App安全检测实践基础——工具篇

https://ibotpeaches.github.io/Apktool/install/

@echo offsetlocalset BASENAME=apktool_chcp 65001 2>nul >nul
set java_exe=java.exe
if defined JAVA_HOME (set java_exe="%JAVA_HOME%binjava.exe")
rem Find the highest version .jar available in the same directory as the scriptsetlocal EnableDelayedExpansionpushd "%~dp0"if exist apktool.jar (    set BASENAME=apktool    goto skipversioned)set max=0for /f "tokens=1* delims=-_.0" %%A in ('dir /b /a-d %BASENAME%*.jar') do if %%~B gtr !max! set max=%%~nB:skipversionedpopdsetlocal DisableDelayedExpansion
rem Find out if the commandline is a parameterless .jar or directory, for fast unpack/repackif "%~1"=="" goto loadif not "%~2"=="" goto loadset ATTR=%~a1if "%ATTR:~0,1%"=="d" (    rem Directory, rebuild    set fastCommand=b)if "%ATTR:~0,1%"=="-" if "%~x1"==".apk" (    rem APK file, unpack    set fastCommand=d)
:load%java_exe% -jar -Duser.language=en -Dfile.encoding=UTF8 "%~dp0%BASENAME%%max%.jar" %fastCommand% %*
rem Pause when ran non interactivelyfor /f "tokens=2" %%# in ("%cmdcmdline%") do if /i "%%#" equ "/c" pause

https://sourceforge.net/projects/dex2jar/files/latest/download

https://www.sdbeta.com/plus/download.php?open=2&id=224579&uhash=6fd792195f5c2d1cd6f23471

https://github.com/aloswoya/android_app

https://developer.android.com/studio/releases/platform-tools

https://www.python.org/downloads/release/python-2718/

https://github.com/FSecureLABS/drozer/releases

dz> run app.package.listcom.android.providers.telephony (绉诲姩缃戠粶閰嶇疆)com.android.providers.calendar (鏃ュ巻瀛樺偍)com.android.providers.media (濯掍綋瀛樺偍)com.android.wallpapercropper (com.android.wallpapercropper)com.android.documentsui (鏂囨。)com.android.externalstorage (澶栭儴瀛樺偍璁惧)com.android.htmlviewer (HTML 鏌ョ湅绋嬪簭)com.android.mms.service (MmsService)com.android.providers.downloads (涓嬭浇绠＄悊绋嬪簭)com.android.browser (娴忚鍣?[Errno 0] Error

dz> run app.package.info -a com.android.providers.downloads
Package: com.android.providers.downloads  Application Label: 涓嬭浇绠＄悊绋嬪簭  Process Name: android.process.media  Version: 5.1.1-500200917  Data Directory: /data/data/com.android.providers.downloads  APK Path: /system/priv-app/DownloadProvider/DownloadProvider.apk  UID: 10004  GID: [1028, 1015, 1023, 1024, 2001, 3003, 3007]  Shared Libraries: null  Shared User ID: android.media  Uses Permissions:  - android.permission.RECEIVE_BOOT_COMPLETED  - android.permission.ACCESS_DOWNLOAD_MANAGER  - android.permission.ACCESS_CACHE_FILESYSTEM  - android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS  - android.permission.ACCESS_NETWORK_STATE  - android.permission.INTERNET  - android.permission.WRITE_EXTERNAL_STORAGE  - android.permission.ACCESS_ALL_DOWNLOADS  - android.permission.UPDATE_DEVICE_STATS  - android.permission.CONNECTIVITY_INTERNAL  - android.permission.MODIFY_NETWORK_ACCOUNTING  - android.permission.CLEAR_APP_CACHE  - android.permission.WAKE_LOCK  - android.permission.READ_EXTERNAL_STORAGE  Defines Permissions:  - android.permission.ACCESS_DOWNLOAD_MANAGER  - android.permission.ACCESS_DOWNLOAD_MANAGER_ADVANCED  - android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS  - android.permission.DOWNLOAD_CACHE_NON_PURGEABLE  - android.permission.DOWNLOAD_WITHOUT_NOTIFICATION  - android.permission.ACCESS_ALL_DOWNLOADS

dz> run app.package.attacksurface com.android.providers.downloadsAttack Surface:  0 activities exported  0 broadcast receivers exported  2 content providers exported  1 services exported    Shared UID (android.media)

dz> run app.activity.info -a com.android.providers.downloadsPackage: com.android.providers.downloads  No matching activities.

dz> run app.provider.info -a com.android.providers.downloadsPackage: com.android.providers.downloads  Authority: downloads    Read Permission: null    Write Permission: null    Content Provider: com.android.providers.downloads.DownloadProvider    Multiprocess Allowed: False    Grant Uri Permissions: True    Uri Permission Patterns:      Path: /all_downloads/        Type: PATTERN_PREFIX      Path: /my_downloads/        Type: PATTERN_PREFIX    Path Permissions:      Path: /my_downloads        Type: PATTERN_PREFIX        Read Permission: android.permission.INTERNET        Write Permission: android.permission.INTERNET      Path: /all_downloads        Type: PATTERN_PREFIX        Read Permission: android.permission.ACCESS_ALL_DOWNLOADS        Write Permission: android.permission.ACCESS_ALL_DOWNLOADS      Path: /download        Type: PATTERN_PREFIX        Read Permission: android.permission.INTERNET        Write Permission: android.permission.INTERNET  Authority: com.android.providers.downloads.documents    Read Permission: android.permission.MANAGE_DOCUMENTS    Write Permission: android.permission.MANAGE_DOCUMENTS    Content Provider: com.android.providers.downloads.DownloadStorageProvider    Multiprocess Allowed: False    Grant Uri Permissions: True

dz> run app.service.info -a com.android.providers.downloadsPackage: com.android.providers.downloads  com.android.providers.downloads.DownloadIdleService    Permission: android.permission.BIND_JOB_SERVICE

源码地址：https://github.com/aloswoya/android_app

<?xml version="1.0" encoding="utf-8"?><manifest xmlns:android="http://schemas.android.com/apk/res/android"    package="com.test.uihijack"    android:versionCode="1"    android:versionName="1.0" >     <uses-sdk        android:minSdkVersion="8"        android:targetSdkVersion="21" />     <application        android:allowBackup="true"        android:icon="@drawable/ic_launcher"        android:label="@string/app_name"        android:theme="@style/AppTheme" >        <activity            android:name="com.test.uihijack.MainActivity"            android:exported="true"            android:label="@string/app_name" >            <intent-filter>                <action android:name="android.intent.action.MAIN" />                 <category android:name="android.intent.category.LAUNCHER" />            </intent-filter>        </activity>    </application>

run app.activity.start --component com.test.uihijack com.test.uihijack.MainActivity

http://service.security.tencent.com

http://jaq.alibaba.com/

1.安全漏洞2.病毒分析3.技术研究4.安全报告相关文档

http://appscan.360.cn/

http://safe.ijiami.cn/analyze

 http://mtc.baidu.com/

https://github.com/rohitshampur/droidsheep/blob/master/%20droidsheep/DroidSheep_public/src/de/trier/infsec/koch/droidsheep/activities/HijackActivity.java

· 静态逆向分析工具-jeb；下载地址：http://www.uzzf.com/soft/313572.html· Android Killer· Tcpdump数据抓包工具；下载地址：https://www.81857.net/soft/11276.html#xzq· xposed - android hook框架[雷神模拟器或者夜神模拟器内搜索安装就行]· JustTrustMe - xposed框架下信任所有证书的插件实现[github上搜索]或者查看https://blog.csdn.net/weixin_43650289/article/details/109105943 

https://www.freebuf.com/sectool/249725.htmlhttps://blog.csdn.net/JiaoMaGe/article/details/103023839?utm_medium=distribute.pc_aggpage_search_result.none-task-blog-2~all~first_rank_v2~rank_v25-3-103023839.nonecase&utm_term=activity%20%E7%95%8C%E9%9D%A2%E5%8A%AB%E6%8C%81%E5%B7%A5%E5%85%B7&spm=1000.2123.3001.4430https://www.52pojie.cn/thread-749955-1-1.htmlhttps://blog.csdn.net/wizardforcel/article/details/54755814https://blog.csdn.net/nancyfh/article/details/81196070https://www.cnblogs.com/zhaoyixiang/p/11236458.htmlhttp://www.mamicode.com/info-detail-2486333.htmlhttps://www.jianshu.com/p/7c0a6da594c8https://www.cnblogs.com/lsdb/p/9441813.html