mirror of
https://github.com/MobSF/Mobile-Security-Framework-MobSF.git
synced 2026-10-12 02:06:59 +00:00
Ajin Abraham
2aecb905b3
* iOS Dynamic Analysis Support with Corellium Jailbroken iOS devices * Corellium API layer for complete device and project management * Frida instrumentation (attach, spawn and inject) over SSH local port forward * Shell access over SSH * MobSF httptools proxy integration over SSH remote port forward * Device File upload and download over SSH * Frida scripts for core defense bypass, monitoring, and tracing * Helper iOS Frida scripts for pentesting and malware analysis * Screen cast with touch, swipe and text input support from web UI * Dynamic Analysis device data dump and report Generation * Android Certificate analysis, replaced oscrypto with cryptography for public key parsing * Python minimum support is 3.10 * Bumped httptools to latest, fixes httptools repeat bug * Added unzip to docker to fix a bug
245 lines
8.2 KiB
Python
245 lines
8.2 KiB
Python
# -*- coding: utf_8 -*-
|
|
"""Available Actions."""
|
|
import logging
|
|
import os
|
|
import re
|
|
|
|
from django.conf import settings
|
|
from django.views.decorators.http import require_http_methods
|
|
|
|
from mobsf.DynamicAnalyzer.views.common.shared import (
|
|
invalid_params,
|
|
send_response,
|
|
)
|
|
from mobsf.DynamicAnalyzer.views.android.operations import (
|
|
get_package_name,
|
|
)
|
|
from mobsf.DynamicAnalyzer.views.android.environment import (
|
|
Environment,
|
|
)
|
|
from mobsf.DynamicAnalyzer.views.android.tests_xposed import (
|
|
download_xposed_log,
|
|
)
|
|
from mobsf.DynamicAnalyzer.views.android.tests_tls import (
|
|
run_tls_tests,
|
|
)
|
|
from mobsf.DynamicAnalyzer.tools.webproxy import (
|
|
get_http_tools_url,
|
|
stop_httptools,
|
|
)
|
|
from mobsf.MobSF.utils import (
|
|
is_md5,
|
|
python_list,
|
|
)
|
|
from mobsf.StaticAnalyzer.models import StaticAnalyzerAndroid
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
# AJAX
|
|
@require_http_methods(['POST'])
|
|
def start_activity(request, api=False):
|
|
"""Lunch a specific activity."""
|
|
try:
|
|
env = Environment()
|
|
activity = request.POST['activity']
|
|
md5_hash = request.POST['hash']
|
|
|
|
valid_md5 = is_md5(md5_hash)
|
|
valid_act = re.match(r'^[\w]+(\.[\w]+)*$', activity)
|
|
if not valid_act or not valid_md5:
|
|
return invalid_params(api)
|
|
|
|
app_dir = os.path.join(settings.UPLD_DIR, md5_hash + '/')
|
|
screen_dir = os.path.join(app_dir, 'screenshots-apk/')
|
|
if not os.path.exists(screen_dir):
|
|
os.makedirs(screen_dir)
|
|
logger.info('Launching Activity - %s', activity)
|
|
outfile = ('{}act-{}.png'.format(screen_dir, activity))
|
|
static_android_db = StaticAnalyzerAndroid.objects.get(
|
|
MD5=md5_hash)
|
|
package = static_android_db.PACKAGE_NAME
|
|
env.launch_n_capture(package, activity, outfile)
|
|
data = {'status': 'ok'}
|
|
except Exception as exp:
|
|
logger.exception('Start Activity')
|
|
data = {'status': 'failed', 'message': str(exp)}
|
|
return send_response(data, api)
|
|
|
|
|
|
# AJAX
|
|
@require_http_methods(['POST'])
|
|
def activity_tester(request, api=False):
|
|
"""Exported & non exported activity Tester."""
|
|
data = {}
|
|
try:
|
|
env = Environment()
|
|
test = request.POST['test']
|
|
md5_hash = request.POST['hash']
|
|
if not is_md5(md5_hash):
|
|
return invalid_params(api)
|
|
app_dir = os.path.join(settings.UPLD_DIR, md5_hash + '/')
|
|
screen_dir = os.path.join(app_dir, 'screenshots-apk/')
|
|
if not os.path.exists(screen_dir):
|
|
os.makedirs(screen_dir)
|
|
static_android_db = StaticAnalyzerAndroid.objects.get(
|
|
MD5=md5_hash)
|
|
package = static_android_db.PACKAGE_NAME
|
|
iden = ''
|
|
if test == 'exported':
|
|
iden = 'Exported '
|
|
logger.info('Exported activity tester')
|
|
activities = python_list(static_android_db.EXPORTED_ACTIVITIES)
|
|
else:
|
|
logger.info('Activity tester')
|
|
activities = python_list(static_android_db.ACTIVITIES)
|
|
logger.info('Fetching %sactivities for %s', iden, package)
|
|
if not activities:
|
|
msg = 'No {}Activities found'.format(iden)
|
|
logger.info(msg)
|
|
data = {'status': 'failed',
|
|
'message': msg}
|
|
return send_response(data, api)
|
|
act_no = 0
|
|
logger.info('Starting %sActivity Tester...', iden)
|
|
logger.info('%s %sActivities Identified',
|
|
str(len(activities)), iden)
|
|
for activity in activities:
|
|
act_no += 1
|
|
logger.info(
|
|
'Launching %sActivity - %s. %s',
|
|
iden,
|
|
str(act_no),
|
|
activity)
|
|
if test == 'exported':
|
|
file_iden = 'expact'
|
|
else:
|
|
file_iden = 'act'
|
|
outfile = ('{}{}-{}.png'.format(
|
|
screen_dir,
|
|
file_iden,
|
|
act_no))
|
|
env.launch_n_capture(package, activity, outfile)
|
|
data = {'status': 'ok'}
|
|
except Exception as exp:
|
|
logger.exception('%sActivity tester', iden)
|
|
data = {'status': 'failed', 'message': str(exp)}
|
|
return send_response(data, api)
|
|
|
|
# AJAX
|
|
|
|
|
|
@require_http_methods(['POST'])
|
|
def download_data(request, api=False):
|
|
"""Download Application Data from Device."""
|
|
logger.info('Downloading app data')
|
|
data = {}
|
|
try:
|
|
env = Environment()
|
|
md5_hash = request.POST['hash']
|
|
if not is_md5(md5_hash):
|
|
return invalid_params(api)
|
|
package = get_package_name(md5_hash)
|
|
if not package:
|
|
data = {'status': 'failed',
|
|
'message': 'App details not found in database'}
|
|
return send_response(data, api)
|
|
apk_dir = os.path.join(settings.UPLD_DIR, md5_hash + '/')
|
|
stop_httptools(get_http_tools_url(request))
|
|
files_loc = '/data/local/'
|
|
logger.info('Archiving files created by app')
|
|
env.adb_command(['tar', '-cvf', files_loc + package + '.tar',
|
|
'/data/data/' + package + '/'], True)
|
|
logger.info('Downloading Archive')
|
|
env.adb_command(['pull', files_loc + package + '.tar',
|
|
apk_dir + package + '.tar'])
|
|
logger.info('Stopping ADB server')
|
|
env.adb_command(['kill-server'])
|
|
data = {'status': 'ok'}
|
|
except Exception as exp:
|
|
logger.exception('Downloading application data')
|
|
data = {'status': 'failed', 'message': str(exp)}
|
|
return send_response(data, api)
|
|
|
|
# AJAX
|
|
|
|
|
|
@require_http_methods(['POST'])
|
|
def collect_logs(request, api=False):
|
|
"""Collecting Data and Cleanup."""
|
|
logger.info('Collecting Data and Cleaning Up')
|
|
data = {}
|
|
try:
|
|
env = Environment()
|
|
md5_hash = request.POST['hash']
|
|
if not is_md5(md5_hash):
|
|
return invalid_params(api)
|
|
package = get_package_name(md5_hash)
|
|
if not package:
|
|
data = {'status': 'failed',
|
|
'message': 'App details not found in database'}
|
|
return send_response(data, api)
|
|
apk_dir = os.path.join(settings.UPLD_DIR, md5_hash + '/')
|
|
lout = os.path.join(apk_dir, 'logcat.txt')
|
|
dout = os.path.join(apk_dir, 'dump.txt')
|
|
logger.info('Downloading logcat logs')
|
|
logcat = env.adb_command(['logcat',
|
|
'-d',
|
|
package + ':V',
|
|
'*:*'])
|
|
with open(lout, 'wb') as flip:
|
|
flip.write(logcat)
|
|
logger.info('Downloading dumpsys logs')
|
|
dumpsys = env.adb_command(['dumpsys'], True)
|
|
with open(dout, 'wb') as flip:
|
|
flip.write(dumpsys)
|
|
if env.get_android_version() < 5:
|
|
download_xposed_log(apk_dir)
|
|
env.adb_command(['am', 'force-stop', package], True)
|
|
logger.info('Stopping app')
|
|
# Unset Global Proxy
|
|
env.unset_global_proxy()
|
|
data = {'status': 'ok'}
|
|
except Exception as exp:
|
|
logger.exception('Data Collection & Clean Up failed')
|
|
data = {'status': 'failed', 'message': str(exp)}
|
|
return send_response(data, api)
|
|
|
|
# AJAX
|
|
|
|
|
|
@require_http_methods(['POST'])
|
|
def tls_tests(request, api=False):
|
|
"""Perform TLS tests."""
|
|
logger.info('Running TLS/SSL Security tests')
|
|
data = {}
|
|
package = None
|
|
try:
|
|
test_duration = 25
|
|
test_package = 'tls_tests'
|
|
env = Environment()
|
|
md5_hash = request.POST['hash']
|
|
if not is_md5(md5_hash):
|
|
return invalid_params(api)
|
|
package = get_package_name(md5_hash)
|
|
if not package:
|
|
data = {'status': 'failed',
|
|
'message': 'App details not found in database'}
|
|
return send_response(data, api)
|
|
res = run_tls_tests(
|
|
request,
|
|
md5_hash,
|
|
env,
|
|
package,
|
|
test_package,
|
|
test_duration,
|
|
)
|
|
data = {'status': 'ok', 'tls_tests': res}
|
|
except Exception as exp:
|
|
logger.exception('Checking Application Security in Transit')
|
|
data = {'status': 'failed', 'message': str(exp)}
|
|
finally:
|
|
logger.info('Test Completed. Resuming HTTPS Proxy')
|
|
env.configure_proxy(package, request)
|
|
return send_response(data, api)
|