mirror of
https://github.com/MobSF/Mobile-Security-Framework-MobSF.git
synced 2026-10-12 02:06:59 +00:00
Ajin Abraham
5b7c5c0075
* Realtime Scan Status in UI and PDF reports * Scan Status REST API & tests * Fixes #2414 * Address #2413 * Code QA * Dependency and version bump
129 lines
4.0 KiB
Python
Executable File
129 lines
4.0 KiB
Python
Executable File
import logging
|
|
from pathlib import Path
|
|
from enum import Enum
|
|
|
|
from django.conf import settings
|
|
|
|
from mobsf.MalwareAnalyzer.views.MalwareDomainCheck import (
|
|
MalwareDomainCheck,
|
|
)
|
|
from mobsf.StaticAnalyzer.views.common.shared_func import (
|
|
url_n_email_extract,
|
|
)
|
|
from mobsf.StaticAnalyzer.views.sast_engine import scan
|
|
from mobsf.MobSF.utils import (
|
|
append_scan_status,
|
|
)
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
class _SourceType(Enum):
|
|
swift = 'Swift'
|
|
objc = 'Objective-C'
|
|
swift_and_objc = 'Swift, Objective-C'
|
|
nocode = 'No Code'
|
|
|
|
|
|
def merge_findings(swift, objc):
|
|
code_analysis = {}
|
|
# Add all unique keys
|
|
for k in swift:
|
|
if k in objc:
|
|
swift[k]['files'].update(objc[k]['files'])
|
|
code_analysis[k] = swift[k]
|
|
for k in objc:
|
|
if k not in code_analysis:
|
|
code_analysis[k] = objc[k]
|
|
return code_analysis
|
|
|
|
|
|
def ios_source_analysis(checksum, src):
|
|
"""IOS Objective-C and Swift Code Analysis."""
|
|
try:
|
|
logger.info('Starting iOS Source Code and PLIST Analysis')
|
|
root = Path(settings.BASE_DIR) / 'StaticAnalyzer' / 'views'
|
|
swift_rules = root / 'ios' / 'rules' / 'swift_rules.yaml'
|
|
objective_c_rules = root / 'ios' / 'rules' / 'objective_c_rules.yaml'
|
|
api_rules = root / 'ios' / 'rules' / 'ios_apis.yaml'
|
|
code_findings = {}
|
|
api_findings = {}
|
|
email_n_file = []
|
|
url_n_file = []
|
|
url_list = []
|
|
domains = {}
|
|
source_type = ''
|
|
source_types = set()
|
|
|
|
# Code and API Analysis
|
|
objc_findings = scan(
|
|
checksum,
|
|
objective_c_rules.as_posix(),
|
|
{'.m'},
|
|
[src],
|
|
settings.SKIP_CLASS_PATH)
|
|
if objc_findings:
|
|
source_types.add(_SourceType.objc)
|
|
swift_findings = scan(
|
|
checksum,
|
|
swift_rules.as_posix(),
|
|
{'.swift'},
|
|
[src],
|
|
settings.SKIP_CLASS_PATH)
|
|
if swift_findings:
|
|
source_types.add(_SourceType.swift)
|
|
code_findings = merge_findings(swift_findings, objc_findings)
|
|
# API Analysis
|
|
api_findings = scan(
|
|
checksum,
|
|
api_rules.as_posix(),
|
|
{'.m', '.swift'},
|
|
[src],
|
|
settings.SKIP_CLASS_PATH)
|
|
|
|
# Extract URLs and Emails
|
|
skp = settings.SKIP_CLASS_PATH
|
|
for pfile in Path(src).rglob('*'):
|
|
if (
|
|
(pfile.suffix in ('.m', '.swift')
|
|
and any(skip_path in pfile.as_posix()
|
|
for skip_path in skp) is False
|
|
and pfile.is_dir() is False)
|
|
):
|
|
relative_java_path = pfile.as_posix().replace(src, '')
|
|
urls, urls_nf, emails_nf = url_n_email_extract(
|
|
pfile.read_text('utf-8', 'ignore'), relative_java_path)
|
|
url_list.extend(urls)
|
|
url_n_file.extend(urls_nf)
|
|
email_n_file.extend(emails_nf)
|
|
|
|
if not source_types:
|
|
source_type = _SourceType.nocode.value
|
|
elif len(source_types) > 1:
|
|
source_type = _SourceType.swift_and_objc.value
|
|
else:
|
|
source_type = source_types.pop().value
|
|
|
|
urls_list = list(set(url_list))
|
|
# Domain Extraction and Malware Check
|
|
domains = MalwareDomainCheck().scan(
|
|
checksum,
|
|
urls_list)
|
|
msg = 'Finished Code Analysis, Email and URL Extraction'
|
|
logger.info(msg)
|
|
append_scan_status(checksum, msg)
|
|
code_analysis_dict = {
|
|
'api': api_findings,
|
|
'code_anal': code_findings,
|
|
'urls_list': urls_list,
|
|
'urlnfile': url_n_file,
|
|
'domains': domains,
|
|
'emailnfile': email_n_file,
|
|
'source_type': source_type,
|
|
}
|
|
return code_analysis_dict
|
|
except Exception as exp:
|
|
msg = 'iOS Source Analysis Failed'
|
|
logger.exception(msg)
|
|
append_scan_status(checksum, msg, repr(exp))
|