androtest.py

__author__ = 'Azzi'
#!/usr/bin/env python

from androguard.core.bytecodes import dvm, apk
from androguard.core.analysis import analysis
from androguard.decompiler.dad import decompile
from androguard.core.analysis import ganalysis

#"UILabs" is my app
#TEST = "C:/Users/Azzi/Desktop/an/UILabs.apk"
#apk (https://play.google.com/store/apps/details?id=com.oobgolf.mobile)
TEST = "C:/Users/Azzi/Desktop/an/mobile.apk"

# information about files, permissions and different entry points(activities, services...)
a = apk.APK( TEST )
a.show()
#print a.get_activities()
#print a.androidversion
#print a.get_max_sdk_version()
#print a.get_min_sdk_version()

#length
print len(a.get_file("classes.dex"))

#disassembling the classes.dex file and getting new format(DalvikVMFormat) that is good to work with
d = dvm.DalvikVMFormat( a.get_dex() )
# SHOW CLASS (verbose)
d.show()

#analyzing classes to get the control flow graph, setup references, and create xref/dref
dx = analysis.VMAnalysis( d )
gx = ganalysis.GVMAnalysis( dx, None )
d.set_vmanalysis( dx )
d.set_gvmanalysis( gx )

#XREF is used to know where is a specific method called
d.create_xref()
#DREF is used to know where a specific field is used
d.create_dref()

#display
d.create_python_export()
d.pretty_show()

#more info about a method
for x in d.get_methods():
    x.pretty_show()

"""search for a specific method
@param class_name : a regexp for the class name of the method (the package)
@param name : a regexp for the name of the method
@param descriptor : a regexp for the descriptor of the method
@rtype : a list of called methods' paths
"""
analysis.show_Paths(d, dx.tainted_packages.search_methods(".", "getCount", "."))

#show usage of specifc packagce (for example:crypto usage)
analysis.show_Paths(d, dx.get_tainted_packages().search_crypto_packages() )
#this method does the same as one above
#for m, _ in dx.get_tainted_packages().search_packages("Ljavax/crypto/") :
 #     m.show()

#way to get source code
vmx = analysis.VMAnalysis(d)
for method in d.get_methods():
    mx = vmx.get_method(method)
    if method.get_code() == None:
      continue
    print method.get_class_name(), method.get_name(), method.get_descriptor()

    ms = decompile.DvMethod(mx)
    # process to the decompilation
    ms.process()
    # get the source !
    print ms.get_source()