frida-fusion 0.1.11__tar.gz → 0.1.13__tar.gz

{frida_fusion-0.1.11 → frida_fusion-0.1.13}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: frida-fusion
-Version: 0.1.11
+Version: 0.1.13
 Summary: Hook your mobile tests with Frida
 Author-email: "Helvio Junior (M4v3r1ck)" <helvio_junior@hotmail.com>
 Maintainer-email: "Helvio Junior (M4v3r1ck)" <helvio_junior@hotmail.com>

{frida_fusion-0.1.11 → frida_fusion-0.1.13}/frida_fusion/__meta__.py

@@ -1,8 +1,8 @@
-__version__ = '0.1.11'
+__version__ = '0.1.13'
 __title__ = "Frida Fusion"
 __description__ = "📱 frida-fusion - runtime mobile exploration"
 __url__ = "https://github.com/helviojunior/frida-fusion"
-__build__ = 0xc8879a3
+__build__ = 0xf8869e4
 __author__ = "Helvio Junior (M4v3r1ck)"
 __author_email__ = "helvio_junior@hotmail.com"
 __license__ = "GPL-3.0"

{frida_fusion-0.1.11 → frida_fusion-0.1.13}/frida_fusion/args.py

@@ -148,4 +148,8 @@ class Arguments(object):
                              dest='enabled_modules',
                              help='Enabled module by name. You can specify multiple values repeating the flag.')
 
+        modules.add_argument('--silence-module-messages',
+                             action='append',
+                             dest='ignore_messages_modules',
+                             help='Silence messages becaming from module by name. You can specify multiple values repeating the flag.')
 

{frida_fusion-0.1.11 → frida_fusion-0.1.13}/frida_fusion/config.py

@@ -22,6 +22,7 @@ class Configuration(object):
     base_path = str(Path(__file__).resolve().parent)
     db_path = os.path.join(str(Path(".").resolve()), "fusion.db")
     enabled_modules = {}
+    ignore_messages_modules = {}
 
     # Device vars
     device_id = None
@@ -180,9 +181,15 @@ class Configuration(object):
 
         Logger.pl('     {C}min debug level:{O} %s{W}' % str(args.debug_level).upper())
 
-        if args.enabled_modules is not None and isinstance(args.enabled_modules, list):
+        if (args.enabled_modules is not None and isinstance(args.enabled_modules, list)) or \
+                (args.ignore_messages_modules is not None and isinstance(args.ignore_messages_modules, list)):
             mods = ModuleManager.list_modules()
-            for mod in args.enabled_modules:
+            for mod in [
+                m.strip()
+                for md in args.enabled_modules
+                for m in md.split(",")
+                if m.strip() != ""
+            ]:
                 fm = next(iter([
                     m
                     for _, m in mods.items()
@@ -196,6 +203,26 @@ class Configuration(object):
                 name = fm.safe_name()
                 if name not in Configuration.enabled_modules.keys():
                     Configuration.enabled_modules[name] = fm
+            if args.ignore_messages_modules is not None and isinstance(args.ignore_messages_modules, list):
+                for mod in [
+                    m.strip()
+                    for md in args.ignore_messages_modules
+                    for m in md.split(",")
+                    if m.strip() != ""
+                ]:
+                    fm = next(iter([
+                        m
+                        for _, m in mods.items()
+                        if m.safe_name() == mod.lower()
+                    ]), None)
+                    if fm is None:
+                        Color.pl(
+                            '{!} {R}error: module {O}%s{R} not found{W}\r\n' % mod)
+                        sys.exit(1)
+
+                    name = fm.safe_name()
+                    if name not in Configuration.ignore_messages_modules.keys():
+                        Configuration.ignore_messages_modules[name] = fm
 
         if len(Configuration.enabled_modules) > 0:
             Logger.pl('     {C}modules:{O} %s{W}' % ', '.join([
@@ -203,6 +230,12 @@ class Configuration(object):
                 for _, m in Configuration.enabled_modules.items()
             ]))
 
+        if len(Configuration.ignore_messages_modules) > 0:
+            Logger.pl('     {C}ignored messages from modules:{O} %s{W}' % ', '.join([
+                m.name
+                for _, m in Configuration.ignore_messages_modules.items()
+            ]))
+
         Logger.pl("")
 
     @staticmethod

{frida_fusion-0.1.11 → frida_fusion-0.1.13}/frida_fusion/fusion.py

@@ -44,6 +44,7 @@ class Fusion(object):
         self.pid = 0
         self.script_trace = {}
         self._modules = []
+        self._ignore_messages = []
         signal.signal(signal.SIGINT, self.signal_handler)
 
         t = threading.Thread(target=Fusion._db_worker, daemon=True)
@@ -293,6 +294,10 @@ class Fusion(object):
                     mType = jData.get('type', '').lower()
                     mLevel = jData.get('level', None)
                     if mType == "message":
+
+                        if script_location.file_name in self._ignore_messages:
+                            return
+
                         msg = jData.get('message', '')
                         try:
                             msg = base64.b64decode(msg).decode("UTF-8")
@@ -621,7 +626,23 @@ class Fusion(object):
             if len(self._modules) > 0:
                 Logger.pl("{+} Starting selected modules")
                 for m in self._modules:
-                    m.start_module(db_path=Configuration.db_path)
+                    m.start_module(
+                        package=Configuration.package,
+                        db_path=Configuration.db_path
+                    )
+                    if m.safe_name() in Configuration.ignore_messages_modules.keys():
+                        m.suppress_messages()
+
+                self._ignore_messages = [
+                    Path(f).name
+                    for _, md in Configuration.ignore_messages_modules.items()
+                    if (m := next(iter([
+                        mi
+                        for mi in self._modules
+                        if mi.name == md.name
+                    ]), None)) is not None
+                    for f in m.js_files()
+                ]
 
             self.get_device()
             if self.device is not None:

{frida_fusion-0.1.11 → frida_fusion-0.1.13}/frida_fusion/module.py

@@ -8,13 +8,9 @@ import requests
 import importlib.util
 from pathlib import Path
 
-from typing import TYPE_CHECKING
-
 from .__meta__ import __version__
 from .libs.logger import Logger
-
-if TYPE_CHECKING:
-    from .fusion import Fusion  # só no type checker
+from .libs.scriptlocation import ScriptLocation
 
 
 class ModuleLoaderError(Exception):
@@ -42,8 +38,11 @@ class ModuleBase(object):
     def js_files(self) -> list:
         return []
 
+    def suppress_messages(self):
+        pass
+
     def key_value_event(self,
-                        script_location: "Fusion.ScriptLocation" = None,
+                        script_location: ScriptLocation = None,
                         stack_trace: str = None,
                         module: str = None,
                         received_data: dict = None
@@ -51,7 +50,7 @@ class ModuleBase(object):
         raise Exception('Method "key_value_event" is not yet implemented.')
 
     def data_event(self,
-                   script_location: "Fusion.ScriptLocation" = None,
+                   script_location: ScriptLocation = None,
                    stack_trace: str = None,
                    received_data: str = None
                    ) -> bool:

{frida_fusion-0.1.11 → frida_fusion-0.1.13}/frida_fusion/modules/android_setings/settings.js

@@ -27,7 +27,7 @@ setTimeout(function() {
                 let value = item[1];
 
                 if (name === name) {
-                    fusion_sendMessage('D', `Bypassing ${name}`)
+                    fusion_sendMessage('D', `Bypassing android settings checking: ${name}`)
                     return value;
                 }
             });

{frida_fusion-0.1.11 → frida_fusion-0.1.13}/frida_fusion/modules/android_setings/settings.py

@@ -32,6 +32,7 @@ class Settings(ModuleBase):
             cursor.execute("""
                 CREATE TABLE IF NOT EXISTS [android_settings] (
                     id INTEGER PRIMARY KEY AUTOINCREMENT,
+                    package TEXT NOT NULL,
                     module TEXT NULL,
                     name TEXT NULL,
                     flag INTEGER NULL DEFAULT (0),
@@ -49,12 +50,14 @@ class Settings(ModuleBase):
     def __init__(self):
         super().__init__('Settings', 'Hook Android Settings functions')
         self._settings_db = None
+        self._package = None
         self.mod_path = str(Path(__file__).resolve().parent)
 
     def start_module(self, **kwargs) -> bool:
         if 'db_path' not in kwargs:
             raise Exception("parameter db_path not found")
 
+        self._package = kwargs['package']
         self._settings_db = Settings.SettingsDB(db_name=kwargs['db_path'])
         return True
 
@@ -87,6 +90,7 @@ class Settings(ModuleBase):
 
             self._settings_db.insert_ignore_one(
                 table_name='android_settings',
+                package=self._package,
                 module=module,
                 name=name,
                 flag=flag,

{frida_fusion-0.1.11 → frida_fusion-0.1.13}/frida_fusion/modules/crypto/crypto.py

@@ -32,6 +32,7 @@ class Crypto(ModuleBase):
             cursor.execute("""
                 CREATE TABLE IF NOT EXISTS [crypto] (
                     id INTEGER PRIMARY KEY AUTOINCREMENT,
+                    package TEXT NOT NULL,
                     hashcode TEXT NOT NULL,
                     algorithm TEXT NULL,
                     init_key TEXT NULL,
@@ -52,6 +53,7 @@ class Crypto(ModuleBase):
             cursor.execute("""
                 CREATE TABLE IF NOT EXISTS [crypto_key] (
                     id INTEGER PRIMARY KEY AUTOINCREMENT,
+                    package TEXT NOT NULL,
                     key TEXT NULL,
                     printable_key TEXT NULL,
                     salt TEXT NULL,
@@ -59,7 +61,7 @@ class Crypto(ModuleBase):
                     key_class TEXT NULL DEFAULT ('<unknown>'),
                     additional_data TEXT NULL,
                     created_date datetime not null DEFAULT (datetime('now','localtime')),
-                    UNIQUE (key, key_class)
+                    UNIQUE (package, key, key_class)
                 );
             """)
 
@@ -68,6 +70,7 @@ class Crypto(ModuleBase):
             cursor.execute("""
                 CREATE TABLE IF NOT EXISTS [digest] (
                     id INTEGER PRIMARY KEY AUTOINCREMENT,
+                    package TEXT NOT NULL,
                     algorithm TEXT NOT NULL,
                     hashcode TEXT NULL,
                     clear_text TEXT NULL,
@@ -98,7 +101,7 @@ class Crypto(ModuleBase):
 
         def update_crypto(self, iv=None, hashcode=None, flow=None, key=None, before_final=None,
                           after_final=None, stack_trace=None, id=None, algorithm=None,
-                          status=None):
+                          status=None, package=None):
 
             conn = self.connect_to_db(check=False)
             cursor = conn.cursor()
@@ -124,6 +127,12 @@ class Crypto(ModuleBase):
 
                 data = []
                 update = "update [crypto] set "
+
+                if package is not None:
+                    integrity = True
+                    update += " package = ?,"
+                    data.append(package)
+
                 if iv is not None:
                     integrity = True
                     update += " iv = ?,"
@@ -213,7 +222,7 @@ class Crypto(ModuleBase):
 
             conn.close()
 
-        def insert_digest(self, hashcode, algorithm, data_input, data_output, stack_trace):
+        def insert_digest(self, package, hashcode, algorithm, data_input, data_output, stack_trace):
 
             conn = self.connect_to_db(check=False)
 
@@ -243,9 +252,9 @@ class Crypto(ModuleBase):
 
             cursor = conn.cursor()
             cursor.execute("""
-            insert into [digest] ([hashcode], [algorithm], [clear_text], [clear_text_b64], [hash_b64], [hash_hex], [stack_trace])
-            VALUES (?,?,?,?,?,?,?);
-            """, (hashcode, algorithm, clear_text, clear_text_b64, hash_b64, hash_hex, stack_trace,))
+            insert into [digest] ([package], [hashcode], [algorithm], [clear_text], [clear_text_b64], [hash_b64], [hash_hex], [stack_trace])
+            VALUES (?,?,?,?,?,?,?,?);
+            """, (package, hashcode, algorithm, clear_text, clear_text_b64, hash_b64, hash_hex, stack_trace,))
 
             conn.commit()
 
@@ -253,13 +262,14 @@ class Crypto(ModuleBase):
 
             # Color.pl('{+} {W}Inserindo crypto. {C}Algorithm: {O}%s{W}' % algorithm)
 
-        def insert_crypto(self, hashcode, algorithm, init_key):
+        def insert_crypto(self, package, hashcode, algorithm, init_key):
 
             if hashcode is None:
                 return
 
             rows = self.select(
                 table_name='crypto',
+                package=package,
                 hashcode=hashcode,
                 status='open'
             )
@@ -280,6 +290,7 @@ class Crypto(ModuleBase):
                 if init_key is not None and init_key != '' and init_key != 'IA==':
                     self.insert_one(
                         table_name='crypto',
+                        package=package,
                         hashcode=hashcode,
                         algorithm=algorithm,
                         init_key=init_key,
@@ -287,15 +298,17 @@ class Crypto(ModuleBase):
                 else:
                     self.insert_one(
                         table_name='crypto',
+                        package=package,
                         hashcode=hashcode,
                         algorithm=algorithm,
                         status='open')
 
-        def insert_crypto_key(self, key, key_class, salt=None,
+        def insert_crypto_key(self, package, key, key_class, salt=None,
                               iteration_count=0, module="<unknown>", additional_data=dict):
             if key is not None and key != '' and key != 'IA==':
                 self.insert_ignore_one(
                     table_name='crypto_key',
+                    package=package,
                     key=key,
                     printable_key=self.get_printable(key),
                     key_class=key_class,
@@ -309,13 +322,16 @@ class Crypto(ModuleBase):
 
     def __init__(self):
         super().__init__('Crypto', 'Hook cryptography/hashing functions')
+        self._package = None
         self._crypto_db = None
+        self._suppress_messages = False
         self.mod_path = str(Path(__file__).resolve().parent)
 
     def start_module(self, **kwargs) -> bool:
         if 'db_path' not in kwargs:
             raise Exception("parameter db_path not found")
 
+        self._package = kwargs['package']
         self._crypto_db = Crypto.CryptoDB(db_name=kwargs['db_path'])
         return True
 
@@ -324,6 +340,9 @@ class Crypto(ModuleBase):
             os.path.join(self.mod_path, "crypto.js")
         ]
 
+    def suppress_messages(self):
+        self._suppress_messages = True
+
     def key_value_event(self,
                         script_location: ScriptLocation = None,
                         stack_trace: str = None,
@@ -347,6 +366,7 @@ class Crypto(ModuleBase):
                 iteration_count = received_data.get('iteration_count', None)
 
             self._crypto_db.insert_crypto_key(
+                package=self._package,
                 key=key,
                 key_class=key_class,
                 salt=salt,
@@ -361,11 +381,13 @@ class Crypto(ModuleBase):
             hashcode = received_data.get('hashcode', None)
             key_class = received_data.get('classtype', "SecretKeySpec")
             self._crypto_db.insert_crypto(
+                package=self._package,
                 hashcode=hashcode,
                 algorithm=algorithm,
                 init_key=key)
 
             self._crypto_db.insert_crypto_key(
+                package=self._package,
                 key=key,
                 key_class=key_class,
                 module=module,
@@ -375,10 +397,24 @@ class Crypto(ModuleBase):
         elif module == "IvParameterSpec.init":
             bData = received_data.get('iv_key', None)
             key_class = received_data.get('classtype', "IvParameterSpec")
-            # print("IV: %s" % bData)
+
+            offset = received_data.get('offset', None)
+            length = received_data.get('length', None)
+            if offset is not None and length is not None:
+                try:
+                    offset = int(offset)
+                    length = int(length)
+                    if isinstance(bData, str):
+                        bData = base64.b64decode(bData)
+                        if offset + length <= len(bData):
+                            bData = base64.b64encode(bData[offset:offset+length]).decode("UTF-8")
+                except:
+                    pass
+
             self._crypto_db.update_crypto(iv=bData)
 
             self._crypto_db.insert_crypto_key(
+                package=self._package,
                 key=bData,
                 key_class=key_class,
                 module=module,
@@ -393,12 +429,14 @@ class Crypto(ModuleBase):
             algorithm = received_data.get('algorithm', None)
 
             self._crypto_db.insert_crypto(
+                package=self._package,
                 hashcode=hashcode,
                 algorithm=algorithm,
                 init_key=key
             )
 
             self._crypto_db.update_crypto(
+                package=self._package,
                 hashcode=hashcode,
                 flow='enc' if 'encrypt' in opmode else ('dec' if 'decrypt' in opmode else str(opmode)),
                 key=key,
@@ -406,28 +444,32 @@ class Crypto(ModuleBase):
             )
 
             self._crypto_db.insert_crypto_key(
+                package=self._package,
                 key=key,
                 key_class=key_class,
                 module=module,
                 additional_data=received_data
             )
 
-            Logger.print_message(
-                level="W",
-                message=f"Cipher init received\nHashcode: {hashcode}\nOpmode: {opmode}\nKeytype: {key_class}",
-                script_location=script_location
-            )
+            if not self._suppress_messages:
+                Logger.print_message(
+                    level="W",
+                    message=f"Cipher init received\nHashcode: {hashcode}\nOpmode: {opmode}\nKeytype: {key_class}",
+                    script_location=script_location
+                )
 
         elif module == "cipher.doFinal":
             hashcode = received_data.get('hashcode', None)
 
             self._crypto_db.insert_crypto(
+                package=self._package,
                 hashcode=hashcode,
                 algorithm=None,
                 init_key=None
             )
 
             self._crypto_db.update_crypto(
+                package=self._package,
                 hashcode=hashcode,
                 before_final=received_data.get('input', ''),
                 after_final=received_data.get('output', ''),
@@ -435,24 +477,25 @@ class Crypto(ModuleBase):
                 status="complete"
             )
 
-            Logger.print_message(
-                level="D",
-                message=f"Cipher doFinal received\n{stack_trace}",
-                script_location=script_location
-            )
+            if not self._suppress_messages:
+                Logger.print_message(
+                    level="D",
+                    message=f"Cipher doFinal received\n{stack_trace}",
+                    script_location=script_location
+                )
 
         elif module == "messageDigest.update":
             hashcode = received_data.get('hashcode', None)
             algorithm = received_data.get('algorithm', None)
             bInput = received_data.get('input', None)
-            self._crypto_db.insert_digest(hashcode, algorithm, bInput, None, stack_trace=stack_trace)
+            self._crypto_db.insert_digest(self._package, hashcode, algorithm, bInput, None, stack_trace=stack_trace)
 
         elif module == "messageDigest.digest":
             hashcode = received_data.get('hashcode', None)
             algorithm = received_data.get('algorithm', None)
             bInput = received_data.get('input', None)  # Se não existir teve um messageDigest.update antes
             bOutput = received_data.get('output', None)
-            self._crypto_db.insert_digest(hashcode, algorithm, bInput, bOutput, stack_trace=stack_trace)
+            self._crypto_db.insert_digest(self._package, hashcode, algorithm, bInput, bOutput, stack_trace=stack_trace)
 
             hash_hex = ""
             if bOutput is not None:
@@ -465,12 +508,13 @@ class Crypto(ModuleBase):
                     pass
 
             # Do not print TLS certificate verification hash
-            if 'com.android.org.conscrypt.ConscryptEngine.verifyCertificateChain' not in stack_trace:
-                Logger.print_message(
-                    level="D",
-                    message=f"Message digest\nAlgorithm: {algorithm}\nHash: {hash_hex}\n{stack_trace}",
-                    script_location=script_location
-                )
+            if not self._suppress_messages:
+                if 'com.android.org.conscrypt.ConscryptEngine.verifyCertificateChain' not in stack_trace:
+                    Logger.print_message(
+                        level="D",
+                        message=f"Message digest\nAlgorithm: {algorithm}\nHash: {hash_hex}\n{stack_trace}",
+                        script_location=script_location
+                    )
 
         return True
 

{frida_fusion-0.1.11 → frida_fusion-0.1.13}/frida_fusion.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: frida-fusion
-Version: 0.1.11
+Version: 0.1.13
 Summary: Hook your mobile tests with Frida
 Author-email: "Helvio Junior (M4v3r1ck)" <helvio_junior@hotmail.com>
 Maintainer-email: "Helvio Junior (M4v3r1ck)" <helvio_junior@hotmail.com>