Add filehasher project

mobiotsec2file/filehasher/filehasher_checker.py

@@ -0,0 +1,68 @@
+#!/usr/bin/env python3
+# -*- coding: utf-8 -*-
+# ~/Android/Sdk/tools/bin/avdmanager list avd
+# ~/Android/Sdk/tools/avdmanager create avd --force --name mobiotsec --abi google_apis/x86 --package 'system-images;android-26;google_apis;x86'
+# ~/Android/Sdk/emulator/emulator -avd mobiotsec -no-audio -no-boot-anim -accel on -gpu swiftshader_indirect &
+
+import argparse
+import os
+import shutil
+import time
+import subprocess as subp
+from androguard.core.bytecodes.apk import APK
+
+def parse_logs():
+    with open('./filehasher_logs.txt') as f:
+        print(f.read())
+
+def print_logs():
+    f = open("filehasher_logs.txt", "w")
+    subp.call(["adb", "logcat", "-c"])
+    try:
+        subp.call(["adb", "logcat", "-s", "MOBIOTSEC"], stdout=f, timeout=3)
+    except subp.TimeoutExpired:
+        parse_logs()
+
+def launch_app(apk):
+    print("Lauching the app")
+    mainactivity = "{}/{}".format(apk.get_package(), apk.get_main_activity())
+    os.system("adb shell am start -n {act}".format(act=mainactivity))
+
+def uninstall(apk):
+    if (os.system("adb shell pm list packages | grep {package}".format(package=apk.get_package())) == 0):
+        print("Uninstalling the app")
+        subp.call(["adb", "uninstall", apk.get_package()], stdout=subp.DEVNULL)
+
+def install(apk):
+    print("Installing the app")
+    while True:
+        try:
+            os.system("adb install -g {apk}".format(apk=apk.get_filename()))
+            break
+        except subp.CalledProcessError as err:
+            print('[!] install failed')
+            print(err)
+            print('[!] retrying')
+
+def parse_args():
+    parser = argparse.ArgumentParser()
+    parser.add_argument("victimapp_apk_path", help="path to the victim app apk file")
+    parser.add_argument("malapp_apk_path", help="path to the malicious app apk file")
+    args = parser.parse_args()
+    return args
+
+def main(args):
+    print("Lauching the emulator")
+    os.system("~/Android/Sdk/emulator/emulator -avd mobiotsec -no-audio -no-boot-anim -accel on -gpu swiftshader_indirect &")
+    time.sleep(3)
+    victimApk = APK(args.victimapp_apk_path)
+    malApk = APK(args.malapp_apk_path)
+    uninstall(victimApk)
+    install(victimApk)
+    uninstall(malApk)
+    install(malApk)
+    launch_app(victimApk)
+    print_logs()
+
+if __name__ == "__main__":
+    main(parse_args())

mobiotsec2file/filehasher/filehasher_logs.txt

@@ -0,0 +1,5 @@
+--------- beginning of main
+--------- beginning of system
+--------- beginning of kernel
+03-04 10:58:34.247  9279  9279 I MOBIOTSEC: /storage/emulated/0/YM3oPnYG.dat
+--------- beginning of crash