Does secucheck support taint-analysis for Android Apk?

[Xiangxingqian]

Hi, does secucheck support taint-analysis for Android Apk without source code?

[piskachev]

Hello! No, that is currently not supported. It should be relativelly easy to use the infrastructure from FlowDroid to process the APK and build the call graph and then use the SecuCheck analysis. This should work well since both tools are based on the Soot framework. But this needs some integration effort which we have not done yet.