├── README.md ├── src └── main │ ├── resources │ ├── META-INF │ │ └── MANIFEST.MF │ └── com │ │ └── example │ │ └── androidtest │ │ ├── 危险权限组.txt │ │ ├── img.png │ │ ├── 漏洞.txt │ │ ├── 危险权限.txt │ │ ├── hello-view.fxml │ │ ├── login_css.css │ │ ├── analyse-view2.fxml │ │ ├── login-view.fxml │ │ └── load-view.fxml │ └── java │ ├── module-info.java │ ├── controller │ ├── HelloController.java │ ├── LoginController.java │ ├── AnalyseViewController.java │ └── LoadViewController.java │ ├── com │ └── example │ │ └── androidtest │ │ ├── HelloApplication.java │ │ └── TestPage.java │ └── utils │ ├── DataAnalyseUtils.java │ └── ApkUtils.java ├── .mvn └── wrapper │ ├── maven-wrapper.jar │ └── maven-wrapper.properties ├── out └── artifacts │ └── AndroidTest │ ├── AndroidTest.jar │ ├── apk-parser-2.5.3.jar │ ├── javafx-base-17.0.2.jar │ ├── javafx-fxml-17.0.2.jar │ ├── javafx-base-17.0.2-win.jar │ ├── javafx-controls-17.0.2.jar │ ├── javafx-fxml-17.0.2-win.jar │ ├── javafx-graphics-17.0.2.jar │ ├── javafx-controls-17.0.2-win.jar │ └── javafx-graphics-17.0.2-win.jar ├── .idea ├── vcs.xml ├── .gitignore ├── encodings.xml ├── misc.xml ├── artifacts │ └── AndroidTest.xml └── uiDesigner.xml ├── .gitignore ├── pom.xml ├── mvnw.cmd └── mvnw /README.md: -------------------------------------------------------------------------------- 1 | # Android-Vulnerability-Analysis 2 | 基于JavaFX框架做的一款安卓漏洞分析桌面软件,采用了反编译技术与静态分析技术,上传apk包即可分析APP可能包含的风险。 3 | -------------------------------------------------------------------------------- /src/main/resources/META-INF/MANIFEST.MF: -------------------------------------------------------------------------------- 1 | Manifest-Version: 1.0 2 | Main-Class: com.example.androidtest.HelloApplication 3 | 4 | -------------------------------------------------------------------------------- /.mvn/wrapper/maven-wrapper.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Bamboo-fly/Android-Vulnerability-Analysis/HEAD/.mvn/wrapper/maven-wrapper.jar -------------------------------------------------------------------------------- /out/artifacts/AndroidTest/AndroidTest.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Bamboo-fly/Android-Vulnerability-Analysis/HEAD/out/artifacts/AndroidTest/AndroidTest.jar -------------------------------------------------------------------------------- /src/main/resources/com/example/androidtest/危险权限组.txt: -------------------------------------------------------------------------------- 1 | CALENDAR(日历) CAMERA(相机) CONTACTS(联系人) LOCATION(位置) MICROPHONE(麦克风) PHONE(手机) SENSORS(传感器) SMS(短信) STORAGE(存储卡) -------------------------------------------------------------------------------- /out/artifacts/AndroidTest/apk-parser-2.5.3.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Bamboo-fly/Android-Vulnerability-Analysis/HEAD/out/artifacts/AndroidTest/apk-parser-2.5.3.jar -------------------------------------------------------------------------------- /out/artifacts/AndroidTest/javafx-base-17.0.2.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Bamboo-fly/Android-Vulnerability-Analysis/HEAD/out/artifacts/AndroidTest/javafx-base-17.0.2.jar -------------------------------------------------------------------------------- /out/artifacts/AndroidTest/javafx-fxml-17.0.2.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Bamboo-fly/Android-Vulnerability-Analysis/HEAD/out/artifacts/AndroidTest/javafx-fxml-17.0.2.jar -------------------------------------------------------------------------------- /src/main/resources/com/example/androidtest/img.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Bamboo-fly/Android-Vulnerability-Analysis/HEAD/src/main/resources/com/example/androidtest/img.png -------------------------------------------------------------------------------- /out/artifacts/AndroidTest/javafx-base-17.0.2-win.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Bamboo-fly/Android-Vulnerability-Analysis/HEAD/out/artifacts/AndroidTest/javafx-base-17.0.2-win.jar -------------------------------------------------------------------------------- /out/artifacts/AndroidTest/javafx-controls-17.0.2.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Bamboo-fly/Android-Vulnerability-Analysis/HEAD/out/artifacts/AndroidTest/javafx-controls-17.0.2.jar -------------------------------------------------------------------------------- /out/artifacts/AndroidTest/javafx-fxml-17.0.2-win.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Bamboo-fly/Android-Vulnerability-Analysis/HEAD/out/artifacts/AndroidTest/javafx-fxml-17.0.2-win.jar -------------------------------------------------------------------------------- /out/artifacts/AndroidTest/javafx-graphics-17.0.2.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Bamboo-fly/Android-Vulnerability-Analysis/HEAD/out/artifacts/AndroidTest/javafx-graphics-17.0.2.jar -------------------------------------------------------------------------------- /src/main/resources/com/example/androidtest/漏洞.txt: -------------------------------------------------------------------------------- 1 | Admin越权风险 android.permission.BIND_DEVICE_ADMIN 2 | 组件暴露风险 exported="true" 3 | 数据备份风险 allowBackup="true" 4 | 调试开启风险 debuggable="true" -------------------------------------------------------------------------------- /out/artifacts/AndroidTest/javafx-controls-17.0.2-win.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Bamboo-fly/Android-Vulnerability-Analysis/HEAD/out/artifacts/AndroidTest/javafx-controls-17.0.2-win.jar -------------------------------------------------------------------------------- /out/artifacts/AndroidTest/javafx-graphics-17.0.2-win.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Bamboo-fly/Android-Vulnerability-Analysis/HEAD/out/artifacts/AndroidTest/javafx-graphics-17.0.2-win.jar -------------------------------------------------------------------------------- /.idea/vcs.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | -------------------------------------------------------------------------------- /.idea/.gitignore: -------------------------------------------------------------------------------- 1 | # Default ignored files 2 | /shelf/ 3 | /workspace.xml 4 | # Editor-based HTTP Client requests 5 | /httpRequests/ 6 | # Datasource local storage ignored files 7 | /dataSources/ 8 | /dataSources.local.xml 9 | -------------------------------------------------------------------------------- /.mvn/wrapper/maven-wrapper.properties: -------------------------------------------------------------------------------- 1 | distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.8.5/apache-maven-3.8.5-bin.zip 2 | wrapperUrl=https://repo.maven.apache.org/maven2/org/apache/maven/wrapper/maven-wrapper/3.1.0/maven-wrapper-3.1.0.jar -------------------------------------------------------------------------------- /.idea/encodings.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | -------------------------------------------------------------------------------- /src/main/java/module-info.java: -------------------------------------------------------------------------------- 1 | module com.example.androidtest { 2 | requires javafx.controls; 3 | requires javafx.fxml; 4 | requires net.dongliu.apkparser; 5 | 6 | 7 | opens com.example.androidtest to javafx.fxml; 8 | exports com.example.androidtest; 9 | exports controller; 10 | opens controller to javafx.fxml; 11 | } -------------------------------------------------------------------------------- /src/main/java/controller/HelloController.java: -------------------------------------------------------------------------------- 1 | package controller; 2 | 3 | import javafx.fxml.FXML; 4 | import javafx.scene.control.Label; 5 | 6 | public class HelloController { 7 | @FXML 8 | private Label welcomeText; 9 | 10 | @FXML 11 | protected void onHelloButtonClick() { 12 | welcomeText.setText("Welcome to JavaFX Application!"); 13 | } 14 | } -------------------------------------------------------------------------------- /.idea/misc.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/resources/com/example/androidtest/危险权限.txt: -------------------------------------------------------------------------------- 1 | CALENDAR(日历) READ_CALENDAR WRITE_CALENDAR 2 | CAMERA(相机) CAMERA 3 | CONTACTS(联系人) READ_CONTACTS WRITE_CONTACTS GET_ACCOUNTS 4 | LOCATION(位置) ACCESS_FINE_LOCATION ACCESS_COARSE_LOCATION 5 | MICROPHONE(麦克风) RECORD_AUDIO 6 | PHONE(手机) READ_PHONE_STATE CALL_PHONE READ_CALL_LOG WRITE_CALL_LOG ADD_VOICEMAIL USE_SIP PROCESS_OUTGOING_CALLS 7 | SENSORS(传感器) BODY_SENSORS 8 | SMS(短信) SEND_SMS RECEIVE_SMS READ_SMS RECEIVE_WAP_PUSH RECEIVE_MMS 9 | STORAGE(存储卡) READ_EXTERNAL_STORAGE WRITE_EXTERNAL_STORAGE -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | target/ 2 | !.mvn/wrapper/maven-wrapper.jar 3 | !**/src/main/**/target/ 4 | !**/src/test/**/target/ 5 | 6 | ### IntelliJ IDEA ### 7 | .idea/modules.xml 8 | .idea/jarRepositories.xml 9 | .idea/compiler.xml 10 | .idea/libraries/ 11 | *.iws 12 | *.iml 13 | *.ipr 14 | 15 | ### Eclipse ### 16 | .apt_generated 17 | .classpath 18 | .factorypath 19 | .project 20 | .settings 21 | .springBeans 22 | .sts4-cache 23 | 24 | ### NetBeans ### 25 | /nbproject/private/ 26 | /nbbuild/ 27 | /dist/ 28 | /nbdist/ 29 | /.nb-gradle/ 30 | build/ 31 | !**/src/main/**/build/ 32 | !**/src/test/**/build/ 33 | 34 | ### VS Code ### 35 | .vscode/ 36 | 37 | ### Mac OS ### 38 | .DS_Store -------------------------------------------------------------------------------- /src/main/resources/com/example/androidtest/hello-view.fxml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 |