frida-fusion 0.1.9__tar.gz → 0.1.11__tar.gz

{frida_fusion-0.1.9 → frida_fusion-0.1.11}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: frida-fusion
-Version: 0.1.9
+Version: 0.1.11
 Summary: Hook your mobile tests with Frida
 Author-email: "Helvio Junior (M4v3r1ck)" <helvio_junior@hotmail.com>
 Maintainer-email: "Helvio Junior (M4v3r1ck)" <helvio_junior@hotmail.com>

{frida_fusion-0.1.9 → frida_fusion-0.1.11}/frida_fusion/__meta__.py

@@ -1,8 +1,8 @@
-__version__ = '0.1.9'
+__version__ = '0.1.11'
 __title__ = "Frida Fusion"
 __description__ = "📱 frida-fusion - runtime mobile exploration"
 __url__ = "https://github.com/helviojunior/frida-fusion"
-__build__ = 0x2c0d061
+__build__ = 0xc8879a3
 __author__ = "Helvio Junior (M4v3r1ck)"
 __author_email__ = "helvio_junior@hotmail.com"
 __license__ = "GPL-3.0"

{frida_fusion-0.1.9 → frida_fusion-0.1.11}/frida_fusion/fusion.py

@@ -194,9 +194,29 @@ class Fusion(object):
             s.on("message", self.make_handler("fusion_bundle.js"))  # register the message handler
             s.load()
         except Exception as e:
-            Logger.pl('{!} {R}Error:{O} %s{W}' % str(e))
-            print("")
-            sys.exit(1)
+
+            try:
+                err = str(e)
+                pattern = re.compile(r'script\(line (\d+)\):')
+                matches = [
+                    (
+                        m.group(0),
+                        self.translate_location(dict(
+                            file_name="fusion_bundle.js",
+                            line=m.group(1),
+                        ))
+                    )
+                    for m in pattern.finditer(err)
+                ]
+                for m in matches:
+                    err = err.replace(m[0], f"{m[1].file_name}(line {m[1].line})")
+                Logger.pl('{!} {R}Error:{O} %s{W}' % err)
+                print("")
+                sys.exit(1)
+            except Exception:
+                Logger.pl('{!} {R}Error:{O} %s{W}' % str(e))
+                print("")
+                sys.exit(1)
 
     def attach(self, pid: int):
         self.running = True

{frida_fusion-0.1.9 → frida_fusion-0.1.11}/frida_fusion/libs/database.py

@@ -81,6 +81,17 @@ class Database(object):
         conn.execute(sql, values)
         conn.commit()
 
+    @connect
+    def insert_if_not_exists(self, conn: Connection, table_name, **kwargs):
+        table_name = self.scrub(table_name)
+
+        if self.select_count(table_name=table_name, **kwargs) == 0:
+            (columns, values) = self.parse_args(kwargs)
+            sql = "INSERT INTO {} ({}) VALUES ({})" \
+                .format(table_name, ','.join(columns), ', '.join(['?'] * len(columns)))
+            conn.execute(sql, values)
+            conn.commit()
+
     @connect
     def insert_ignore_one(self, conn: Connection, table_name, **kwargs):
         table_name = self.scrub(table_name)

{frida_fusion-0.1.9 → frida_fusion-0.1.11}/frida_fusion/libs/helpers.js

@@ -214,6 +214,35 @@ function fusion_printMethods(targetClass)
   });
 }
 
+function fusion_getClassName(obj)
+{
+  if (obj === null || obj === undefined) return "";
+
+  try {
+        // Caso seja um objeto Java real
+        if (obj.$className !== undefined) {
+            // Objetos instanciados via Java.use
+            return obj.$className;
+        }
+
+        // Caso seja uma instância Java (não necessariamente via Java.use)
+        if (Java.isJavaObject(obj)) {
+            return obj.getClass().getName();
+        }
+
+        // Caso seja uma classe Java carregada (Java.use)
+        if (Java.isJavaClass(obj)) {
+            return obj.class.getName();
+        }
+
+        // Se for algo não Java, apenas retorna tipo do JS
+        return typeof obj;
+    } catch (err) {
+        fusion_sendMessage("W", err);
+        return '';
+    }
+
+}
 
 Java.perform(function () {
   const Thread = Java.use('java.lang.Thread');

{frida_fusion-0.1.9 → frida_fusion-0.1.11}/frida_fusion/libs/logger.py

@@ -41,7 +41,7 @@ class Logger(object):
         if Logger.out_file != '':
             try:
                 with open(Logger.out_file, "a") as text_file:
-                    text_file.write(Color.sc(text) + '\n')
+                    text_file.write(Color.escape_ansi(Color.sc(text)) + '\n')
             except:
                 pass
 

frida_fusion-0.1.11/frida_fusion/modules/android_setings/settings.js

@@ -0,0 +1,172 @@
+/*
+Documentation
+https://developer.android.com/reference/android/provider/Settings
+
+*/
+
+const SET_MODULES = {
+    Global: true,
+    Secure: true,
+    System: true,
+};
+
+setTimeout(function() {
+    Java.perform(function() {
+
+        // Bypass Settings
+        var androidSettings = [
+            ['adb_enabled', 0],
+            ['development_settings_enabled', 0],
+            ['play_protect_enabled', 1],
+            ['adb_enabled', 0]
+        ];
+
+        function settings_bypassValue(name, originalValue) {
+            androidSettings.forEach(function(item) {
+                let name = item[0];
+                let value = item[1];
+
+                if (name === name) {
+                    fusion_sendMessage('D', `Bypassing ${name}`)
+                    return value;
+                }
+            });
+            return originalValue;
+        }
+
+        if (SET_MODULES.System) {
+
+            fusion_sendMessage('D', "Module attached: android.provider.Settings.System");
+            const settingsSystem = Java.use("android.provider.Settings$System");
+
+            settingsSystem.getString.overload('android.content.ContentResolver', 'java.lang.String').implementation = function (cr, name) {
+                var data = this.getString.overload('android.content.ContentResolver', 'java.lang.String').call(this, cr, name);
+                fusion_sendKeyValueData("Settings$System.getString", [
+                    {key: "Name", value: name},
+                    {key: "Result", value: data}
+                ]);
+                return data
+            };
+
+            settingsSystem.putString.overload('android.content.ContentResolver', 'java.lang.String', 'java.lang.String').implementation = function (cr, name, value) {
+                fusion_sendKeyValueData("Settings$System.putString", [
+                    {key: "Name", value: name},
+                    {key: "Value", value: value}
+                ]);
+                return this.putString.overload('android.content.ContentResolver', 'java.lang.String', 'java.lang.String').call(this, cr, name, value);
+            };
+
+            settingsSystem.getUriFor.overload('java.lang.String').implementation = function (name) {
+                var data = this.getUriFor.overload('java.lang.String').call(this, name);
+                fusion_sendKeyValueData("Settings$System.getUriFor", [
+                    {key: "Name", value: name},
+                    {key: "Result", value: data}
+                ]);
+                return data
+            };
+
+            settingsSystem.getInt.overload('android.content.ContentResolver', 'java.lang.String', 'int').implementation = function(cr, name, flag) {
+                var data = this.getInt.overload('android.content.ContentResolver', 'java.lang.String', 'int').call(this, cr, name, flag);
+                fusion_sendKeyValueData("Settings$System.getInt", [
+                    {key: "Name", value: name},
+                    {key: "Flag", value: flag},
+                    {key: "Result", value: data}
+                ]);
+
+                return settings_bypassValue(name, data);
+            }
+
+            settingsSystem.getInt.overload('android.content.ContentResolver', 'java.lang.String').implementation = function(cr, name) {
+                var data = this.getInt.overload('android.content.ContentResolver', 'java.lang.String').call(this, cr, name);
+                fusion_sendKeyValueData("Settings$System.getInt", [
+                    {key: "Name", value: name},
+                    {key: "Result", value: data}
+                ]);
+                return settings_bypassValue(name, data);
+            }
+
+        }
+
+        if (SET_MODULES.Secure) {
+
+            fusion_sendMessage('D', "Module attached: android.provider.Settings.Secure");
+            const settingsSecure = Java.use("android.provider.Settings$Secure");
+
+            settingsSecure.getString.overload('android.content.ContentResolver', 'java.lang.String').implementation = function (cr, name) {
+                var data = this.getString.overload('android.content.ContentResolver', 'java.lang.String').call(this, cr, name);
+                fusion_sendKeyValueData("Settings$Secure.getString", [
+                    {key: "Name", value: name},
+                    {key: "Result", value: data}
+                ]);
+                return data
+            };
+
+            settingsSecure.putString.overload('android.content.ContentResolver', 'java.lang.String', 'java.lang.String').implementation = function (cr, name, value) {
+                fusion_sendKeyValueData("Settings$Secure.putString", [
+                    {key: "Name", value: name},
+                    {key: "Value", value: value}
+                ]);
+                return this.putString.overload('android.content.ContentResolver', 'java.lang.String', 'java.lang.String').call(this, cr, name, value);
+            };
+
+            settingsSecure.getUriFor.overload('java.lang.String').implementation = function (name) {
+                var data = this.getUriFor.overload('java.lang.String').call(this, name);
+                fusion_sendKeyValueData("Settings$Secure.getUriFor", [
+                    {key: "Name", value: name},
+                    {key: "Result", value: data}
+                ]);
+                return data
+            };
+
+            settingsSecure.getInt.overload('android.content.ContentResolver', 'java.lang.String', 'int').implementation = function(cr, name, flag) {
+                var data = this.getInt.overload('android.content.ContentResolver', 'java.lang.String', 'int').call(this, cr, name, flag);
+                fusion_sendKeyValueData("Settings$Secure.getInt", [
+                    {key: "Name", value: name},
+                    {key: "Flag", value: flag},
+                    {key: "Result", value: data}
+                ]);
+
+                return settings_bypassValue(name, data);
+            }
+
+            settingsSecure.getInt.overload('android.content.ContentResolver', 'java.lang.String').implementation = function(cr, name) {
+                var data = this.getInt.overload('android.content.ContentResolver', 'java.lang.String').call(this, cr, name);
+                fusion_sendKeyValueData("Settings$Secure.getInt", [
+                    {key: "Name", value: name},
+                    {key: "Result", value: data}
+                ]);
+                return settings_bypassValue(name, data);
+            }
+
+        }
+
+        if (SET_MODULES.Global) {
+
+            fusion_sendMessage('D', "Module attached: android.provider.Settings.Global");
+            const settingGlobal = Java.use('android.provider.Settings$Global');
+
+            settingGlobal.getInt.overload('android.content.ContentResolver', 'java.lang.String', 'int').implementation = function(cr, name, flag) {
+                var data = this.getInt.overload('android.content.ContentResolver', 'java.lang.String', 'int').call(this, cr, name, flag);
+                fusion_sendKeyValueData("Settings$Global.getInt", [
+                    {key: "Name", value: name},
+                    {key: "Flag", value: flag},
+                    {key: "Result", value: data}
+                ]);
+                return settings_bypassValue(name, data);
+            }
+
+            settingGlobal.getInt.overload('android.content.ContentResolver', 'java.lang.String').implementation = function(cr, name) {
+                var data = this.getInt.overload('android.content.ContentResolver', 'java.lang.String').call(this, cr, name);
+                fusion_sendKeyValueData("Settings$Global.getInt", [
+                    {key: "Name", value: name},
+                    {key: "Result", value: data}
+                ]);
+                return settings_bypassValue(name, data);
+            }
+
+        }
+
+        fusion_sendMessage("W", "Android Settings hook module have been successfully initialized.")
+    });
+    
+}, 0);

frida_fusion-0.1.11/frida_fusion/modules/android_setings/settings.py

@@ -0,0 +1,106 @@
+import json
+import os.path
+from pathlib import Path
+import base64
+import string
+
+from frida_fusion.libs.logger import Logger
+from frida_fusion.libs.database import Database
+from frida_fusion.libs.scriptlocation import ScriptLocation
+from frida_fusion.module import ModuleBase
+
+
+class Settings(ModuleBase):
+    class SettingsDB(Database):
+        dbName = ""
+
+        def __init__(self, db_name: str):
+            super().__init__(
+                auto_create=True,
+                db_name=db_name
+            )
+            self.create_db()
+
+        def create_db(self):
+            super().create_db()
+            conn = self.connect_to_db(check=False)
+
+            # definindo um cursor
+            cursor = conn.cursor()
+
+            # criando a tabela (schema)
+            cursor.execute("""
+                CREATE TABLE IF NOT EXISTS [android_settings] (
+                    id INTEGER PRIMARY KEY AUTOINCREMENT,
+                    module TEXT NULL,
+                    name TEXT NULL,
+                    flag INTEGER NULL DEFAULT (0),
+                    data TEXT NULL,
+                    created_date datetime not null DEFAULT (datetime('now','localtime')),
+                    UNIQUE (module, name, flag, data)
+                );
+            """)
+
+            conn.commit()
+
+            # Must get the constraints
+            self.get_constraints(conn)
+
+    def __init__(self):
+        super().__init__('Settings', 'Hook Android Settings functions')
+        self._settings_db = None
+        self.mod_path = str(Path(__file__).resolve().parent)
+
+    def start_module(self, **kwargs) -> bool:
+        if 'db_path' not in kwargs:
+            raise Exception("parameter db_path not found")
+
+        self._settings_db = Settings.SettingsDB(db_name=kwargs['db_path'])
+        return True
+
+    def js_files(self) -> list:
+        return [
+            os.path.join(self.mod_path, "settings.js")
+        ]
+
+    def key_value_event(self,
+                        script_location: ScriptLocation = None,
+                        stack_trace: str = None,
+                        module: str = None,
+                        received_data: dict = None
+                        ) -> bool:
+
+        if module in ["Settings$Secure.getString",
+                      "Settings$Secure.putString",
+                      "Settings$Secure.getUriFor",
+                      "Settings$Secure.getInt",
+                      "Settings$System.getString",
+                      "Settings$System.putString",
+                      "Settings$System.getUriFor",
+                      "Settings$System.getInt",
+                      "Settings$Global.getInt"
+                      ]:
+            name = received_data.get('name', None)
+            flag = received_data.get('flag', 0)
+            value = received_data.get('value', None)
+            result = received_data.get('result', value)
+
+            self._settings_db.insert_ignore_one(
+                table_name='android_settings',
+                module=module,
+                name=name,
+                flag=flag,
+                data=result
+            )
+
+        return True
+
+    def data_event(self,
+                   script_location: ScriptLocation = None,
+                   stack_trace: str = None,
+                   received_data: str = None
+                   ) -> bool:
+        #Nothing by now
+        return True
+
+

{frida_fusion-0.1.9 → frida_fusion-0.1.11}/frida_fusion/modules/crypto/crypto.js

@@ -1,5 +1,5 @@
 
-const MODULES = {
+const CRYPTO_MODULES = {
     KeyGenerator: true,
     KeyPairGenerator: true,
     SecretKeySpec: true,
@@ -20,7 +20,7 @@ setTimeout(function() {
 
         const System = Java.use("java.lang.System");
 
-        if (MODULES.KeyGenerator) {
+        if (CRYPTO_MODULES.KeyGenerator) {
             fusion_sendMessage('*', "Module attached: javax.crypto.KeyGenerator");
             const keyGenerator = Java.use("javax.crypto.KeyGenerator");
 
@@ -54,7 +54,7 @@ setTimeout(function() {
 
         }
 
-        if (MODULES.KeyPairGenerator) {
+        if (CRYPTO_MODULES.KeyPairGenerator) {
             fusion_sendMessage('*', "Module attached: java.security.KeyPairGenerator");
             const keyPairGenerator = Java.use("java.security.KeyPairGenerator");
             keyPairGenerator.getInstance.overload("java.lang.String").implementation = function (arg0) {
@@ -81,20 +81,21 @@ setTimeout(function() {
             };
         }
 
-        if (MODULES.SecretKeySpec) {
+        if (CRYPTO_MODULES.SecretKeySpec) {
             fusion_sendMessage('*', "Module attached: javax.crypto.spec.SecretKeySpec");
             const secretKeySpec = Java.use("javax.crypto.spec.SecretKeySpec");
             secretKeySpec.$init.overload("[B", "java.lang.String").implementation = function (key, cipher) {
                 const keyBase64 = fusion_bytesToBase64(key);
-                fusion_sendKeyValueData("secretKeySpec.init", [
+                fusion_sendKeyValueData("SecretKeySpec.init", [
                     {key: "Key", value: keyBase64},
-                    {key: "Algorithm", value: cipher}
+                    {key: "Algorithm", value: cipher},
+                    {key: "ClassType", value: fusion_getClassName(this)}
                 ]);
                 return secretKeySpec.$init.overload("[B", "java.lang.String").call(this, key, cipher);
             }
         }
 
-        if (MODULES.MessageDigest) {
+        if (CRYPTO_MODULES.MessageDigest) {
             fusion_sendMessage('*', "Module attached: java.security.MessageDigest");
             const messageDigest = Java.use("java.security.MessageDigest");
             messageDigest.getInstance.overload("java.lang.String").implementation = function (arg0) {
@@ -141,42 +142,20 @@ setTimeout(function() {
                 return output;
             };
 
-            /*
-            messageDigest.digest.overload("[B").implementation = function (input) {
-                const inputBase64 = fusion_bytesToBase64(input);
-                fusion_sendKeyValueData("messageDigest.digest", [
-                    {key: "Input", value: inputBase64},
-                    {key: "Algorithm", value: this.getAlgorithm()}
-                ]);
-                return this.digest.overload("[B").call(this, input);
-            };
-
-            messageDigest.digest.overload("[B", "int", "int").implementation = function (input, offset, len) {
-                const inputBase64 = fusion_bytesToBase64(input);
-                fusion_sendKeyValueData("messageDigest.digest", [
-                    {key: "Input", value: inputBase64},
-                    {key: "Algorithm", value: this.getAlgorithm()},
-                    {key: "Offset", value: offset},
-                    {key: "Length", value: len}
-                ]);
-                return this.digest.overload("[B", "int", "int").call(this, input, offset, len);
-            };*/
-             
-
         }
 
-        if (MODULES.SecretKeyFactory) {
+        if (CRYPTO_MODULES.SecretKeyFactory) {
             fusion_sendMessage('*', "Module attached: javax.crypto.SecretKeyFactory");
             const secretKeyFactory = Java.use("javax.crypto.SecretKeyFactory");
             secretKeyFactory.getInstance.overload("java.lang.String").implementation = function (arg0) {
-                fusion_sendKeyValueData("secretKeyFactory.getInstance", [
+                fusion_sendKeyValueData("SecretKeyFactory.getInstance", [
                     {key: "Algorithm", value: arg0}
                 ]);
                 return this.getInstance(arg0);
             };
 
             secretKeyFactory.getInstance.overload("java.lang.String", "java.lang.String").implementation = function (arg0, arg1) {
-                fusion_sendKeyValueData("secretKeyFactory.getInstance", [
+                fusion_sendKeyValueData("SecretKeyFactory.getInstance", [
                     {key: "Algorithm", value: arg0},
                     {key: "Provider", value: arg1}
                 ]);
@@ -184,7 +163,7 @@ setTimeout(function() {
             };
 
             secretKeyFactory.getInstance.overload("java.lang.String", "java.security.Provider").implementation = function (arg0, arg1) {
-                fusion_sendKeyValueData("secretKeyFactory.getInstance", [
+                fusion_sendKeyValueData("SecretKeyFactory.getInstance", [
                     {key: "Algorithm", value: arg0},
                     {key: "Provider", value: arg1}
                 ]);
@@ -192,7 +171,7 @@ setTimeout(function() {
             };
         }
 
-        if (MODULES.Signature) {
+        if (CRYPTO_MODULES.Signature) {
             fusion_sendMessage('*', "Module attached: java.security.Signature");
             const signature = Java.use("java.security.Signature");
             signature.getInstance.overload("java.lang.String").implementation = function (arg0) {
@@ -219,7 +198,7 @@ setTimeout(function() {
             };
         }
 
-        if (MODULES.Cipher) {
+        if (CRYPTO_MODULES.Cipher) {
             fusion_sendMessage('*', "Module attached: javax.crypto.Cipher");
             var iv_parameter_spec = Java.use("javax.crypto.spec.IvParameterSpec");
             var pbe_parameter_spec = Java.use("javax.crypto.spec.PBEParameterSpec");
@@ -229,6 +208,7 @@ setTimeout(function() {
                 fusion_sendKeyValueData("cipher.init", [
                     {key: "HashCode", value: this.hashCode().toString()},
                     {key: "Key", value: fusion_keyToBase64(key)},
+                    {key: "KeyType", value: fusion_getClassName(key)},
                     {key: "Opmode", value: this.getOpmodeString(opmode)},
                     {key: "Algorithm", value: this.getAlgorithm()}
                 ]);
@@ -238,7 +218,9 @@ setTimeout(function() {
             cipher.init.overload("int", "java.security.cert.Certificate").implementation = function (opmode, certificate) {
                 fusion_sendKeyValueData("cipher.init", [
                     {key: "HashCode", value: this.hashCode().toString()},
+                    {key: "Key", value: fusion_keyToBase64(certificate)},
                     {key: "Certificate", value: fusion_keyToBase64(certificate)},
+                    {key: "KeyType", value: fusion_getClassName(certificate)},
                     {key: "Opmode", value: this.getOpmodeString(opmode)},
                     {key: "Algorithm", value: this.getAlgorithm()}
                 ]);
@@ -249,6 +231,7 @@ setTimeout(function() {
                 fusion_sendKeyValueData("cipher.init", [
                     {key: "HashCode", value: this.hashCode().toString()},
                     {key: "Key", value: fusion_keyToBase64(key)},
+                    {key: "KeyType", value: fusion_getClassName(key)},
                     {key: "Opmode", value: this.getOpmodeString(opmode)},
                     {key: "Algorithm", value: this.getAlgorithm()}
                 ]);
@@ -261,6 +244,7 @@ setTimeout(function() {
                     var data = [
                         {key: "HashCode", value: this.hashCode().toString()},
                         {key: "Key", value: fusion_keyToBase64(key)},
+                        {key: "KeyType", value: fusion_getClassName(key)},
                         {key: "Opmode", value: this.getOpmodeString(opmode)},
                         {key: "Algorithm", value: this.getAlgorithm()}
                     ];
@@ -381,7 +365,7 @@ setTimeout(function() {
         }
 
 
-        if (MODULES.Mac) {
+        if (CRYPTO_MODULES.Mac) {
             fusion_sendMessage('*', "Module attached: javax.crypto.Mac");
             const mac = Java.use("javax.crypto.Mac");
             mac.getInstance.overload("java.lang.String").implementation = function (arg0) {
@@ -408,7 +392,7 @@ setTimeout(function() {
             };
         }
 
-        if (MODULES.KeyGenParameterSpec) {
+        if (CRYPTO_MODULES.KeyGenParameterSpec) {
             fusion_sendMessage('*', "Module attached: android.security.keystore.KeyGenParameterSpec$Builder");
             const useKeyGen = Java.use("android.security.keystore.KeyGenParameterSpec$Builder");
             useKeyGen.$init.overload("java.lang.String", "int").implementation = function (keyStoreAlias, purpose) {
@@ -482,12 +466,13 @@ setTimeout(function() {
             }
         }
 
-        if (MODULES.IvParameterSpec) {
+        if (CRYPTO_MODULES.IvParameterSpec) {
             fusion_sendMessage('*', "Module attached: javax.crypto.spec.IvParameterSpec");
             const ivParameter = Java.use("javax.crypto.spec.IvParameterSpec");
             ivParameter.$init.overload("[B").implementation = function (ivKey) {
                 fusion_sendKeyValueData("IvParameterSpec.init", [
-                    {key: "IV_Key", value: fusion_bytesToBase64(ivKey)}
+                    {key: "IV_Key", value: fusion_bytesToBase64(ivKey)},
+                    {key: "ClassType", value: fusion_getClassName(this)}
                 ]);
                 return this.$init.overload("[B").call(this, ivKey);
             }
@@ -496,19 +481,21 @@ setTimeout(function() {
                 fusion_sendKeyValueData("IvParameterSpec.init", [
                     {key: "IV Key", value: fusion_bytesToBase64(ivKey)},
                     {key: "Offset", value: offset},
-                    {key: "Length", value: len}
+                    {key: "Length", value: len},
+                    {key: "ClassType", value: fusion_getClassName(this)}
                 ]);
                 return this.$init.overload("[B", "int", "int").call(this, ivKey, offset, len);
             }
         }
 
-        if (MODULES.GCMParameterSpec) {
+        if (CRYPTO_MODULES.GCMParameterSpec) {
             fusion_sendMessage('*', "Module attached: javax.crypto.spec.GCMParameterSpec");
             const gcmParameter = Java.use("javax.crypto.spec.GCMParameterSpec");
             gcmParameter.$init.overload("int", "[B").implementation = function (tLen, ivKey) {
                 fusion_sendKeyValueData("GCMParameterSpec.init", [
                     {key: "IV_Key", value: fusion_bytesToBase64(ivKey)},
-                    {key: "Auth_Tag_Length", value: tLen.toString()}
+                    {key: "Auth_Tag_Length", value: tLen.toString()},
+                    {key: "ClassType", value: fusion_getClassName(this)}
                 ]);
                 return this.$init.overload("int", "[B").call(this, tLen, ivKey);
             }
@@ -518,19 +505,21 @@ setTimeout(function() {
                     {key: "IV_Key", value: fusion_bytesToBase64(ivKey)},
                     {key: "Auth_Tag_Length", value: tLen.toString()},
                     {key: "Offset", value: offset},
-                    {key: "Length", value: len}
+                    {key: "Length", value: len},
+                    {key: "ClassType", value: fusion_getClassName(this)}
                 ]);
                 return this.$init.overload("int", "[B", "int", "int").call(this, tLen, ivKey, offset, len);
             }
         }
 
-        if (MODULES.PBEParameterSpec) {
+        if (CRYPTO_MODULES.PBEParameterSpec) {
             fusion_sendMessage('*', "Module attached: javax.crypto.spec.PBEParameterSpec");
             const pbeParameter = Java.use("javax.crypto.spec.PBEParameterSpec");
             pbeParameter.$init.overload("[B", "int").implementation = function (salt, iterationCount) {
                 fusion_sendKeyValueData("PBEParameterSpec.init", [
                     {key: "PBE_Salt", value: fusion_bytesToBase64(salt)},
-                    {key: "Iteration_Count", value: iterationCount.toString()}
+                    {key: "Iteration_Count", value: iterationCount.toString()},
+                    {key: "ClassType", value: fusion_getClassName(this)},
                 ]);
                 return this.$init.overload("[B", "int").call(this, salt, iterationCount);
             }
@@ -539,7 +528,8 @@ setTimeout(function() {
                 
                 var data = [
                     {key: "PBE_Salt", value: fusion_bytesToBase64(salt)},
-                    {key: "Iteration_Count", value: iterationCount.toString()}
+                    {key: "Iteration_Count", value: iterationCount.toString()},
+                    {key: "ClassType", value: fusion_getClassName(this)}
                     
                 ]
 
@@ -547,6 +537,7 @@ setTimeout(function() {
                     data = data.concat([
                         {key: "Algorithm", value: paramSpec.getAlgorithm()},
                         {key: "ParamSpec", value: fusion_keyToBase64(paramSpec)},
+                        {key: "ParamSpecType", value: fusion_getClassName(paramSpec)},
                         {key: "Provider", value: paramSpec.getProvider()}
                     ]);
                 } catch (err) { }
@@ -556,12 +547,14 @@ setTimeout(function() {
             }
         }
 
-        if (MODULES.X509EncodedKeySpec) {
+        if (CRYPTO_MODULES.X509EncodedKeySpec) {
             fusion_sendMessage('*', "Module attached: java.security.spec.X509EncodedKeySpec");
             const x509EncodedKeySpec = Java.use("java.security.spec.X509EncodedKeySpec");
             x509EncodedKeySpec.$init.overload("[B").implementation = function (encodedKey) {
                 fusion_sendKeyValueData("X509EncodedKeySpec.init", [
-                    {key: "Key", value: fusion_bytesToBase64(encodedKey)}
+                    {key: "Key", value: fusion_bytesToBase64(encodedKey)},
+                    {key: "ClassType", value: fusion_getClassName(this)}
+
                 ]);
                 return this.$init.overload("[B").call(this, encodedKey);
             }

{frida_fusion-0.1.9 → frida_fusion-0.1.11}/frida_fusion/modules/crypto/crypto.py

@@ -1,3 +1,4 @@
+import json
 import os.path
 from pathlib import Path
 import base64
@@ -31,10 +32,10 @@ class Crypto(ModuleBase):
             cursor.execute("""
                 CREATE TABLE IF NOT EXISTS [crypto] (
                     id INTEGER PRIMARY KEY AUTOINCREMENT,
-                    algorithm TEXT NOT NULL,
-                    init_key TEXT NOT NULL,
+                    hashcode TEXT NOT NULL,
+                    algorithm TEXT NULL,
+                    init_key TEXT NULL,
                     iv TEXT NULL,
-                    hashcode TEXT NULL,
                     flow TEXT NULL,
                     key TEXT NULL,
                     clear_text TEXT NULL,
@@ -48,6 +49,22 @@ class Crypto(ModuleBase):
 
             conn.commit()
 
+            cursor.execute("""
+                CREATE TABLE IF NOT EXISTS [crypto_key] (
+                    id INTEGER PRIMARY KEY AUTOINCREMENT,
+                    key TEXT NULL,
+                    printable_key TEXT NULL,
+                    salt TEXT NULL,
+                    iteration_count INTEGER NULL DEFAULT (0),
+                    key_class TEXT NULL DEFAULT ('<unknown>'),
+                    additional_data TEXT NULL,
+                    created_date datetime not null DEFAULT (datetime('now','localtime')),
+                    UNIQUE (key, key_class)
+                );
+            """)
+
+            conn.commit()
+
             cursor.execute("""
                 CREATE TABLE IF NOT EXISTS [digest] (
                     id INTEGER PRIMARY KEY AUTOINCREMENT,
@@ -80,7 +97,8 @@ class Crypto(ModuleBase):
                 return ''
 
         def update_crypto(self, iv=None, hashcode=None, flow=None, key=None, before_final=None,
-                          after_final=None, stack_trace=None, id=None):
+                          after_final=None, stack_trace=None, id=None, algorithm=None,
+                          status=None):
 
             conn = self.connect_to_db(check=False)
             cursor = conn.cursor()
@@ -116,6 +134,11 @@ class Crypto(ModuleBase):
                     update += " hashcode = ?,"
                     data.append(hashcode)
 
+                if flow is not None:
+                    integrity = True
+                    update += " algorithm = ?,"
+                    data.append(algorithm)
+
                 if flow is not None:
                     integrity = True
                     update += " flow = ?,"
@@ -136,6 +159,11 @@ class Crypto(ModuleBase):
                     update += " stack_trace = ?,"
                     data.append(stack_trace)
 
+                if status is not None:
+                    integrity = True
+                    update += " status = ?,"
+                    data.append(status)
+
                 if before_final is not None:
                     integrity = True
                     if dbflow == "enc":
@@ -169,6 +197,16 @@ class Crypto(ModuleBase):
 
                     cursor.execute(update, data)
 
+                    cursor = conn.cursor()
+                    cursor.execute("""
+                    delete from [crypto]
+                    where algorithm is null and init_key is null and key is null and clear_text is null
+                    and hashcode in (
+                        select hashcode from [crypto]
+                        where id = ?
+                    )
+                    """, (id,))
+
                     conn.commit()
 
                     # Color.pl('{+} {W}Crypto atualizada. {C}ID: {O}%s{W}' % id)
@@ -215,56 +253,59 @@ class Crypto(ModuleBase):
 
             # Color.pl('{+} {W}Inserindo crypto. {C}Algorithm: {O}%s{W}' % algorithm)
 
-        def insert_crypto(self, algorithm, init_key):
-
-            conn = self.connect_to_db(check=False)
-
-            cursor = conn.cursor()
-            cursor.execute("""
-            update [crypto] set status = 'incomplete' where status = 'open';
-            """)
-
-            cursor = conn.cursor()
-            cursor.execute("""
-            insert into [crypto] ([algorithm], [init_key])
-            VALUES (?,?);
-            """, (algorithm, init_key,))
-
-            conn.commit()
-
-            conn.close()
-
-            # Color.pl('{+} {W}Inserindo crypto. {C}Algorithm: {O}%s{W}' % algorithm)
-
-        def insert_crypto2(self, algorithm, key, iv, clear_text, cipher_data, flow='enc'):
-
-            conn = self.connect_to_db(check=False)
-
-            if isinstance(clear_text, bytes):
-                clear_text = clear_text.decode("UTF-8")
-
-            if isinstance(cipher_data, bytes):
-                cipher_data = cipher_data.decode("UTF-8")
-
-            if isinstance(key, bytes):
-                key = base64.b64encode(key).decode("UTF-8")
-
-            if isinstance(iv, bytes):
-                iv = base64.b64encode(iv).decode("UTF-8")
+        def insert_crypto(self, hashcode, algorithm, init_key):
 
-            clear_text_b64 = base64.b64encode(clear_text.encode("UTF-8")).decode("UTF-8")
+            if hashcode is None:
+                return
 
-            cursor = conn.cursor()
-            cursor.execute("""
-            insert into [crypto] ([flow], [algorithm], [init_key], [key], [iv], [clear_text], [clear_text_b64], [cipher_data], [status])
-            VALUES (?,?,?,?,?,?,?,?,?);
-            """, (flow, algorithm, key, key, iv, clear_text, clear_text_b64, cipher_data, 'complete',))
-
-            conn.commit()
-
-            conn.close()
-
-            # Color.pl('{+} {W}Inserindo crypto. {C}Algorithm: {O}%s{W}' % algorithm)
+            rows = self.select(
+                table_name='crypto',
+                hashcode=hashcode,
+                status='open'
+            )
+            if len(rows) == 0 or not any(iter([
+                True
+                for r in rows
+                if (
+                    (algorithm is not None and algorithm == r['algorithm'])
+                    or (r['algorithm'] is None or r['algorithm'].strip() == "")
+                ) and (
+                    (
+                        (init_key is not None and init_key != '' and init_key != 'IA==')
+                        and (init_key == r['init_key'] or init_key == r['key'])
+                    )
+                    or (r['init_key'] is None or r['init_key'].strip() == "")
+                )
+            ])):
+                if init_key is not None and init_key != '' and init_key != 'IA==':
+                    self.insert_one(
+                        table_name='crypto',
+                        hashcode=hashcode,
+                        algorithm=algorithm,
+                        init_key=init_key,
+                        status='open')
+                else:
+                    self.insert_one(
+                        table_name='crypto',
+                        hashcode=hashcode,
+                        algorithm=algorithm,
+                        status='open')
+
+        def insert_crypto_key(self, key, key_class, salt=None,
+                              iteration_count=0, module="<unknown>", additional_data=dict):
+            if key is not None and key != '' and key != 'IA==':
+                self.insert_ignore_one(
+                    table_name='crypto_key',
+                    key=key,
+                    printable_key=self.get_printable(key),
+                    key_class=key_class,
+                    salt=salt,
+                    iteration_count=iteration_count,
+                    additional_data=json.dumps({
+                        **{"module": module},
+                        **(additional_data if additional_data is not None and isinstance(additional_data, dict) else {})
+                    }, default=Logger.json_serial)
+                )
 
     def __init__(self):
         super().__init__('Crypto', 'Hook cryptography/hashing functions')
@@ -290,31 +331,109 @@ class Crypto(ModuleBase):
                         received_data: dict = None
                         ) -> bool:
 
-        if module == "secretKeySpec.init":
+        if module in ["X509EncodedKeySpec.init", "GCMParameterSpec.init", "PBEParameterSpec.init"]:
+
+            key_class = received_data.get('classtype', module)
+            salt = None
+            iteration_count = 0
+
+            key = received_data.get('key', None)
+            if module == "GCMParameterSpec.init":
+                key = received_data.get('iv_key', None)
+
+            if module == "PBEParameterSpec.init":
+                key = "None"
+                salt = received_data.get('pbe_salt', None)
+                iteration_count = received_data.get('iteration_count', None)
+
+            self._crypto_db.insert_crypto_key(
+                key=key,
+                key_class=key_class,
+                salt=salt,
+                iteration_count=iteration_count,
+                module=module,
+                additional_data=received_data
+            )
+
+        if module == "SecretKeySpec.init":
             algorithm = received_data.get('algorithm', None)
-            bData = received_data.get('key', None)
-            self._crypto_db.insert_crypto(algorithm, bData)
+            key = received_data.get('key', None)
+            hashcode = received_data.get('hashcode', None)
+            key_class = received_data.get('classtype', "SecretKeySpec")
+            self._crypto_db.insert_crypto(
+                hashcode=hashcode,
+                algorithm=algorithm,
+                init_key=key)
+
+            self._crypto_db.insert_crypto_key(
+                key=key,
+                key_class=key_class,
+                module=module,
+                additional_data=received_data
+            )
 
         elif module == "IvParameterSpec.init":
             bData = received_data.get('iv_key', None)
+            key_class = received_data.get('classtype', "IvParameterSpec")
             # print("IV: %s" % bData)
-            self._crypto_db.update_crypto(bData)
+            self._crypto_db.update_crypto(iv=bData)
+
+            self._crypto_db.insert_crypto_key(
+                key=bData,
+                key_class=key_class,
+                module=module,
+                additional_data=received_data
+            )
 
         elif module == "cipher.init":
             hashcode = received_data.get('hashcode', None)
             opmode = received_data.get('opmode', "")
-            if 'encrypt' in opmode:
-                self._crypto_db.update_crypto(None, hashcode, 'enc')
-            elif 'decrypt' in opmode:
-                self._crypto_db.update_crypto(None, hashcode, 'dec')
+            key_class = received_data.get('keytype', "")
+            key = received_data.get('key', None)
+            algorithm = received_data.get('algorithm', None)
+
+            self._crypto_db.insert_crypto(
+                hashcode=hashcode,
+                algorithm=algorithm,
+                init_key=key
+            )
+
+            self._crypto_db.update_crypto(
+                hashcode=hashcode,
+                flow='enc' if 'encrypt' in opmode else ('dec' if 'decrypt' in opmode else str(opmode)),
+                key=key,
+                algorithm=algorithm
+            )
+
+            self._crypto_db.insert_crypto_key(
+                key=key,
+                key_class=key_class,
+                module=module,
+                additional_data=received_data
+            )
+
+            Logger.print_message(
+                level="W",
+                message=f"Cipher init received\nHashcode: {hashcode}\nOpmode: {opmode}\nKeytype: {key_class}",
+                script_location=script_location
+            )
 
         elif module == "cipher.doFinal":
-            self._crypto_db.update_crypto(None, None, None, None,
-                                          received_data.get('input', ''),
-                                          stack_trace=stack_trace)
-            self._crypto_db.update_crypto(None, None, None, None, None,
-                                          received_data.get('output', ''),
-                                          stack_trace=stack_trace)
+            hashcode = received_data.get('hashcode', None)
+
+            self._crypto_db.insert_crypto(
+                hashcode=hashcode,
+                algorithm=None,
+                init_key=None
+            )
+
+            self._crypto_db.update_crypto(
+                hashcode=hashcode,
+                before_final=received_data.get('input', ''),
+                after_final=received_data.get('output', ''),
+                stack_trace=stack_trace,
+                status="complete"
+            )
 
             Logger.print_message(
                 level="D",

{frida_fusion-0.1.9 → frida_fusion-0.1.11}/frida_fusion.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: frida-fusion
-Version: 0.1.9
+Version: 0.1.11
 Summary: Hook your mobile tests with Frida
 Author-email: "Helvio Junior (M4v3r1ck)" <helvio_junior@hotmail.com>
 Maintainer-email: "Helvio Junior (M4v3r1ck)" <helvio_junior@hotmail.com>

{frida_fusion-0.1.9 → frida_fusion-0.1.11}/frida_fusion.egg-info/SOURCES.txt

@@ -22,6 +22,9 @@ frida_fusion/libs/helpers.js
 frida_fusion/libs/logger.py
 frida_fusion/libs/scriptlocation.py
 frida_fusion/modules/__init__.py
+frida_fusion/modules/android_setings/__init__.py
+frida_fusion/modules/android_setings/settings.js
+frida_fusion/modules/android_setings/settings.py
 frida_fusion/modules/crypto/__init__.py
 frida_fusion/modules/crypto/crypto.js
 frida_fusion/modules/crypto/crypto.py