APK查殼軟件(根據(jù)so名)

基于so文件名特征的查殼小軟件，支持輸入文件路徑和導(dǎo)入文件兩種模式。

-:

csdn下載

百度網(wǎng)盤(pán)下載 提取碼: uvmh

下載完成解壓后,在 checkapp\dist 目錄下啟動(dòng) check.exe 文件.

原理比較簡(jiǎn)單,解壓apk后根據(jù)so文件名稱(chēng)來(lái)判斷是否出現(xiàn)在我們指定好的加固樣本中

python代碼:

import zipfile from tkinter import Tk, END,Label,Entry,W,Button,Text import threading from tkinter import filedialog class shellDetector(): def __init__(self): self.shellfeatures={ "libchaosvmp.so":u"娜迦", "libddog.so":u"娜迦", "libfdog.so":u"娜迦", "libedog.so":u"娜迦企業(yè)版", "libexec.so":u"愛(ài)加密", "libexecmain.so":u"愛(ài)加密", "ijiami.dat":u"愛(ài)加密", "ijiami.ajm":u"愛(ài)加密企業(yè)版", "libsecexe.so":u"梆梆免費(fèi)版", "libsecmain.so":u"梆梆免費(fèi)版", "libSecShell.so":u"梆梆免費(fèi)版", "libDexHelper.so":u"梆梆企業(yè)版", "libDexHelper-x86.so":u"梆梆企業(yè)版", "libprotectClass.so":u"360", "libjiagu.so":u"360", "libjiagu_art.so":u"360", "libjiagu_x86.so":u"360", "libegis.so":u"通付盾", "libNSaferOnly.so":u"通付盾", "libnqshield.so":u"網(wǎng)秦", "libbaiduprotect.so":u"百度", "aliprotect.dat":u"阿里聚安全", "libsgmain.so":u"阿里聚安全", "libsgsecuritybody.so":u"阿里聚安全", "libmobisec.so":u"阿里聚安全", "libtup.so":u"騰訊", "libexec.so":u"騰訊", "libshell.so":u"騰訊", "mix.dex":u"騰訊", "lib/armeabi/mix.dex":u"騰訊", "lib/armeabi/mixz.dex":u"騰訊", "libtosprotection.armeabi.so":u"騰訊御安全", "libtosprotection.armeabi-v7a.so":u"騰訊御安全", "libtosprotection.x86.so":u"騰訊御安全", "libnesec.so":u"網(wǎng)易易盾", "libAPKProtect.so":u"APKProtect", "libkwscmm.so":u"幾維安全", "libkwscr.so":u"幾維安全", "libkwslinker.so":u"幾維安全", "libx3g.so":u"頂像科技", "libapssec.so":u"盛大", "librsprotect.so":u"瑞星" } def shellDetector(self,apkpath): zipfiles=zipfile.ZipFile(apkpath) nameList=zipfiles.namelist() for fileName in nameList: try: for shell in self.shellfeatures.keys(): if shell in fileName: shellType=self.shellfeatures[shell] result = u"該apk使用了《" + shellType + u"》加固" return result except: return u"unknown" return u"該APK未加固或采用未知加固廠商\n" if __name__ == '__main__': root = Tk() root.title('APK查殼工具 by:lx') root.iconbitmap('check.ico') root.geometry('300x320') lable = Label(root, text='請(qǐng)輸入apk路徑:', font=('楷體', 15)) lable.grid() entry = Entry(root, font=('楷體', 15)) entry.grid(row=1, column=0) def thread_it(func, *args): t = threading.Thread(target=func, args=args) t.setDaemon(True) t.start() def get_apk_path(): return entry.get() def main(): apk_path = get_apk_path() if not apk_path: text1.insert(END,'\n請(qǐng)輸入APK路徑',) return elif str(apk_path).endswith('.apk') ==False: text1.insert(END,'\n請(qǐng)輸入APK的完整路徑',) return sd = shellDetector() result = sd.shellDetector(apk_path) text2.insert(END,result) def main2(): apk_path = filedialog.askopenfilename() if not apk_path: text1.insert(END, '\n請(qǐng)選擇apk路徑', ) return elif str(apk_path).endswith('.apk') == False: text1.insert(END, '\n請(qǐng)選擇apk的完整路徑', ) return sd = shellDetector() result = sd.shellDetector(apk_path) text2.insert(END, result) button1 = Button(root, text='輸入路徑后點(diǎn)擊開(kāi)始', font=('楷體', 18), command=lambda: thread_it(main, )) button1.grid(row=2, column=0, sticky=W, padx=30, pady=10) button2 = Button(root, text='可直接導(dǎo)入文件檢測(cè)', font=('楷體', 18), command=lambda: thread_it(main2, )) button2.grid(row=3, column=0, sticky=W, padx=30, pady=10) text1 = Text(root, width=40, height=8) text1.insert(END,'目前支持檢測(cè)的加固有:\n [娜迦,娜迦企業(yè)版,騰訊,愛(ài)加密,愛(ài)加密企業(yè)版,梆梆免費(fèi)版,梆梆企業(yè)版,360,通付盾,網(wǎng)秦,百度,阿里聚安全,騰訊,網(wǎng)易易盾,APKProtect,幾維安全,頂像科技,盛大,瑞星]\n') text1.grid() text2 = Text(root, width=40, height=2) text2.grid() root.mainloop()

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

網(wǎng)絡(luò)

版權(quán)聲明：本文內(nèi)容由網(wǎng)絡(luò)用戶(hù)投稿，版權(quán)歸原作者所有，本站不擁有其著作權(quán)，亦不承擔(dān)相應(yīng)法律責(zé)任。如果您發(fā)現(xiàn)本站中有涉嫌抄襲或描述失實(shí)的內(nèi)容，請(qǐng)聯(lián)系我們jiasou666@gmail.com 處理，核實(shí)后本網(wǎng)站將在24小時(shí)內(nèi)刪除侵權(quán)內(nèi)容。

版權(quán)聲明：本文內(nèi)容由網(wǎng)絡(luò)用戶(hù)投稿，版權(quán)歸原作者所有，本站不擁有其著作權(quán)，亦不承擔(dān)相應(yīng)法律責(zé)任。如果您發(fā)現(xiàn)本站中有涉嫌抄襲或描述失實(shí)的內(nèi)容，請(qǐng)聯(lián)系我們jiasou666@gmail.com 處理，核實(shí)后本網(wǎng)站將在24小時(shí)內(nèi)刪除侵權(quán)內(nèi)容。