def ProcessingDataForGetApkData(ApkDirectoryPath, ApkFile, PMap):
'''
Produce .data file for a given ApkFile.
:param String ApkDirectoryPath: absolute path of the ApkFile directory
:param String ApkFile: absolute path of the ApkFile
:param PScoutMapping.PScoutMapping() PMap: PMap for API mapping
:return Tuple(String, Boolean) ProcessingResult: The processing result, (ApkFile, True/False)
True means successful. False means unsuccessful.
'''
try:
StartTime = time.time()
logger.info("Start to process " + ApkFile + "...")
print("Start to process " + ApkFile + "...")
DataDictionary = {}
RequestedPermissionSet, ActivitySet, ServiceSet, ContentProviderSet, BroadcastReceiverSet, HardwareComponentsSet,\
IntentFilterSet = GetFromXML(ApkDirectoryPath, ApkFile)
RequestedPermissionList = list(RequestedPermissionSet)
ActivityList = list(ActivitySet)
ServiceList = list(ServiceSet)
ContentProviderList = list(ContentProviderSet)
BroadcastReceiverList = list(BroadcastReceiverSet)
HardwareComponentsList = list(HardwareComponentsSet)
IntentFilterList = list(IntentFilterSet)
DataDictionary["RequestedPermissionList"] = RequestedPermissionList
DataDictionary["ActivityList"] = ActivityList
DataDictionary["ServiceList"] = ServiceList
DataDictionary["ContentProviderList"] = ContentProviderList
DataDictionary["BroadcastReceiverList"] = BroadcastReceiverList
DataDictionary["HardwareComponentsList"] = HardwareComponentsList
DataDictionary["IntentFilterList"] = IntentFilterList
# Got Set S2 and others
UsedPermissions, RestrictedApiSet, SuspiciousApiSet, URLDomainSet = GetFromInstructions(
ApkDirectoryPath, ApkFile, PMap, RequestedPermissionList)
UsedPermissionsList = list(UsedPermissions)
RestrictedApiList = list(RestrictedApiSet)
SuspiciousApiList = list(SuspiciousApiSet)
URLDomainList = list(URLDomainSet)
DataDictionary["UsedPermissionsList"] = UsedPermissionsList
DataDictionary["RestrictedApiList"] = RestrictedApiList
DataDictionary["SuspiciousApiList"] = SuspiciousApiList
DataDictionary["URLDomainList"] = URLDomainList
# Set S6, S5, S7, S8
CM.ExportToJson(os.path.splitext(ApkFile)[0] + ".data", DataDictionary)
except Exception as e:
FinalTime = time.time()
logger.error(e)
logger.error(ApkFile + " processing failed in " +
str(FinalTime - StartTime) + "s...")
print(ApkFile + " processing failed in " + str(FinalTime - StartTime) +
"s...")
return ApkFile, False
else:
FinalTime = time.time()
logger.info(ApkFile + " processed successfully in " +
str(FinalTime - StartTime) + "s")
print(ApkFile + " processed successfully in " +
str(FinalTime - StartTime) + "s")
return ApkFile, True
def GetFromInstructions(ApkDirectoryPath, ApkFile, PMap,
RequestedPermissionList):
'''
Get required permissions, used Apis and HTTP information for an ApkFile.
Reloaded version of GetPermissions.
:param String ApkDirectoryPath
:param String ApkFile
:param PScoutMapping.PScoutMapping PMap
:param RequestedPermissionList List([String])
:return UsedPermissions
:rtype Set([String])
:return RestrictedApiSet
:rtype Set([String])
:return SuspiciousApiSet
:rtype Set([String])
:return URLDomainSet
:rtype Set([String])
'''
UsedPermissions = set()
RestrictedApiSet = set()
SuspiciousApiSet = set()
URLDomainSet = set()
try:
ApkFile = os.path.abspath(ApkFile)
a, d, dx = AnalyzeAPK(ApkFile)
except Exception as e:
print(e)
logger.error(e)
logger.error("Executing Androlyze on " + ApkFile + " Failed.")
return
for _dex in d:
for method in _dex.get_methods():
g = dx.get_method(method)
for BasicBlock in g.get_basic_blocks().get():
Instructions = BasicBlockAttrBuilder.GetBasicBlockDalvikCode(
BasicBlock)
Apis, SuspiciousApis = BasicBlockAttrBuilder.GetInvokedAndroidApis(
Instructions)
Permissions, RestrictedApis = BasicBlockAttrBuilder.GetPermissionsAndApis(
Apis, PMap, RequestedPermissionList)
UsedPermissions = UsedPermissions.union(Permissions)
RestrictedApiSet = RestrictedApiSet.union(RestrictedApis)
SuspiciousApiSet = SuspiciousApiSet.union(SuspiciousApis)
for Instruction in Instructions:
URLSearch = re.search(
"https?://([\da-z\.-]+\.[a-z\.]{2, 6}|[\d.]+)[^'\"]*",
Instruction, re.IGNORECASE)
if (URLSearch):
URL = URLSearch.group()
Domain = re.sub(
"https?://(.*)", "\g<1>",
re.search("https?://([^/:\\\\]*)", URL,
re.IGNORECASE).group(), 0, re.IGNORECASE)
URLDomainSet.add(Domain)
# Got Set S6, S5, S7 described in Drebian paper
return UsedPermissions, RestrictedApiSet, SuspiciousApiSet, URLDomainSet
def GetFromXML(ApkDirectoryPath, ApkFile):
'''
Get requested permission etc. for an ApkFile from Manifest files.
:param String ApkDirectoryPath
:param String ApkFile
:return RequestedPermissionSet
:rtype Set([String])
:return ActivitySet
:rtype Set([String])
:return ServiceSet
:rtype Set([String])
:return ContentProviderSet
:rtype Set([String])
:return BroadcastReceiverSet
:rtype Set([String])
:return HardwareComponentsSet
:rtype Set([String])
:return IntentFilterSet
:rtype Set([String])
'''
ApkDirectoryPath = os.path.abspath(ApkDirectoryPath)
ApkFileName = os.path.splitext(ApkFile)[0]
RequestedPermissionSet = set()
ActivitySet = set()
ServiceSet = set()
ContentProviderSet = set()
BroadcastReceiverSet = set()
HardwareComponentsSet = set()
IntentFilterSet = set()
try:
ApkFile = os.path.abspath(ApkFile)
a = androlyze.APK(ApkFile)
f = open(os.path.splitext(ApkFile)[0] + ".xml", "w")
f.write((a.xml["AndroidManifest.xml"].toprettyxml()).encode("utf-8"))
f.close()
except Exception as e:
print e
logger.error(e)
logger.error("Executing Androlyze on " + ApkFile +
" to get AndroidManifest.xml Failed.")
return
try:
f = open(ApkFileName + ".xml", "r")
Dom = minidom.parse(f)
DomCollection = Dom.documentElement
DomPermission = DomCollection.getElementsByTagName("uses-permission")
for Permission in DomPermission:
if Permission.hasAttribute("android:name"):
RequestedPermissionSet.add(
Permission.getAttribute("android:name"))
DomActivity = DomCollection.getElementsByTagName("activity")
for Activity in DomActivity:
if Activity.hasAttribute("android:name"):
ActivitySet.add(Activity.getAttribute("android:name"))
DomService = DomCollection.getElementsByTagName("service")
for Service in DomService:
if Service.hasAttribute("android:name"):
ServiceSet.add(Service.getAttribute("android:name"))
DomContentProvider = DomCollection.getElementsByTagName("provider")
for Provider in DomContentProvider:
if Provider.hasAttribute("android:name"):
ContentProviderSet.add(Provider.getAttribute("android:name"))
DomBroadcastReceiver = DomCollection.getElementsByTagName("receiver")
for Receiver in DomBroadcastReceiver:
if Receiver.hasAttribute("android:name"):
BroadcastReceiverSet.add(Receiver.getAttribute("android:name"))
DomHardwareComponent = DomCollection.getElementsByTagName(
"uses-feature")
for HardwareComponent in DomHardwareComponent:
if HardwareComponent.hasAttribute("android:name"):
HardwareComponentsSet.add(
HardwareComponent.getAttribute("android:name"))
DomIntentFilter = DomCollection.getElementsByTagName("intent-filter")
DomIntentFilterAction = DomCollection.getElementsByTagName("action")
for Action in DomIntentFilterAction:
if Action.hasAttribute("android:name"):
IntentFilterSet.add(Action.getAttribute("android:name"))
except Exception as e:
logger.error(e)
logger.error("Cannot resolve " + DestinationFolder +
"'s AndroidManifest.xml File!")
return RequestedPermissionSet, ActivitySet, ServiceSet, ContentProviderSet, BroadcastReceiverSet, HardwareComponentsSet, IntentFilterSet
finally:
f.close()
return RequestedPermissionSet, ActivitySet, ServiceSet, ContentProviderSet, BroadcastReceiverSet, HardwareComponentsSet, IntentFilterSet
