jpddlZddlZddlZddlZddlmZddlmZddlm Z ej ej dGdd Z Gd d Z Gd d ZGddZGddZGddZGddZGddZGddZGddZGddZGddZd ejd!efd"Zejejejejejed#Zd ejd$e fd%Zd&Zd'Zd(Zd2d+e d,e d-e!fd.Z"d/ejd-e!fd0Z#d1Z$dS)3N)!extract_file_based_on_header_info)ZipEntry)escape_xml_entitieszS%(asctime)s - %(levelname)s - %(filename)s:%(lineno)d -> %(funcName)s : %(message)s)levelformatc.eZdZdZdZedZdS)ResChunkHeaderz Chunk header used throughout the axml. This header is essential as it contains information about the header size but also the total size of the chunk the header belongs to. c>||_||_||_||_dSN)type header_size total_sizedata)self header_typerrrs X/home/ubuntu/.hermes/hermes-agent/venv/lib/python3.11/site-packages/apkInspector/axml.py__init__zResChunkHeader.__init__s# &$ c|d}t|dkrdStjd|\}}}|||||S)a) Read the header type (2 bytes), header size (2 bytes), and entry size (4 bytes). :param file: the xml file e.g. with open('/path/AndroidManifest.xml', 'rb') as file :type file: bytesIO :return: Returns an instance of itself :rtype: ResChunkHeader Nzsi %%d++"&))B--HN V^`wHxHxE k5-s6<e]!8:: :rNr!r"r#r$r rr%rr&rrr(r(/sT~ : :[ : : :rr(ceZdZdZdefdZedZedZedZ edZ edZ ed Z ed Z ed Zd S) StringPoolTypez The stringPool class which is a composition of the ResStringPoolHeader along with the string offsets and the string data. string_pool_headerc>||_||_||_||_dSr ) str_headerstring_offsets string_listr)rr6r9stringsstring_pool_datas rrzStringPoolType.__init__Us$,,"$ rc <g}td|D]C}|tjd|ddD||kr-t jd|d|d|S)a& Reads the offset available for each string. Requires to know the number of strings available beforehand. :param file: the xml file right after the string pool header has been read. :type file: bytesIO :param num_of_strings: the calculated number of strings available :type num_of_strings: int :param end_absolute_offset: the absolute value of the offset where the offsets finish. :type end_absolute_offset: int :return: Returns a list of strings offsets. :rtype: list rrzString offset at position z failed to be read: )seekrrr ExceptionrDerror)rrposition string_offsetes rread_string_offsetz!StringPoolType.read_string_offsetrs  IIhl # # #"M$ ! ==a@M     MXxXXUVXX Y Y Y44444 sAA A9A44A9c|stjd|dd}|dzdkr,||dzd}ntjd|dd}|dzdz|z}||krdS||dzd}notjd |d d}|d |}||d d }|S)a Handling the different encoding possibilities that can be met. :param file: the xml file at the offset where the string is to be read :type file: bytesIO :param is_utf8: boolean to check if a utf8 string is expected :type is_utf8: bool :param end_stringpool_offset: :type end_stringpool_offset: int :return: Returns the decoded string :rtype: str >qA &B6*D !6662))K!O44;;JGG]3 ! 55a8F IIaLLLEii&&--gi-HHGrcg}|D]T}||zdz}|||||||dz}||U|S)aI Gets the actual strings based on the offsets retrieved from read_string_offsets(). :param file: the xml file right after the string pool offsets have been read :type file: bytesIO :param string_offsets: see -> read_string_offsets() :type string_offsets: list :param strings_start: the offset at which the string data starts :type strings_start: int :param is_utf8: boolean to check if a utf8 string is expected :type is_utf8: bool :return: Returns a list of the string data :rtype: list r)rKrbrB) rrr9r.r[r;offsetabsolute_offsetr^s r read_stringszStringPoolType.read_stringssv $ $ $F+f4q8O IIo & & &88w XfgiXjHjkkG NN7 # # # #rc||zdz }|j|krdS||||||}|S)a Read a string from the string pool when the offset of it is known already. :param file: the string pool data parsed as bytes :type file: io.bytesIO :param string_offset: the offset at which the string is located in the string pool :type string_offset: int :param strings_start: the offset at which the string data starts :type strings_start: int :param is_utf8: boolean to check if a utf8 string is expected :type is_utf8: bool :param end_stringpool_offset: the offset at which the string pool ends :type end_stringpool_offset: int :return: Returns the string or None :rtype: str or None N) getbuffernbytesrKrb)rrrOr.r[r\rfstrings r read_stringzStringPoolType.read_strings_$(-7"< >>   "_ 4 44 /"""33D'CXYY rc |||}|dS||||||S#t$r"}tjd|Yd}~dSd}~wwxYw)a Retrieve a single string from the String Pool, given its position. It first gets the correct offset of the string and then reads the string. :param position: The position of the string to be retrieved :type position: int :param string_pool_data: the string pool data parsed as bytes :type string_pool_data: io.BytesIO :param end_stringpool_offset: the offset at which the string pool ends :type end_stringpool_offset: int :param strings_start: the offset at which the string data starts :type strings_start: int :param is_utf8: boolean to check if a utf8 string is expected :type is_utf8: bool :return: Returns the string or None :rtype: str or None Nz-Exception while retrieving string from pool: )rQrmrLrD exception)rrNr<r\r.r[rOrPs rget_string_from_poolz#StringPoolType.get_string_from_pools& 223CXNNM$t??#3]MSZ\qrr r     QaQQ R R R44444 s55 A!AA!cFt|}t||j} |}|ddkr||n+|||dn||fS)a' A 'lite' parser that gets the header and then reads the rest of the chunk as a blob of bytes. :param file: the AndroidManifest.xml file :type file: bytesIO :return: returns the header and the chunk data :rtype: tuple(ResStringPoolHeader, bytes) TrTr)r(rread_remainingr)rCrrK)rrResStringPool_headerr<cur_poss r parse_litezStringPoolType.parse_lites 388>>)$0D0KLL iikkGyy||{** '""" IIg    IIaLLL  $%555rcvt|}|}|jdz }|dz}|dz st jd||||jdz}t|j dz}| |||j|} |} | ddkr| | nl| | | d | j|dzkrtd |} | || | |z } ||||| S) a Parse the string pool to acquire the strings used within the axml. :param file: the xml file right after the file header is read :type file: bytesIO :return: Returns an instance of itself :rtype: StringPoolType rir?zAThe number of strings in the string pool is not a integer number.rTrTrrrz%Resource Map header was not detected.)r(rrCr. is_integerrDrErIboolr-rgrrKrjrk ValueError) rrr6string_pool_startsize_of_strings_offsetsrFr9r[r:rustring_pool_endr<s rrzStringPoolType.parses166t<< IIKK"4"BR"G0A5'!+7799 b O` a a a00~GYGgjkGkll)/6:;;&&t^=O=]_fgg  JiikkGyy||{** '""" IIg    IIaLLL~~&q88 !HIII J))++ #$$$99_7H%HIIs        rN)r!r"r#r$r(rr%rIrQrbrgrmrprvrr&rrr5r5Os %+>%%%% [,[##[#J[4[0[666[6($ $ [$ $ $ rr5cDeZdZdZdZedZedZdS)XmlResourceMapTypezC Resource map class, with the header and the resource IDs. c0||_||_||_dSr )r)residsr)rr)r resids_datas rrzXmlResourceMapType.__init__4s   rc^t|}t||}||fS)a" A 'lite' parser that gets the header and then reads the rest of the chunk as a blob of bytes. :param file: the AndroidManifest.xml file :type file: bytesIO :return: returns the header and the chunk data :rtype: tuple(ResChunkHeader, bytes) )r rrs)rrresource_map_headerresource_map_datas rrvzXmlResourceMapType.parse_lite9s5-22488*41DEE"$555rct|}|j|jz dz}||dzfdt dt dD}d|D}|||S)z Parse the resource map and get the resource IDs. :param file: the xml file right after the string pool is read :type file: bytesIO :return: Returns an instance of itself :rtype: XmlResourceMapType r?c*g|]}||dzSr?r&).0rHrs r z,XmlResourceMapType.parse..Ts&NNN1+aAg&NNNrrcDg|]}tjd|dSr>rrrrchunks rrz,XmlResourceMapType.parse..Us)DDDE&-e,,Q/DDDr)r rrrrrAr)rrr) num_residschunksrrs @rrzXmlResourceMapType.parseGs %%d++'&*<<B ii Q// NNNNa[9I9I10M0MNNNDDVDDDs66;///rN)r!r"r#r$rr%rvrr&rrrr/sc    6 6[ 600[000rrc4eZdZdZdefdZedZdS) ResXMLHeaderz Chunk header used as a header for the elements. This header represents the header for the rest of the elements besides the initial header, the string pool and the resource map. r)c"||_||_dSr )r)r)rr)rs rrzResXMLHeader.__init__as  rct|}d}|jdkr||jdz }|||S)aC Supporting header for the elements besides the initial header, the string pool and the resource map. :param file: the xml file e.g. with open('/path/AndroidManifest.xml', 'rb') as file :type file: bytesIO :return: Returns an instance of itself :rtype: ResXMLHeader rr)r rrr)rrr)rs rrzResXMLHeader.parsegsU %%d++   ! !))F$6$:;;Ks6;'''rNr3r&rrrrZsT ~ (([(((rrc:eZdZdZdefdZedefdZdS)XmlStartNamespacezX The actual start of the xml, after this the elements of the xml will be found. r)c0||_||_||_dSr )r)extr)rr)rext_datas rrzXmlStartNamespace.__init__~s  rheader_tc|jj|jjz dz}||dzfdt dt dD}d|D}|||S)aF Parse the starting element of a Namespace :param file: the axml already pointing at the right offset :type file: bytesIO :param header_t: the already read header of the chunk :type header_t: ResXMLHeader :return: an instance of itself :rtype: XmlStartNamespace r?c*g|]}||dzSrr&)rrHrs rrz+XmlStartNamespace.parse..s&HHH(1QU7#HHHrrcDg|]}tjd|dSrrrs rrz+XmlStartNamespace.parse..s)AAAv}T5))!,AAAr)r)rrrrAr)rrrnum_extsrrrs @rrzXmlStartNamespace.parsesO.1LLQRR99X\**HHHHU1c(mmQ-G-GHHHAA&AAAs8S(+++rNr!r"r#r$rrr%rr&rrrrys`| ,<,,,[,,,rrc:eZdZdZdefdZedefdZdS)XmlEndNamespacez4 Class to represent the end of a Namespace. r)c>||_||_||_||_dSr )r)prefix_namespace_index uri_indexr)rr)rrend_namespace_datas rrzXmlEndNamespace.__init__s# &<#"& rrcx|d}tjd|\}}|||||S)aD Parse the ending element of a Namespace. :param file: the axml already pointing at the right offset :type file: bytesIO :param header_t: the already read header of the chunk :type header_t: ResXMLHeader :return: an instance of itself :rtype: XmlEndNamespace rr?rSrTz||_||_||_||_dSr )r)attrext attributesr)rr)rrstart_element_datas rrzXmlStartElement.__init__s"  $& rrcj|d}tjd|\}}}}}} } } |||||| | | g} |dkr|dz } || |||z}tt j|||}||| |||zS)a5 Parse the current element :param file: the axml already pointing at the right offset :type file: BytesIO :param header_t: the already read header of the chunk :type header_t: ResXMLHeader :return: an instance of itself :rtype: XmlStartElement r1z ||_||_||_||_dSr )r)rrelements)rr)rrrs rrzManifestStruct.__init__Rs$ &(  rrc|d} |}|j||zkrdS tjd|d\}}}||||cxkr|krnndSn#tj$rYdSwxYw||dz)a Static method to check if the next element right after the resource map chunk has been reached. Android tolerates unknown chunk types, so we only need to verify there's enough data for a header and that the header size is plausible. Reference: AOSP ResXMLTree::setTo() :param file: The AndroidManifest file :type file: io.BytesIO rTzI &%  V%%);&N&Nd&N&Ne&N&N&NOOOO V%%)=)=b)A&T&TD&T&TE&T&T&TUUUUU  ! !T"5"5U"5"5"5 6 6 6 6 88N # ##s A:: B$E9Fcg}i}i}g}|D]}t|tr|jdt|ks|jdt|krfd||jdd||jdd|||jd<||jd|||jd<t|tr3t |j||}td|dD}g} |D]V} | |vrP| |vr| || n| dkr| d | | W| rJ|r0d ||j ddd | d|d nd ||j dd } n3|rd ||j dd|d nd ||j dd } | | t|tr>|d d d kr*|d  d ||j|d <Wt|tr:||j d} | dkrd| dnd| d } | | d |S)an Method to create the readable XML AndroidManifest.xml file based on the elements discovered from the processed APK :param elements: The parsed elements as returned by process_elements()[0] :type elements: list :param string_list: The string pool data :type string_list: list :return: The AndroidManifest.xml as a string :rtype: str rrzxmlns:rrc3TK|]#}d|v|ddV$dS)rrN)r)rnss r z"create_manifest..Js=]]BSVZ\S\S\rxx}}Q/S\S\S\S\]]rrrz:xmlns:android="http://schemas.android.com/apk/res/android" rdr rzrV)rrrrrr$rsetrrBrrrrXrr)rr:android_manifest_xml namespacesr ns_declaredrr attr_ns_listtmp_nsvltag_liner! closing_tags rrr4sJGK55 g0 1 1 5{1~K 0 000GKNSEUEU4U4U;A;w{[\~C^;A;Abmnunyz{n|b};A;A;A ;w{1~677B7;q>7R GKN34  1 1 5+G,> WUUJ]]*:J:J3:O:O]]]]]LF" + +[((Z'' jn5555y &cddd&&r*** Mgq`c{7?1+=>cc&AQAQccT^ccccx`|GHOHWXYHZ|[x`x`x`T^MP{7?1+=>PPPPPPeMhst{uDEFuGiHeMeMeM ' ' 1 1 1 1  1 1 5#B'+t33+?+C+K+KDLWX_XjLk,m,m$R(  / / 5wq12D*.**<*<,t,,,,.t...K ' ' 4 4 4 77' ( ((rc^t|}|S)a& Helper method to directly return the AndroidManifest file as created by create_manifest() :param raw_manifest: expects the encoded AndroidManifest.xml file as a file-like object :type raw_manifest: bytesIO :return: returns the decoded AndroidManifest file :rtype: str )rrr) raw_manifestmanifest_objects rrrcs)%**<88O  ' ' ) ))rFrrliterc|r|}nNt|d5}tj|}dddn #1swxYwYt j|d}|jd}t|||j j dd}|r$ttj||} n!ttj|} | S)aa Helper method to retrieve the AndroidManifest directly from an APK, either by providing the APK itself or the path. :param inc_apk: The path of the APK file or the APK itself :type inc_apk: str :param raw: Boolean parameter to define whether the manifest is provided as string or bytes :type raw: bool :param lite: Boolean parameter to define whether the lite parsing would occur or not :type lite: bool :param num_of_elements: Number of elements to parse from the APK :type num_of_elements: int :return: Returns the AndroidManifest.xml as string :rtype: str rbNzAndroidManifest.xmlrr) openrrrr parse_single local_headersto_dictrcentral_directoryentriesget_manifest_liter) inc_apkrr7rapk_fileapkentry_manifestmanifest_localmanifest_bytesrs rparse_apk_for_manifestrGps< . '4  .Cz#((**--H . . . . . . . . . . . . . . .*85JKKN#12GHPPRRN6x7E7W7_;P8RRYRYR[R[]]]^`N <$RZ%?%?Q`aaa > : :;; Os'A  A A rc t||\}\}}\}}}|jjdz}|j} t |jdz} i} |D]} t| tr| j D]w} t| tr`t | j tj||| | }t!|| || | tj|}|| |<x| S)aP A method to provide 'lite' parsing of the AndroidManifest in order to retrieve a few details as fast as possible. Based on the integer 'num_of_elements' being passed as a parameter, it will attempt to fetch this many chunks right after the 'resource map' chunk and will get the attributes values of these elements if they are of instance XmlStartElement :param manifest: The manifest to be processed :type manifest: io.BytesIO :param num_of_elements: :type num_of_elements: int :return: Returns a dictionary of the attributes discovered :rtype: dict rrrx)rrvr)rr.rzr-rrrrr5rprrrget_attribute_value)rrrstring_pool_ResChunkHeaderr<rrrr\r.r[attributes_dictrr  attr_nameattribute_values rr@r@s2??GOAA g / / A* A Ad$788A . C CDOUWU_`pUqUqDY[hjq!s!sI&9)TK`bo:A2:N^C_C_'a'aO1@OI. rc |jdkr d|jS|jdkrHt|j||||}|rt |nt |jS|jdkr`t|j||||}|s#t|j||||}|r|nt |jS|jdkr d|jdS|jdkr |jrd nd St |jS#t$r8}tj d |d |t |jcYd }~Sd }~wwxYw)a Gets the value for a single attribute :param attr_name: The attribute name as it has been retrieved by the string pool :type attr_name: str :param attribute: the parsed attribute itself :type attribute: XmlAttributeElement :param end_stringpool_offset: The end of string pool offset :type end_stringpool_offset: int :param strings_start: the strings start offset for the string pool :type strings_start: int :param is_utf8: boolean to check if a utf8 string is expected :type is_utf8: bool :param string_pool_data: The string pool data as io.BytesIO :type string_pool_data: io.BytesIO :return: returns the attribute value :rtype: str rr rr?r0x08XrrrzException processing attribute z: N) rrr5rprrrrLrDro)rL attributer\r.r[r< str_pool_locrPs rrIrIs&/  )Q . .3y133 3  +q 0 0)>>y?Y[k?T?LgWWL9Ei&|444#iNhJiJi i  +q 0 0)>>y?Y[k?T?LgWWL  [-BB9C\^nCXCPRY [ [ $0T<rYs  666666(((((( - ` FFFFFFFF>::::::::@] ] ] ] ] ] ] ] @(0(0(0(0(0(0(0(0V((((((((>,,,,,,,,8TTTTTTTT855555555p#T#T#T#T#T#T#T#TL444444448GGGGGGGGDF@F@F@F@F@F@F@F@R rz \      $  "  "   "#  + +^ + + + +5$5$5$p,),),)^ * * *T\_B SB,/,/,/,/,/r