FAQ

drozer Console

drozer complains it cannot find Java, and asks me to add it to .drozer_config.

In a few cases, drozer needs to use another executable on your machine. We try to find it on your PATH but that can fail (particularly if you are running Windows).

The fix is simple:

1. If it doesn't already exist, create a file in your home folder (~/ or C:\Users<your name>) called .drozer_config.
2. Insert the following at the bottom of the file:

[executables]
java = C:\path\to\java.exe

Restart your drozer console, and you are ready to go.

Installation

My anti-virus detects and removes part of drozer.

Yes. Some AV products detect one of the vulnerabilities we use in drozer's exploitation tools as exploit:js/webdoid.b.

If you don't want to use the drozer exploit build command, you can ignore this. The rest of drozer will work perfectly without it. If you do want to be able to run exploits, you should exclude C:\drozer from your AV and restore any quarantined files.