def __init__(self, parent=None):
super(MainView, self).__init__(parent)
self.ui = Ui_MainWindow()
self.ui.setupUi(self)
self.__logger = Logger(self.ui.logArea)
self.__logger.log(Logger.INFO, '')
self.init_actions()
self.setup_fileloading()
self.apk_path = ''
self.apk = None
self.x = self.d = self.a = None
self.manifest = None
self.show_sample_question()
def __init__(self, parent=None):
super(MainView, self).__init__(parent)
self.ui = Ui_MainWindow()
self.ui.setupUi(self)
self.__logger = Logger(self.ui.logArea)
self.__logger.log(Logger.INFO, '')
self.init_actions()
self.setup_fileloading()
self.apk_path = ''
self.apk = None
self.x = self.d = self.a = None
self.manifest = None
self.show_sample_question()
class MainView(QtGui.QMainWindow):
def __init__(self, parent=None):
super(MainView, self).__init__(parent)
self.ui = Ui_MainWindow()
self.ui.setupUi(self)
self.__logger = Logger(self.ui.logArea)
self.__logger.log(Logger.INFO, '')
self.init_actions()
self.setup_fileloading()
self.apk_path = ''
self.apk = None
self.x = self.d = self.a = None
self.manifest = None
self.show_sample_question()
def setup_fileloading(self):
self.session = Session()
self.fileLoadingThread = FileLoadingThread(self.session)
self.connect(self.fileLoadingThread, QtCore.SIGNAL("loadedFile(bool)"),
self.loadedApk)
def show_sample_question(self):
self.sample_dialog = SampleDialog(self)
self.sample_dialog.exec_()
def get_logger(self):
return self.__logger
def loadedApk(self, success):
self.sample_dialog.close()
if not success:
self.__logger.log(
Logger.ERROR, "Analysis of %s failed :(" %
str(self.fileLoadingThread.file_path))
self.set_loading_progressbar_disabled()
return
self.d = self.session.get_DalvikForm()
self.d.create_python_export()
self.x = uVMAnalysis(self.d)
self.setupTree()
self.setupResourceController()
self.load_app_info_table()
self.load_permissions()
try:
self.__logger.log(
Logger.INFO,
"Analysis of %s done!" % str(self.apk.get_app_name()))
self.ui.loadedAPK_label.setText("Loaded: " +
str(self.apk.get_app_name()))
except UnicodeEncodeError:
self.ui.loadedAPK_label.setText(
"APK Loaded! (non-ascii chars detected)")
self.__logger.log(
Logger.WARNING,
"Non ascii code characters detected, some strings are possibly not displayed properly."
)
self.set_loading_progressbar_disabled()
def setupResourceController(self):
self.resourcecontroller = ResourceFileController(
self.apk, self.ui.resourceFileTable, self.ui.graphicview,
self.ui.fileResourceInfo)
def get_android_manifest_xml(self):
self.set_loading_progressbar_text("Decompiling AndroidManifest.xml")
buff = self.apk.get_android_manifest_xml().toprettyxml(
encoding="utf-8")
doc = QtGui.QTextEdit()
doc.setWindowTitle("AndroidManifest.xml")
hl = XMLHighlighter(doc.document())
doc.setPlainText(str(buff).strip())
return doc
def setupTree(self):
try:
self.ui.tree_area.layout().deleteLater()
except AttributeError:
pass
self.tree = TreeWindow(self, self, session=self.session)
self.tree.setWindowTitle("Tree model")
layout = QtGui.QVBoxLayout()
layout.addWidget(self.tree)
self.ui.tree_area.setLayout(layout)
self.tree.fill()
self.setupCentral()
def setupCentral(self):
self.central = QtGui.QTabWidget()
self.central.setTabBar(CustomTabBar())
self.central.setTabsClosable(True)
self.central.tabCloseRequested.connect(self.tabCloseRequestedHandler)
self.central.currentChanged.connect(self.currentTabChanged)
layout = QtGui.QVBoxLayout()
layout.addWidget(self.central)
self.ui.sourceTextWidget.setLayout(layout)
def tabCloseRequestedHandler(self, index):
self.central.removeTab(index)
def currentTabChanged(self, index):
if index == -1:
return # all tab closed
def openSourceWindow(self, current_class, method=None):
sourcewin = self.getMeSourceWindowIfExists(current_class)
if not sourcewin:
current_filename = self.session.get_filename_by_class(
current_class)
current_digest = self.session.get_digest_by_class(current_class)
sourcewin = SourceWindow(win=self,
current_class=current_class,
current_title=current_class.current_title,
current_filename=current_filename,
current_digest=current_digest,
session=self.session)
sourcewin.reload_java_sources()
self.central.addTab(sourcewin, sourcewin.title)
self.central.setTabToolTip(self.central.indexOf(sourcewin),
current_class.get_name())
if method:
sourcewin.browse_to_method(method)
self.central.setCurrentWidget(sourcewin)
def openManifestWindow(self):
manifest_tab = self.get_android_manifest_xml()
self.central.addTab(manifest_tab, "AndroidManifest.xml")
self.central.setCurrentWidget(manifest_tab)
def openStringsWindow(self):
stringswin = StringsWindow(win=self, session=self.session)
self.central.addTab(stringswin, stringswin.title)
self.central.setTabToolTip(self.central.indexOf(stringswin),
stringswin.title)
self.central.setCurrentWidget(stringswin)
def openBytecodeWindow(self, current_class, method=None):
byte_code_str = ''
for clazz in self.d.get_classes():
if clazz.get_name() == current_class.get_name():
for method in clazz.get_methods():
byte_code_str += "# " + method.get_name(
) + " " + method.get_descriptor() + "\n"
byte_code = method.get_code()
if byte_code != None:
byte_code = byte_code.get_bc()
idx = 0
for i in byte_code.get_instructions():
byte_code_str += "\t, %x " % (idx) + i.get_name(
) + " " + i.get_output() + "\n"
idx += i.get_length()
bytecode_tab = self.get_bytecode_window(byte_code_str)
self.central.addTab(
bytecode_tab, "Bytecode: " + current_class.get_name())
self.central.setCurrentWidget(bytecode_tab)
def showStatus(self, text):
QtGui.QMessageBox.information(self, "Info", text)
def get_bytecode_window(self, byte_code):
return BytecodeWindow(byte_code, self)
def getMeSourceWindowIfExists(self, path):
'''Helper for openSourceWindow'''
for idx in range(self.central.count()):
if path == self.central.tabToolTip(idx):
return self.central.widget(idx)
return None
def load_app_info_table(self):
self.info = {}
self.info["Application Name"] = self.apk.get_app_name()
self.info["Application Size"] = util.sizeof_fmt(
os.path.getsize(self.apk_path))
self.info["Android Version Name"] = self.apk.get_androidversion_name()
self.info["Android Version Code"] = self.apk.get_androidversion_code()
self.info["Android Package Name"] = self.apk.get_package()
self.info["Signature Name"] = self.apk.get_signature_name()
self.info["Uses Dynamic Code Loading"] = str(
analysis.is_dyn_code(self.x))
self.info["Uses Reflection"] = str(analysis.is_reflection_code(self.x))
self.info["Uses Crypto"] = str(analysis.is_crypto_code(self.x))
self.info["Privacy Leaks"] = str(len(self.get_privacy_leaks()))
self.info["Number of Providers"] = str(len(self.apk.get_providers()))
self.info["Number of Activities"] = str(len(self.apk.get_activities()))
self.info["Number of Services"] = str(len(self.apk.get_services()))
self.info["Number of Libraries"] = str(len(self.apk.get_libraries()))
self.info["Number of Permissions"] = str(
len(self.get_uses_permissions()))
self.info_actions = {}
self.info_actions["Application Name"] = None
self.info_actions["Application Size"] = None
self.info_actions["Android Version Name"] = None
self.info_actions["Android Version Code"] = None
self.info_actions["Android Package Name"] = None
self.info_actions["Signature Name"] = self.show_signature
self.info_actions["Uses Dynamic Code Loading"] = self.show_dyncode
self.info_actions["Uses Reflection"] = self.show_reflection
self.info_actions["Uses Crypto"] = self.show_cryptocode
self.info_actions["Privacy Leaks"] = self.show_privacy_leaks
self.info_actions["Number of Providers"] = self.show_providers
self.info_actions["Number of Activities"] = self.show_activities
self.info_actions["Number of Services"] = self.show_services
self.info_actions["Number of Libraries"] = self.show_libraries
self.info_actions["Number of Permissions"] = self.show_permissions
info_table = self.ui.appInfoTable
info_table.setRowCount(len(self.info))
info_table.setColumnWidth(1, 200)
info_table.horizontalHeader().setResizeMode(0,
QtGui.QHeaderView.Stretch)
row = 0
for key in sorted(self.info):
action = self.info_actions[key]
action_button = None
if action is not None:
action_button = QtGui.QPushButton()
action_button.setText("Show")
action_button.clicked.connect(action)
key_item = QtGui.QTableWidgetItem(key)
value_item = QtGui.QTableWidgetItem(self.info[key])
info_table.setItem(row, 0, key_item)
info_table.setItem(row, 1, value_item)
if action_button is not None:
info_table.setCellWidget(row, 2, action_button)
row += 1
def show_providers(self):
self.__logger.log_with_title("Providers", self.apk.get_providers())
def show_signature(self):
certname = ""
signature_expr = re.compile("^(META-INF/)(.*)(\.RSA|\.DSA)$")
for i in self.apk.get_files():
if signature_expr.search(i):
f = tempfile.NamedTemporaryFile(delete=False)
f.write(self.apk.get_file(i))
f.close()
certname = f.name
cmd = ["keytool", "-printcert", "-file", certname]
proc = subprocess.Popen(cmd, stdout=subprocess.PIPE)
(out, err) = proc.communicate()
self.__logger.log_with_title("Signature", out)
def show_services(self):
self.__logger.log_with_title(
"Services", '\n\t -' + '\n\t -'.join(self.apk.get_services()))
def show_permissions(self):
self.__logger.log(
Logger.INFO,
"Searching for permission usage, this can take a while depending on the size of the app."
)
p = self.x.get_permissions([])
self.__logger.log_with_title("Permissions Usage", "")
for i in p:
self.__logger.log_with_color(Logger.WARNING,
"\n\t=======" + i + "=======\n")
for j in p[i]:
self.__logger.log_with_color(
Logger.INFO,
"\t\t -" + self.show_Path(self.x.get_vm(), j) + "\n")
def show_cryptocode(self):
if analysis.is_crypto_code(self.x) is False:
self.__logger.log(
Logger.WARNING,
"No crypto code was found! Maybe it uses adapted or obfuscated encryption code."
)
return
paths = []
paths.extend(self.x.get_tainted_packages().search_methods(
"Ljavax/crypto/.", ".", "."))
paths.extend(self.x.get_tainted_packages().search_methods(
"Ljava/security/spec/.", ".", "."))
str_info_dyn = "\t"
for path in paths:
str_info_dyn += (self.show_Path(self.x.get_vm(), path) + "\n\n\t")
self.__logger.log_with_title("Usage of Crypto Code", str_info_dyn)
def show_dyncode(self):
if analysis.is_dyn_code(self.x) is False:
self.__logger.log(Logger.WARNING, "No dynamic code was found!")
return
paths = []
paths.extend(self.x.get_tainted_packages().search_methods(
"Ldalvik/system/BaseDexClassLoader;", "<init>", "."))
paths.extend(self.x.get_tainted_packages().search_methods(
"Ldalvik/system/PathClassLoader;", "<init>", "."))
paths.extend(self.x.get_tainted_packages().search_methods(
"Ldalvik/system/DexClassLoader;", "<init>", "."))
paths.extend(self.x.get_tainted_packages().search_methods(
"Ldalvik/system/DexFile;", "<init>", "."))
paths.extend(self.x.get_tainted_packages().search_methods(
"Ldalvik/system/DexFile;", "loadDex", "."))
str_info_dyn = "\t"
for path in paths:
str_info_dyn += (self.show_Path(self.x.get_vm(), path) + "\n\n\t")
self.__logger.log_with_title("Usage of Dynamic Code", str_info_dyn)
def get_privacy_leaks(self):
paths = []
paths.extend(self.x.get_tainted_packages().search_methods(
".", "getDeviceId", "."))
paths.extend(self.x.get_tainted_packages().search_methods(
".", "getSubscriberId", "."))
paths.extend(self.x.get_tainted_packages().search_methods(
".", "getSimSerialNumber", "."))
paths.extend(self.x.get_tainted_packages().search_methods(
".", "getLine1Number", "."))
paths.extend(self.x.get_tainted_packages().search_methods(
".", "getAddress", "."))
paths.extend(self.x.get_tainted_packages().search_methods(
".", "getMacAddress", "."))
paths.extend(self.x.get_tainted_packages().search_methods(
".", "getSSID", "."))
paths.extend(self.x.get_tainted_packages().search_methods(
".", "getCid", "."))
paths.extend(self.x.get_tainted_packages().search_methods(
".", "getAccounts", "."))
paths.extend(self.x.get_tainted_packages().search_methods(
".", "getTimeZone", "."))
paths.extend(self.x.get_tainted_packages().search_methods(
".", "getAllBookmarks", "."))
paths.extend(self.x.get_tainted_packages().search_methods(
".", "getAllVisitedUrls", "."))
return paths
def show_privacy_leaks(self):
paths = self.get_privacy_leaks()
if len(paths) == 0:
self.__logger.log(Logger.WARNING, "No privacy leaks were found!")
return
str_info_privacy = "\t"
for path in paths:
str_info_privacy += (self.show_Path(self.x.get_vm(), path) +
"\n\n\t")
self.__logger.log_with_title("Possible Privacy Leaks",
str_info_privacy)
def show_reflection(self):
if analysis.is_reflection_code(self.x) is False:
self.__logger.log(Logger.WARNING, "No reflection code was found!")
return
paths = self.x.get_tainted_packages().search_methods(
"Ljava/lang/reflect/Method;", ".", ".")
str_info_reflection = ""
for path in paths:
str_info_reflection += (self.show_Path(self.x.get_vm(), path) +
"\n\n\t")
self.__logger.log_with_title("Usage of Reflection",
str_info_reflection)
def show_activities(self):
self.__logger.log_with_title(
"Activities", '\n\t -' + '\n\t -'.join(self.apk.get_activities()))
def show_libraries(self):
if len(self.apk.get_libraries()) == 0:
self.__logger.log(Logger.WARNING, "No libraries were found.")
return
self.__logger.log(Logger.INFO,
"Libraries Used: " + str(self.apk.get_libraries()))
def init_actions(self):
self.ui.saveLogBtn.clicked.connect(self.__logger.saveLog)
self.ui.clearLogBtn.clicked.connect(self.__logger.clearLog)
self.ui.showStringsBtn.clicked.connect(self.openStringsWindow)
self.ui.showManifestBtn.clicked.connect(self.openManifestWindow)
def load_apk_from_device(self):
table = DeviceTable(self, parent=self)
self.sample_dialog.close()
table.show_data()
table.exec_()
def load_apk(self, path=None):
if not path:
path = QtGui.QFileDialog.getOpenFileName(
self, "Open File", '',
"APK Files (*.apk);;Androguard Session (*.ag)")
self.apk_path = path
self.set_loading_progressbar(
"Analyzing APK", "Please wait while the APK is being dissected")
self.__logger.log(Logger.INFO, "Analyzing %s..." % str(path))
self.apk = apk.APK(self.apk_path)
self.manifest = self.apk.get_AndroidManifest().getElementsByTagName(
"manifest")[0]
self.fileLoadingThread.load(str(path))
def load_permissions(self):
perms = self.get_uses_permissions()
self.ui.permsTable.setRowCount(len(perms))
self.ui.permsTable.horizontalHeader().setStretchLastSection(True)
for i, uses_permission in enumerate(perms):
newitem = QtGui.QTableWidgetItem(uses_permission)
self.ui.permsTable.setItem(0, i, newitem)
def get_uses_permissions(self):
permissions = []
for uses_permission in self.manifest.getElementsByTagName(
"uses-permission"):
permissions.append(
uses_permission.attributes["android:name"].value)
return permissions
def set_loading_progressbar(self, title, text):
self.dialog = QtGui.QProgressDialog(self)
self.dialog.setMinimum(0)
self.dialog.setLabelText(text)
self.dialog.setMaximum(0)
self.dialog.setWindowTitle(title)
self.dialog.setCancelButton(None)
self.dialog.setModal(True)
self.dialog.show()
def set_loading_progressbar_text(self, text):
if self.dialog is not None:
self.dialog.setLabelText(text)
def set_loading_progressbar_disabled(self):
self.dialog.hide()
def show_Path(self, vm, path):
cm = vm.get_class_manager()
if isinstance(path, analysis.PathVar):
dst_class_name, dst_method_name, dst_descriptor = path.get_dst(cm)
info_var = path.get_var_info()
return "%s %s (0x%x) ---> %s->%s%s " % (
path.get_access_flag(), info_var, path.get_idx(),
dst_class_name, dst_method_name, dst_descriptor)
else:
if path.get_access_flag() == analysis.TAINTED_PACKAGE_CALL:
src_class_name, src_method_name, src_descriptor = path.get_src(
cm)
dst_class_name, dst_method_name, dst_descriptor = path.get_dst(
cm)
return "%d %s->%s%s (0x%x) ---> %s->%s%s" % (
path.get_access_flag(), src_class_name, src_method_name,
src_descriptor, path.get_idx(), dst_class_name,
dst_method_name, dst_descriptor)
else:
src_class_name, src_method_name, src_descriptor = path.get_src(
cm)
return "%d %s->%s%s (0x%x)" % (path.get_access_flag(),
src_class_name, src_method_name,
src_descriptor, path.get_idx())
class MainView(QtGui.QMainWindow):
def __init__(self, parent=None):
super(MainView, self).__init__(parent)
self.ui = Ui_MainWindow()
self.ui.setupUi(self)
self.__logger = Logger(self.ui.logArea)
self.__logger.log(Logger.INFO, '')
self.init_actions()
self.setup_fileloading()
self.apk_path = ''
self.apk = None
self.x = self.d = self.a = None
self.manifest = None
self.show_sample_question()
def setup_fileloading(self):
self.session = Session()
self.fileLoadingThread = FileLoadingThread(self.session)
self.connect(self.fileLoadingThread,QtCore.SIGNAL("loadedFile(bool)"),self.loadedApk)
def show_sample_question(self):
self.sample_dialog = SampleDialog(self)
self.sample_dialog.exec_()
def get_logger(self):
return self.__logger;
def loadedApk(self, success):
self.sample_dialog.close()
if not success:
self.__logger.log(Logger.ERROR,"Analysis of %s failed :(" % str(self.fileLoadingThread.file_path))
self.set_loading_progressbar_disabled()
return
self.d = self.session.get_DalvikForm()
self.d.create_python_export()
self.x = uVMAnalysis(self.d)
self.setupTree()
self.setupResourceController()
self.load_app_info_table()
self.load_permissions()
try:
self.__logger.log(Logger.INFO,"Analysis of %s done!" % str(self.apk.get_app_name()))
self.ui.loadedAPK_label.setText("Loaded: "+str(self.apk.get_app_name()))
except UnicodeEncodeError:
self.ui.loadedAPK_label.setText("APK Loaded! (non-ascii chars detected)")
self.__logger.log(Logger.WARNING,"Non ascii code characters detected, some strings are possibly not displayed properly.")
self.set_loading_progressbar_disabled()
def setupResourceController(self):
self.resourcecontroller = ResourceFileController(self.apk,
self.ui.resourceFileTable,
self.ui.graphicview,
self.ui.fileResourceInfo)
def get_android_manifest_xml(self):
self.set_loading_progressbar_text("Decompiling AndroidManifest.xml")
buff = self.apk.get_android_manifest_xml().toprettyxml(encoding="utf-8")
doc = QtGui.QTextEdit()
doc.setWindowTitle("AndroidManifest.xml")
hl = XMLHighlighter(doc.document())
doc.setPlainText(str(buff).strip())
return doc
def setupTree(self):
try:
self.ui.tree_area.layout().deleteLater()
except AttributeError:
pass
self.tree = TreeWindow(self,self,session=self.session)
self.tree.setWindowTitle("Tree model")
layout = QtGui.QVBoxLayout()
layout.addWidget(self.tree)
self.ui.tree_area.setLayout(layout)
self.tree.fill()
self.setupCentral()
def setupCentral(self):
self.central = QtGui.QTabWidget()
self.central.setTabBar(CustomTabBar())
self.central.setTabsClosable(True)
self.central.tabCloseRequested.connect(self.tabCloseRequestedHandler)
self.central.currentChanged.connect(self.currentTabChanged)
layout = QtGui.QVBoxLayout()
layout.addWidget(self.central)
self.ui.sourceTextWidget.setLayout(layout)
def tabCloseRequestedHandler(self, index):
self.central.removeTab(index)
def currentTabChanged(self, index):
if index == -1:
return # all tab closed
def openSourceWindow(self, current_class, method=None):
sourcewin = self.getMeSourceWindowIfExists(current_class)
if not sourcewin:
current_filename = self.session.get_filename_by_class(current_class)
current_digest = self.session.get_digest_by_class(current_class)
sourcewin = SourceWindow(win=self,
current_class=current_class,
current_title=current_class.current_title,
current_filename=current_filename,
current_digest=current_digest,
session=self.session)
sourcewin.reload_java_sources()
self.central.addTab(sourcewin, sourcewin.title)
self.central.setTabToolTip(self.central.indexOf(sourcewin), current_class.get_name())
if method:
sourcewin.browse_to_method(method)
self.central.setCurrentWidget(sourcewin)
def openManifestWindow(self):
manifest_tab = self.get_android_manifest_xml()
self.central.addTab(manifest_tab,"AndroidManifest.xml")
self.central.setCurrentWidget(manifest_tab)
def openStringsWindow(self):
stringswin = StringsWindow(win=self, session=self.session)
self.central.addTab(stringswin, stringswin.title)
self.central.setTabToolTip(self.central.indexOf(stringswin), stringswin.title)
self.central.setCurrentWidget(stringswin)
def openBytecodeWindow(self, current_class, method=None):
byte_code_str = ''
for clazz in self.d.get_classes():
if clazz.get_name() == current_class.get_name():
for method in clazz.get_methods():
byte_code_str += "# "+method.get_name()+" "+method.get_descriptor()+"\n"
byte_code = method.get_code()
if byte_code != None:
byte_code = byte_code.get_bc()
idx = 0
for i in byte_code.get_instructions():
byte_code_str += "\t, %x " % (idx)+i.get_name()+" "+i.get_output()+"\n"
idx += i.get_length()
bytecode_tab = self.get_bytecode_window(byte_code_str)
self.central.addTab(bytecode_tab,"Bytecode: "+current_class.get_name())
self.central.setCurrentWidget(bytecode_tab)
def showStatus(self,text):
QtGui.QMessageBox.information(self, "Info", text)
def get_bytecode_window(self,byte_code):
return BytecodeWindow(byte_code,self)
def getMeSourceWindowIfExists(self, path):
'''Helper for openSourceWindow'''
for idx in range(self.central.count()):
if path == self.central.tabToolTip(idx):
return self.central.widget(idx)
return None
def load_app_info_table(self):
self.info = {}
self.info["Application Name"] = self.apk.get_app_name()
self.info["Application Size"] = util.sizeof_fmt(os.path.getsize(self.apk_path))
self.info["Android Version Name"] = self.apk.get_androidversion_name()
self.info["Android Version Code"] = self.apk.get_androidversion_code()
self.info["Android Package Name"] = self.apk.get_package()
self.info["Signature Name"] = self.apk.get_signature_name()
self.info["Uses Dynamic Code Loading"] = str(analysis.is_dyn_code(self.x))
self.info["Uses Reflection"] = str(analysis.is_reflection_code(self.x))
self.info["Uses Crypto"] = str(analysis.is_crypto_code(self.x))
self.info["Privacy Leaks"] = str(len(self.get_privacy_leaks()))
self.info["Number of Providers"] = str(len(self.apk.get_providers()))
self.info["Number of Activities"] = str(len(self.apk.get_activities()))
self.info["Number of Services"] = str(len(self.apk.get_services()))
self.info["Number of Libraries"] = str(len(self.apk.get_libraries()))
self.info["Number of Permissions"] = str(len(self.get_uses_permissions()))
self.info_actions = {}
self.info_actions["Application Name"] = None
self.info_actions["Application Size"] = None
self.info_actions["Android Version Name"] = None
self.info_actions["Android Version Code"] = None
self.info_actions["Android Package Name"] = None
self.info_actions["Signature Name"] = self.show_signature
self.info_actions["Uses Dynamic Code Loading"] = self.show_dyncode
self.info_actions["Uses Reflection"] = self.show_reflection
self.info_actions["Uses Crypto"] = self.show_cryptocode
self.info_actions["Privacy Leaks"] = self.show_privacy_leaks
self.info_actions["Number of Providers"] = self.show_providers
self.info_actions["Number of Activities"] = self.show_activities
self.info_actions["Number of Services"] = self.show_services
self.info_actions["Number of Libraries"] = self.show_libraries
self.info_actions["Number of Permissions"] = self.show_permissions
info_table = self.ui.appInfoTable
info_table.setRowCount(len(self.info))
info_table.setColumnWidth(1, 200)
info_table.horizontalHeader().setResizeMode(0, QtGui.QHeaderView.Stretch)
row = 0
for key in sorted(self.info):
action = self.info_actions[key]
action_button = None
if action is not None:
action_button = QtGui.QPushButton()
action_button.setText("Show")
action_button.clicked.connect(action)
key_item = QtGui.QTableWidgetItem(key)
value_item = QtGui.QTableWidgetItem(self.info[key])
info_table.setItem(row,0,key_item)
info_table.setItem(row,1,value_item)
if action_button is not None:
info_table.setCellWidget(row,2,action_button)
row += 1
def show_providers(self):
self.__logger.log_with_title("Providers",self.apk.get_providers())
def show_signature(self):
certname = ""
signature_expr = re.compile("^(META-INF/)(.*)(\.RSA|\.DSA)$")
for i in self.apk.get_files():
if signature_expr.search(i):
f = tempfile.NamedTemporaryFile(delete=False)
f.write(self.apk.get_file(i))
f.close()
certname = f.name
cmd = ["keytool","-printcert","-file",certname]
proc = subprocess.Popen(cmd,stdout=subprocess.PIPE)
(out,err) = proc.communicate()
self.__logger.log_with_title("Signature",out)
def show_services(self):
self.__logger.log_with_title("Services",'\n\t -'+'\n\t -'.join(self.apk.get_services()))
def show_permissions(self):
self.__logger.log(Logger.INFO,"Searching for permission usage, this can take a while depending on the size of the app.")
p = self.x.get_permissions( [] )
self.__logger.log_with_title("Permissions Usage","")
for i in p:
self.__logger.log_with_color(Logger.WARNING,"\n\t======="+i+"=======\n")
for j in p[i]:
self.__logger.log_with_color(Logger.INFO,"\t\t -"+self.show_Path(self.x.get_vm(), j )+"\n")
def show_cryptocode(self):
if analysis.is_crypto_code(self.x) is False:
self.__logger.log(Logger.WARNING,"No crypto code was found! Maybe it uses adapted or obfuscated encryption code.")
return
paths = []
paths.extend(self.x.get_tainted_packages().search_methods("Ljavax/crypto/.",
".",
"."))
paths.extend(self.x.get_tainted_packages().search_methods("Ljava/security/spec/.",
".",
"."))
str_info_dyn="\t"
for path in paths:
str_info_dyn += (self.show_Path(self.x.get_vm(), path )+"\n\n\t")
self.__logger.log_with_title("Usage of Crypto Code",str_info_dyn)
def show_dyncode(self):
if analysis.is_dyn_code(self.x) is False:
self.__logger.log(Logger.WARNING,"No dynamic code was found!")
return
paths = []
paths.extend(self.x.get_tainted_packages().search_methods("Ldalvik/system/BaseDexClassLoader;",
"<init>",
"."))
paths.extend(self.x.get_tainted_packages().search_methods("Ldalvik/system/PathClassLoader;",
"<init>",
"."))
paths.extend(self.x.get_tainted_packages().search_methods("Ldalvik/system/DexClassLoader;",
"<init>",
"."))
paths.extend(self.x.get_tainted_packages().search_methods("Ldalvik/system/DexFile;",
"<init>",
"."))
paths.extend(self.x.get_tainted_packages().search_methods("Ldalvik/system/DexFile;",
"loadDex",
"."))
str_info_dyn="\t"
for path in paths:
str_info_dyn += (self.show_Path(self.x.get_vm(), path )+"\n\n\t")
self.__logger.log_with_title("Usage of Dynamic Code",str_info_dyn)
def get_privacy_leaks(self):
paths = []
paths.extend(self.x.get_tainted_packages().search_methods(".", "getDeviceId", "."))
paths.extend(self.x.get_tainted_packages().search_methods(".", "getSubscriberId", "."))
paths.extend(self.x.get_tainted_packages().search_methods(".", "getSimSerialNumber", "."))
paths.extend(self.x.get_tainted_packages().search_methods(".", "getLine1Number", "."))
paths.extend(self.x.get_tainted_packages().search_methods(".", "getAddress", "."))
paths.extend(self.x.get_tainted_packages().search_methods(".", "getMacAddress", "."))
paths.extend(self.x.get_tainted_packages().search_methods(".", "getSSID", "."))
paths.extend(self.x.get_tainted_packages().search_methods(".", "getCid", "."))
paths.extend(self.x.get_tainted_packages().search_methods(".", "getAccounts", "."))
paths.extend(self.x.get_tainted_packages().search_methods(".", "getTimeZone", "."))
paths.extend(self.x.get_tainted_packages().search_methods(".", "getAllBookmarks", "."))
paths.extend(self.x.get_tainted_packages().search_methods(".", "getAllVisitedUrls", "."))
return paths
def show_privacy_leaks(self):
paths = self.get_privacy_leaks()
if len(paths) == 0:
self.__logger.log(Logger.WARNING,"No privacy leaks were found!")
return
str_info_privacy="\t"
for path in paths:
str_info_privacy += (self.show_Path(self.x.get_vm(), path )+"\n\n\t")
self.__logger.log_with_title("Possible Privacy Leaks",str_info_privacy)
def show_reflection(self):
if analysis.is_reflection_code(self.x) is False:
self.__logger.log(Logger.WARNING,"No reflection code was found!")
return
paths = self.x.get_tainted_packages().search_methods("Ljava/lang/reflect/Method;", ".", ".")
str_info_reflection=""
for path in paths:
str_info_reflection += (self.show_Path(self.x.get_vm(), path )+"\n\n\t")
self.__logger.log_with_title("Usage of Reflection",str_info_reflection)
def show_activities(self):
self.__logger.log_with_title("Activities",'\n\t -'+'\n\t -'.join(self.apk.get_activities()))
def show_libraries(self):
if len(self.apk.get_libraries()) == 0:
self.__logger.log(Logger.WARNING,"No libraries were found.")
return
self.__logger.log(Logger.INFO,"Libraries Used: "+str(self.apk.get_libraries()))
def init_actions(self):
self.ui.saveLogBtn.clicked.connect(self.__logger.saveLog)
self.ui.clearLogBtn.clicked.connect(self.__logger.clearLog)
self.ui.showStringsBtn.clicked.connect(self.openStringsWindow)
self.ui.showManifestBtn.clicked.connect(self.openManifestWindow)
def load_apk_from_device(self):
table = DeviceTable(self,parent=self)
self.sample_dialog.close()
table.show_data()
table.exec_()
def load_apk(self,path=None):
if not path:
path = QtGui.QFileDialog.getOpenFileName(self, "Open File",'', "APK Files (*.apk);;Androguard Session (*.ag)")
path = str(path[0])
self.apk_path = path
if path:
self.set_loading_progressbar("Analyzing APK","Please wait while the APK is being dissected")
self.__logger.log(Logger.INFO,"Analyzing %s..." % str(path))
self.apk = apk.APK(path)
self.manifest = self.apk.get_AndroidManifest().getElementsByTagName("manifest")[0]
self.fileLoadingThread.load(path)
def load_permissions(self):
perms = self.get_uses_permissions()
self.ui.permsTable.setRowCount(len(perms))
self.ui.permsTable.horizontalHeader().setStretchLastSection(True)
for i, uses_permission in enumerate(perms):
newitem = QtGui.QTableWidgetItem(uses_permission)
self.ui.permsTable.setItem(0, i, newitem)
def get_uses_permissions(self):
permissions = []
for uses_permission in self.manifest.getElementsByTagName("uses-permission"):
permissions.append(uses_permission.attributes["android:name"].value)
return permissions
def set_loading_progressbar(self,title,text):
self.dialog = QtGui.QProgressDialog(self)
self.dialog.setMinimum(0)
self.dialog.setLabelText(text)
self.dialog.setMaximum(0)
self.dialog.setWindowTitle(title)
self.dialog.setCancelButton(None)
self.dialog.setModal(True)
self.dialog.show()
def set_loading_progressbar_text(self,text):
if self.dialog is not None:
self.dialog.setLabelText(text);
def set_loading_progressbar_disabled(self):
self.dialog.hide()
def show_Path(self,vm, path):
cm = vm.get_class_manager()
if isinstance(path, analysis.PathVar):
dst_class_name, dst_method_name, dst_descriptor = path.get_dst( cm )
info_var = path.get_var_info()
return "%s %s (0x%x) ---> %s->%s%s " % (path.get_access_flag(),
info_var,
path.get_idx(),
dst_class_name,
dst_method_name,
dst_descriptor)
else:
if path.get_access_flag() == analysis.TAINTED_PACKAGE_CALL:
src_class_name, src_method_name, src_descriptor = path.get_src( cm )
dst_class_name, dst_method_name, dst_descriptor = path.get_dst( cm )
return "%d %s->%s%s (0x%x) ---> %s->%s%s" % (path.get_access_flag(),
src_class_name,
src_method_name,
src_descriptor,
path.get_idx(),
dst_class_name,
dst_method_name,
dst_descriptor)
else:
src_class_name, src_method_name, src_descriptor = path.get_src( cm )
return "%d %s->%s%s (0x%x)" % (path.get_access_flag(),
src_class_name,
src_method_name,
src_descriptor,
path.get_idx())
