dhunter.rb

require File.dirname(__FILE__) + '/config/config.rb' # Include Config File
require File.dirname(__FILE__) + '/src/sscan.rb' # Include Scan
require File.dirname(__FILE__) + '/src/vscan.rb' # Include vScan
require File.dirname(__FILE__) + '/src/generate_report.rb' # Include Report

version = '2.0'

def banner
  puts '      .---.        .-----------'
  puts '     /     \\  __  /    ------'
  puts '    / /     \\(  )/    -----     ╔╦╗╦═╗╔═╗╦╔╦╗   ╦ ╦╦ ╦╔╗╔╔╦╗╔═╗╦═╗'
  puts "   //////   ' \\/ `   ---         ║║╠╦╝║ ║║ ║║───╠═╣║ ║║║║ ║ ║╣ ╠╦╝"
  puts '  //// / // :    : ---          ═╩╝╩╚═╚═╝╩═╩╝   ╩ ╩╚═╝╝╚╝ ╩ ╚═╝╩╚═'
  puts " // /   /  /`    '--                         By HaHwul"
  puts '//          //..\\\\                         www.hahwul.com'
  puts '       ====UU====UU====         https://github.com/hahwul/droid-hunter'
  puts "           '//||\\\\`"
  puts "             ''``"
end

def help
  puts 'Usage: ruby dhunter.rb [APK]'
  puts 'Command'
  puts '-a, --apk : Analysis android APK file.'
  puts ' + APK Analysis'
  puts '   => dhunter -a 123.apk[apk file]'
  puts '   => dhunter --apk 123.apk aaa.apk test.apk hwul.apk'
  puts '-p, --pentest : Penetration testing Device'
  puts ' + Pentest Android'
  puts '   => dhunter -p device[device code]'
  puts '   => dhunter --pentest device'
  puts '-v, --version : Show this droid-hunter version'
  puts '-h, --help : Show help page'
end
# ==================================================
# APK Class
class App
  def initialize(file)
    @app_file = file
    @app_perm = ''
    @app_sdk = ''
    @app_manifest = ''
    @app_feature = ''
    @app_main = ''
    @app_package = ''
    @app_workspace = ''
    @app_vuln = Hash.new
    @app_strlist = Array.new(2)
    for i in (0..2)
      @app_strlist[i] = []
    end
  end

  def scan_info # Scanning App default information
    IO.popen($p_aapt + ' dump badging ' + @app_file, 'r') do |pipe|
      pipe.each_line do |line|
        if line.include? 'package: name='
          @app_package = line[14..-1]
          @app_package = @app_package[0..@app_package.index(' ')]
          @app_package = @app_package.delete("'")
        elsif line.include? 'sdkVersion'
          @app_sdk = @apk_sdk.to_s + line
        elsif line.include? 'uses-permission:'
          @app_perm += line[16..-1]
          @app_perm = @app_perm.delete("'")
        elsif line.include? 'launchable-activity: name='
          @app_main = line[26..-1]
          @app_main = @app_main[0..@app_main.index(' ')]
          @app_main = @app_main.delete("'")
        end
      end
    end
    time = Time.new
    @app_workspace = Dir.pwd + '/' + time.to_i.to_s + '_' + @app_package
    @app_workspace = @app_workspace.strip!
    @app_time = time.to_i.to_s
  end

  def make_work # Mkdir + Apk Decompile + BakSmiling
    Dir.mkdir(@app_workspace)
    puts ' --- Copy File'
    system('cp ' + @app_file + ' ' + @app_workspace + '/' + @app_time + '_' + @app_package.strip + '.apk')
    puts ' --- Change workspace'
    Dir.chdir(@app_workspace)
    puts ' --- Rename APK'
    @app_file = Dir.pwd + '/' + @app_time + '_' + @app_package.strip + '.apk'
    puts ' --- Unzip APK'
    system($p_unzip + ' ' + @app_file + ' -d ' + @app_workspace + '/1_unzip/ > /dev/null 2>&1') ## Unzip
    puts ' --- Baksmaling APK'
    system('java -jar ' + $p_apktool + ' d ' + @app_file + ' -o ' + @app_workspace + '/2_apktool/ > /dev/null 2>&1') ## apktool
    af = File.open(@app_workspace + '/2_apktool/AndroidManifest.xml')
    @app_manifest = af.read()
    @app_manifest = @app_manifest.gsub('<','&lt;')
    @app_manifest = @app_manifest.gsub('>','&gt;')
    puts ' --- Decompile APK'
    system($p_dex2jar + ' ' + @app_file + ' > /dev/null 2>&1') ## dex2jar
    puts ' --- Extract Class file'
    system($p_unzip + ' ' + @app_workspace + '/' + @app_time + '_' + @app_package.strip + '_dex2jar.jar' + ' -d ' + @app_workspace + '/3_dex2jar/ > /dev/null 2>&1') ## Unzip
    puts ' --- Extract Java code'
    system($p_jad + ' -o -r -sjava -d' + @app_workspace + '/4_jad/ 3_dex2jar/**/*.class > /dev/null 2>&1') ## dex2jar
  end

  def returnFile
    puts @app_file
    puts @app_package
    puts @app_perm
    puts @app_main
    puts @app_workspace
  end

  def getdirectory
    @app_time + '_' + @app_package.strip
  end

  def getmanifest
    @app_manifest
  end

  def setvuln key,value
    @app_vuln[key] = value
  end

  def getvuln
    @app_vuln
  end

  def getperm
    @app_perm
  end

  def getmain
    @app_main
  end

  def getfile
    @app_file
  end

  def getpackage
    @app_package
  end

  def getworkspace
    @app_workspace
  end

  def getstrlist_addr
    @app_strlist
  end

  def test
    puts @app_strlist
  end
end

# Android Class
class AndroidDevice
  def initialize(id)
    @adevice_id = id
  end
end

# ==================================================
banner

if (ARGV[0] == '-u') || (ARGV[0] == '--update')
  puts 'Update Module'
  puts '[INF] Update droid-hunter'.green
  Dir.chdir(File.dirname(__FILE__))
  system('git pull -v')
  puts '[FIN] Updated droid-hunter'.red

else if (ARGV[0] == '-h') || (ARGV[0] == '--help')
       help
       exit

     else if (ARGV[0] == '-v') || (ARGV[0] == '--version')
            puts 'version is droid-hunter ' + version
            exit

          else if ARGV.size < 2
                 help
                 exit

               else if (ARGV[0] == '-a') || (ARGV[0] == '--apk')
                      i = 1
                      app = []
                      while i <= ARGV.size - 1
                        app.push(App.new(ARGV[i]))
                        i += 1
                      end
                      i = 0
                      while i < ARGV.size - 1
                        app[i].scan_info # Scan App Default Info
                        puts '[START] Analysis to '.red + app[i].getpackage.yellow
                        #    app[i].returnFile()
                        puts '[INFO] Start Basic Analysis'.green
                        app[i].make_work # Decompile + Unzip
                        puts '[INFO] Start Pattern Scan'.green
                        sscan(app[i].getworkspace + '/2_apktool/', app[i].getstrlist_addr) # Scan smali code
                        sscan(app[i].getworkspace + '/4_jad/', app[i].getstrlist_addr) # Scan java code
                        puts '[INFO] Start Vulnerability Scanning..'.green
                        vscan(app[i])
                        Dir.chdir('../')
                        puts '[INFO] Generate Report'.green
                        generate_report(app[i])
                        puts '[INFO] Report finish'.green
                        puts '[FINISH] :: '.red + app[i].getpackage.red
                        i += 1
                      end
                    else if (ARGV[0] == '-p') || (ARGV[0] == '--pentest')
                           puts 'Pentest Module'
                           device = AndroidDevice.new(ARGV[i])

                         else
                           puts 'Not supported commmand'
end
end
end
end
end
end