#! /usr/bin/python3 # -*- coding: utf-8 -*- # Author: kelvinBen # Github: https://github.com/kelvinBen/AppInfoScanner # 此处用于搜索组件信息 # com.alibaba.fastjson -> fastjson # com.google.gson -> gson # com.fasterxml.jackson -> jackson # net.sf.json -> # javax.xml.parsers.DocumentBuilder -> dom方式 # javax.xml.parsers.SAXParser -> sax方式 # org.jdom.input.SAXBuilder -> jdom # org.dom4j.io.SAXReader -> dom4j filter_components = [ 'com.alibaba.fastjson', 'com.google.gson', 'com.fasterxml.jackson', 'net.sf.json', 'javax.xml.parsers.DocumentBuilder', 'javax.xml.parsers.SAXParser', 'org.jdom.input.SAXBuilder', 'org.dom4j.io.SAXReader' ] # 此处目前支持过滤 # 1. https://以及http://开头的 # 2. IPv4的ip地址 # 3. URI地址,URI不能很好的拼接所以此处忽略 filter_strs =[ r'https://.*|http://.*', # r'.*://([[0-9]{1,3}\.]{3}[0-9]{1,3}).*', r'.*://([\d{1,3}\.]{3}\d{1,3}).*', # r'/[a-z0-9A-Z]+/.*' ] # 此处忽略常见的域名等信息 filter_no = [ r'.*127.0.0.1', r'.*0.0.0.0', r'.*localhost', r'.*w3.org', r'.*apache.org', r'.*android.com', r'.*jpush.cn', r'.*umengcloud.com', r'.*umeng.com', r'.*github.com', r'.*w3school.com.cn', r'.*apple.com', r'.*.amap.com', ] # 此处配置壳信息 shell_list =[ 'com.stub.StubApp', 's.h.e.l.l.S', 'com.Kiwisec.KiwiSecApplication', 'com.Kiwisec.ProxyApplication', 'com.secshell.secData.ApplicationWrapper', 'com.secneo.apkwrapper.ApplicationWrapper', 'com.tencent.StubShell.TxAppEntry', 'c.b.c.b', 'MyWrapperProxyApplication', 'cn.securitystack.stee.AppStub', 'com.linchaolong.apktoolplus.jiagu.ProxyApplication', 'com.coral.util.StubApplication', 'com.mogosec.AppMgr', 'io.flutter.app.FlutterApplication' ] # 此处配置需要扫描的web文件后缀 web_file_suffix =[ "html", "js", "xml", "php", "jsp", "class", "asp", "aspx", "py" ] # 配置需要忽略网络嗅探的文件后缀名,此处根据具体需求进行配置,默认为不过滤 sniffer_filter=[ "jpg", "png", "jpeg", "gif", ] # 配置自动下载Apk文件或者缓存HTML的请求头信息 headers = { "User-Agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0", "Connection":"close" } # 配置自动下载Apk文件或者缓存HTML的请求体信息 data = { } # 配置自动下载Apk文件或者缓存HTML的请求方法信息,目前仅支持GET和POST method = "GET"