indian law enforcement agencies using APKSHIELD to detect, analyze, and neutralize mobile threats with forensic-grade precision. Start your investigation in minutes.
No comments yet. Be the first!