-
Python3 环境。
-
安装依赖
git clone https://github.com/mikusjelly/saam.git
cd saam
pip install -r requirements.txt
- 安装yara-python
git clone --recursive https://github.com/rednaga/yara-python-1 yara-python
cd yara-python
python setup.py build --enable-dex install
- readline
- Mac
pip install readline - Win
pip install pyreadline
-
配置
- Add
saam/binto PATH - config conf.ini
- Add
- apktool，反编译
- analyse，交互式分析
- jadx，阅读代码
- sign，签名
- scan，扫描器
- deobfuscate，反混淆
- ida，自动调试
✗ deobfuscate.sh 34d8aad4474f86d96b97dbbcea6732bb.apk
I: Using Apktool 2.3.1 on 34d8aad4474f86d96b97dbbcea6732bb.apk
I: Loading resource table...
I: Decoding AndroidManifest.xml with resources...
I: Loading resource table from file: /Users/bin/Library/apktool/framework/1.apk
I: Regular manifest package...
I: Decoding file-resources...
I: Decoding values */* XMLs...
I: Baksmaling classes.dex...
I: Copying assets and libs...
I: Copying unknown files...
I: Copying original files...
deobfuscate... detmp/smali
classes ... 33
inner classes ... 1
methods ... 253
fields ... 189
java -jar ... ../tools/apktool/apktool.jar b -f -o de-34d8aad4474f86d96b97dbbcea6732bb.apk detmp
I: Using Apktool 2.3.1
I: Smaling smali folder into classes.dex...
I: Building resources...
I: Building apk file...
I: Copying unknown files/dir...
| 之前 | 之后 |
|---|---|
 |
 |
 |
 |