https://www.lanzous.com/ib7krqb

问题

提取成功，但文件依旧不可读

输出

python main.py sxxqt_110133.apk
/home/Projects/uzmap-resource-extractor/sxxqt_110133
completeddecrypt assets/widget/script/jsQR.js.min.jsin.jss.jsll.htmllmlhtml
耗时 : 1.7752563953399658 秒

下载链接

lanzou-sxxqt_110133

 ➜  uzmap-resource-extractor git:(master) python3 main.py -v /tmp/26f82bfa2911d19ce2013752ddfd1a63e15d1fc2.apk
/tmp/26f82bfa2911d19ce2013752ddfd1a63e15d1fc2.apk
	package      : aiyu.a45d36e98.a4dd6592a
	uz_version   : 3.0.77
	encrypted    : True
	rc4Key       : 57aca5e37ff7ecbdfad6

共找到 1 个 apicloud apk

 ➜  uzmap-resource-extractor git:(master) file /tmp/26f82bfa2911d19ce2013752ddfd1a63e15d1fc2/assets/widget/script/api.js
/tmp/26f82bfa2911d19ce2013752ddfd1a63e15d1fc2/assets/widget/script/api.js: data

 ➜  uzmap-resource-extractor git:(master) ls /tmp/26f82bfa2911d19ce2013752ddfd1a63e15d1fc2/assets/widget/
config.xml css        index.html js123      list       pages      script

apk 下载 https://1drv.ms/u/s!Ak3JGHQlv_fLiRllf3-siWnS6YPF?e=KUo1ge

风险提示，apk 会窃取通讯录，别在真机上运行

https://a.app.qq.com/o/simple.jsp?pkgname=com.xingshiwu.app

环境:python3.7 windows
使用命令: python3 -v com.xingshiwu.app_1.0.4_11.apk
报错信息
Traceback (most recent call last):
File "D:/Desktop/uzmap-resource-extractor-master/main.py", line 33, in
extractMap = tools.decryptAllResourcesInApk(args[0],outputFolder,printLog=True)
File "D:\Desktop\uzmap-resource-extractor-master\tools.py", line 227, in decryptAllResourcesInApk
rc4Key = extractRC4KeyFromApk(apkFilePath)
File "D:\Desktop\uzmap-resource-extractor-master\tools.py", line 175, in extractRC4KeyFromApk
rc4Key = extractRC4Key(soContent)
File "D:\Desktop\uzmap-resource-extractor-master\tools.py", line 37, in extractRC4Key
dataSection,dataContent = elffile.get_section_by_name('.rodata'),None
File "D:\py3_venv\lib\site-packages\elftools\elf\elffile.py", line 105, in get_section_by_name
for i, sec in enumerate(self.iter_sections()):
File "D:\py3_venv\lib\site-packages\elftools\elf\elffile.py", line 114, in iter_sections
yield self.get_section(i)
File "D:\py3_venv\lib\site-packages\elftools\elf\elffile.py", line 93, in get_section
section_header = self._get_section_header(n)
File "D:\py3_venv\lib\site-packages\elftools\elf\elffile.py", line 468, in _get_section_header
stream_pos=self._section_offset(n))
File "D:\py3_venv\lib\site-packages\elftools\common\utils.py", line 39, in struct_parse
stream.seek(stream_pos)
File "D:\Python37\lib\zipfile.py", line 1025, in seek
self._fileobj.seek(self._orig_compress_start)
File "D:\Python37\lib\zipfile.py", line 704, in seek
if self.writing():
AttributeError: '_SharedFile' object has no attribute 'writing'

按照说明执行后得到的文件还是加密的，解密失败！
兄弟有空可否帮忙看看，劳驾劳驾！万分感谢！

Register native ('bs', '(Ljava/lang/String;I)Ljava/lang/String;') failed on class Enslecb.
Register native ('bbs', '([BI)Ljava/lang/String;') failed on class Enslecb.
Register native ('md', '(Ljava/lang/String;I)Ljava/lang/String;') failed on class Enslecb.
Register native ('bmd', '([BI)Ljava/lang/String;') failed on class Enslecb.
Register native ('pm', '(Ljava/lang/Object;)Ljava/lang/String;') failed on class Enslecb.
Register native ('km', '(Ljava/lang/Object;)Ljava/lang/String;') failed on class Enslecb.

大佬 现在apicloud 推出了 AVM 框架 目前揭秘出来只有js文件 有直接解析原始代码的可能性吗

dcloud有方法吗

之后肯定有合作需要想直接和你建立联系,因为我是服务端技术,对逆向不熟悉,通过xpose/arm ultra/magisk等各种确实很麻烦也一直没解决我我的问题,所以想咖啡赞助,感谢你的开源(虽然现在开源很正常)但找到你并完成解密真的解决很大一个困难; 期待你的回信: [email protected]

运行新版没有config.xml文件

可以打包exe可执行文件嘛

可以通过pyinstaller打包成exe可执行文件嘛？就是不用通过执行python main.py xx.apk这个cmd语句去执行解密过程，而是把项目打包成exe可执行文件，直接输入xx.apk就可以执行解密过程

可以打包成exe嘛

应该是 extractRC4KeyForOlderVersionFromApk

python main.py -v /disk1t/samba/apps/api/
...........
error extracting apicloud info :/disk1t/samba/apps/api/讯飞听见_2.0.1428.apk
Traceback (most recent call last):
File "/disk1t/samba/uzmap-resource-extractor-master/apk_util.py", line 296, in extractAPICloudInfo
attrsList = extractManifestAttributes(mBytes)
File "/disk1t/samba/uzmap-resource-extractor-master/apk_util.py", line 249, in extractManifestAttributes
stringList = extractStringList(fileBytes,8)
File "/disk1t/samba/uzmap-resource-extractor-master/apk_util.py", line 228, in extractStringList
length = (val << 8) | struct.unpack('=b',rawStringDataBlock[offset+1 : offset+2] )
TypeError: unsupported operand type(s) for |: 'int' and 'tuple'
error extracting apicloud info :/disk1t/samba/apps/api/讯飞听见1.0.1038.apk .apk
Traceback (most recent call last):
File "/disk1t/samba/uzmap-resource-extractor-master/apk_util.py", line 296, in extractAPICloudInfo
attrsList = extractManifestAttributes(mBytes)
File "/disk1t/samba/uzmap-resource-extractor-master/apk_util.py", line 249, in extractManifestAttributes
stringList = extractStringList(fileBytes,8)
File "/disk1t/samba/uzmap-resource-extractor-master/apk_util.py", line 228, in extractStringList
length = (val << 8) | struct.unpack('=b',rawStringDataBlock[offset+1 : offset+2] )
TypeError: unsupported operand type(s) for |: 'int' and 'tuple'
error extracting apicloud info :/disk1t/samba/apps/api/美达罗捷_2.1.3.apk
Traceback (most recent call last):
File "/disk1t/samba/uzmap-resource-extractor-master/apk_util.py", line 296, in extractAPICloudInfo
attrsList = extractManifestAttributes(mBytes)
File "/disk1t/samba/uzmap-resource-extractor-master/apk_util.py", line 249, in extractManifestAttributes
stringList = extractStringList(fileBytes,8)
File "/disk1t/samba/uzmap-resource-extractor-master/apk_util.py", line 228, in extractStringList
length = (val << 8) | struct.unpack('=b',rawStringDataBlock[offset+1 : offset+2] )
TypeError: unsupported operand type(s) for |: 'int' and 'tuple'

希望能写一个加密文件的功能 因为我研究的时候 修改文件之后 替换回去 这样更方便调试 解密后的替换进去 发现不能正常运行app