The apkinspector from erev0s

View Code? Open in Web Editor NEW

apkInspector is a tool designed to provide detailed insights into the zip structure of APK files, offering the capability to extract content and decode the AndroidManifest.xml file.

License: Apache License 2.0

Python 100.00%

apkinspector's People

Contributors

Stargazers

Watchers

apkinspector's Issues

Fails to decode string from manifest

Probably sample have some anti-analysis tricks.
infected.zip (password: infected)

~ apkInspector -m -apk /tmp/0070BC10699A982A26F6DA48452B8F5E648E1E356A7C1667F393C5C3A1150865.apk
apkInspector Version: 1.1.8
Copyright 2023 erev0s <[email protected]>

Traceback (most recent call last):
  File "/usr/bin/bin/apkInspector", line 8, in <module>
    sys.exit(main())
             ^^^^^^
  File "/usr/bin/lib/python3.11/site-packages/cli/apkInspector.py", line 109, in main
    manifest = get_manifest(extracted_data)
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/bin/lib/python3.11/site-packages/apkInspector/axml.py", line 645, in get_manifest
    manifest_object = ManifestStruct.parse(raw_manifest)
                      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/bin/lib/python3.11/site-packages/apkInspector/axml.py", line 469, in parse
    string_pool = StringPoolType.parse(file)
                  ^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/bin/lib/python3.11/site-packages/apkInspector/axml.py", line 191, in parse
    string_data = cls.read_strings(file, string_offsets, string_pool_header.strings_start, is_utf8)
                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/bin/lib/python3.11/site-packages/apkInspector/axml.py", line 169, in read_strings
    content = cls.decode_stringpool_mixed_string(file, is_utf8)
              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/bin/lib/python3.11/site-packages/apkInspector/axml.py", line 128, in decode_stringpool_mixed_string
    u16len = struct.unpack('<H', file.read(2))[0]
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
struct.error: unpack requires a buffer of 2 bytes

Tag the source

It would be very helpful if you could tag releases as well. This would enable distributions who want to run your tests to fetch the package from GitHub instead of PyPI, where the tests are excluded.

Thanks

Recommend Projects