Python反编译apk，获取各类信息
python反编译apk，获取各类信息，包括activity、权限、包名、图标等等。
功能：
- 反编译apk，输入apk路径，使用apktool生成反编译后的文件夹。
- 解析AndroidManifest.xml，获取如activity、权限等关键信息。
- 调用dex2jar、jd-gui反编译、查看源代码
需要的工具，并将其加入环境变量：
- apktool，反编译apk
- dex2jar，dex->jar
- jd-gui，查看jar的源码
- bandizip，用于解压apk，可替换为其它解压软件，但代码中要替换命令
使用csdn客户端测试效果图：
- 输入1，并输入apk文件路径，最终生成反编译后的文件夹
1.反编译apk
- 输入2，使用AndroidManifest解析功能，首先打印出名称、图标、包名、入口activity以及危险权限列表，继续输入y命令查看所有活动和权限。
2.解析AndroidManifest文件
全部源代码，各部分的功能给出了注释：
import os
import xml.etree.ElementTree as ET
#android namespace
namespace = '{http://schemas.android.com/apk/res/android}'
#android danger-permission list
dangerPermissionArray = ['android.permission.READ_CALENDAR',
'android.permission.WRITE_CALENDAR',
'android.permission.CAMERA',
'android.permission.WRITE_CONTACTS',
'android.permission.GET_ACCOUNTS',
'android.permission.READ_CONTACTS',
'android.permission.ACCESS_FINE_LOCATION',
'android.permission.ACCESS_COARSE_LOCATION',
'android.permission.RECORD_AUDIO',
'android.permission.READ_CALL_LOG',
'android.permission.READ_PHONE_STATE',
'android.permission.CALL_PHONE',
'android.permission.WRITE_CALL_LOG',
'android.permission.USE_SIP',
'android.permission.PROCESS_OUTGOING_CALLS',
'com.android.voicemail.permission.ADD_VOICEMAIL',
'android.permission.BODY_SENSORS',
'android.permission.READ_SMS',
'android.permission.RECEIVE_WAP_PUSH',
'android.permission.RECEIVE_MMS',
'android.permission.RECEIVE_SMS',
'android.permission.SEND_SMS',
'android.permission.READ_CELL_BROADCASTS',
'android.permission.READ_EXTERNAL_STORAGE',
'android.permission.WRITE_EXTERNAL_STORAGE']
apkPath =''
apkOutPath = ''
#uses-permissions list
usesPermissionArray = []
#danger uses-permission list
dangerUsesPermissionArray = []
#activity list
activityArray = []
androidManifestPath =''
appIcon = ''
appName = ''
mainActivity = ''
def file_no_exists(str):
if os.path.exists(str):
return False
else:
return True
def apk_re():
#apk path
global apkPath
apkPath = input('Please input Apk file path:')
while file_no_exists(apkPath):
apkPath = input('File not found,input Apk file path again:')
#output file path
global apkOutPath
apkOutPath = (apkPath.split('.')[0]+'New')
#use apktool
cmd = 'apktool d -f '+apkPath+' -o '+apkOutPath
os.system(cmd)
print('-----------------------------\nwork all done,output file in:\n'
+apkOutPath+'\n-----------------------------')
#AndroidManifest.xml path
global androidManifestPath
androidManifestPath = apkOutPath+'\\AndroidManifest.xml'
def xmlPath_input():
global androidManifestPath
androidManifestPath = input('input AndroidManifext.xml file path:')
while file_no_exists(androidManifestPath):
androidManifestPath = input('File not found,input xml file path again:')
def xmlPath_confrim():
if androidManifestPath == '':
xmlPath_input()
else:
print('already get',androidManifestPath, 'change?[y/n]:')
flag = input()
if flag == 'y':
xmlPath_input()
elif flag == 'n':
print('using',androidManifestPath, 'to work...')
else:
print('useless code,using',androidManifestPath, 'to work...')
def xml_re():
xmlPath_confrim()
tree = ET.parse(androidManifestPath)
root = tree.getroot()
#get packageName
packageName = root.attrib['package']
#get permission*****************************************
for child in root.iter('uses-permission'):
childName = child.get(namespace+'name')
usesPermissionArray.append(childName)
if (dangerPermissionArray.count(childName)) > 0 :
dangerUsesPermissionArray.append(childName)
#*******************************************************
#get activity/MainActivity******************************************************************
for application in root.iter('application'):
appIcon = application.get(namespace+'icon')
appName = application.get(namespace+'label').split('/')[-1]
for activity in application.iter('activity'):
activityName = activity.get(namespace+'name')
#add package name
if activityName[0] == '.':
activityName = packageName+activityName
activityArray.append(activityName)
#find mainActivity
for inter in activity.iter('intent-filter'):
for action in inter.iter('action'):
if action.get(namespace+'name') =='android.intent.action.MAIN':
for cate in inter.iter('category'):
if cate.get(namespace+'name') == 'android.intent.category.LAUNCHER':
mainActivity = activityName
#*******************************************************************************************
# find app name in strings.xml******************************************
homePath = androidManifestPath.split('\\')
homePath.pop()
stringPath = '\\'.join(homePath)+r'\res\values\strings.xml'
if os.path.exists(stringPath):
treeValue = ET.parse(stringPath)
rootValue = treeValue.getroot()
for child in rootValue.iter('resources'):
for s in child.iter('string'):
if s.get('name') == appName:
appName = s.text
else:
appName = "未找到，"+stringPath+"不存在"
#********************************************************
print('\n应用名称：', appName)
print('应用图标：', appIcon)
print('应用包名：', packageName)
print('应用入口：', mainActivity)
print('危险权限(',len(dangerUsesPermissionArray),'个):')
for i in dangerUsesPermissionArray:
print(i)
flag = input('++++++++++++++++++++++++++++++++++++++\nsee all permission and activity?[y/n]:')
if flag =='y':
print('活动列表(',len(activityArray),'个):')
for i in activityArray:
print(i)
print('权限列表(',len(usesPermissionArray),'个):')
for i in usesPermissionArray:
print(i)
def code_re():
#apk path
unzipPath = input('Please input Apk file path:')
while file_no_exists(unzipPath):
unzipPath = input('File not found,input Apk file path again:')
if os.path.exists(unzipPath.split('.')[0]+'unzip'):
pass
else:
bandizip = 'bandizip e -y '+unzipPath+' -o '+unzipPath.split('.')[0]+'unzip'
print('unziping......')
os.system(bandizip)
d2j = 'd2j-dex2jar.bat '+unzipPath.split('.')[0]+'unzip\\classes.dex'
jarPath = os.getcwd()+'\\classes-dex2jar.jar'
if os.path.exists(jarPath):
os.system('del '+jarPath)
os.system(d2j)
gui = 'jd-gui '+jarPath
print('openning source code......')
os.system(gui)
print('''
+++++++++++++++++++++++++++++++++++++++++++
\ / |
+++++++ | work with:
+++++++++ | Python3.6
++ +++++++++ ++ | apktool
++ +++++++++ ++ | dex2jar
++ +++++++++ ++ | jd-gui
++ ++ | bandizip
++ ++ | windows 10
APPRETOOL |
''')
print('Function:1.APKRE, 2.XMLRE，3.CODERE, 4.EXIT\n+++++++++++++++++++++++++++++++++++++++++++')
while 1:
choose = input('your choose:')
if choose == '1':
apk_re()
elif choose =='2':
xml_re()
elif choose =='3':
code_re()
elif choose == '4':
break
else:
print('Unknown code! try again')
continue
print('\n+++++++++++++++++++++++++++++++++++++++++++\nFunction:1.APKRE, 2.XMLRE，3.CODERE, 4.EXIT\n+++++++++++++++++++++++++++++++++++++++++++')
os.system('pause')