问题描述

工具cryptoeval在之前进行了部署，现在描述其使用命令

步骤

1、把要分析的apk放到对应文件夹中，比如 app 文件夹

2、运行检测命令，使用cryptoguard和crysl进行检测

python runCrySL_CryptoGuard.py <apkPath> 2
#具体例子
python runCrySL_CryptoGuard.py /home/myeeygo/cryptographicTools/cryptoeval/code/app 2

两个工具的检测结果分别在 misuse-CrySL 和 misuse-CryptoGuard 文件夹中

3、运行cryptoeval工具结构化检测结果

java -jar CryptoEvaluator.jar <currentPath> <apkPath>
# 实际例子。在/home/myeeygo/cryptographicTools/cryptoeval/code 文件夹中运行下面命令
java -jar CryptoEvaluator.jar ./ ./app
# 第二个参数如果省略，默认以 app 文件夹作为参数，所以下面命令也可以
java -jar CryptoEvaluator.jar ./ 

PS

（好像直接跑使用cryptoguard和crysl进行检测有点问题，crysl好像需要单独再跑一次）

crysl对于apk检测好像又问题，有的无法正常检测。

============================= Analyse 1 apk ==================================

[main] INFO soot.jimple.infoflow.android.SetupApplication - Initializing Soot...
[main] INFO soot.jimple.infoflow.android.SetupApplication - Loading dex files...
[main] WARN soot.dexpler.DexFileProvider - Multiple dex files detected, only processing 'classes.dex'. Use '-process-multiple-dex' option to process them all.
[main] ERROR soot.jimple.infoflow.android.resources.ARSCFileParser - Error when looking for XML resource files in apk /home/myeeygo/cryptographicTools/cryptoeval/code/app/deepseek.apk
java.lang.RuntimeException: File format violation, res1 was not zero
        at soot.jimple.infoflow.android.resources.ARSCFileParser.readTypeSpecTable(ARSCFileParser.java:1613)
        at soot.jimple.infoflow.android.resources.ARSCFileParser.readResourceHeader(ARSCFileParser.java:1217)
        at soot.jimple.infoflow.android.resources.ARSCFileParser.parse(ARSCFileParser.java:1099)
        at soot.jimple.infoflow.android.resources.ARSCFileParser$1.handleResourceFile(ARSCFileParser.java:1089)
        at soot.jimple.infoflow.android.resources.AbstractResourceParser.handleAndroidResourceFiles(AbstractResourceParser.java:61)
        at soot.jimple.infoflow.android.resources.ARSCFileParser.parse(ARSCFileParser.java:1083)
        at soot.jimple.infoflow.android.SetupApplication.parseAppResources(SetupApplication.java:440)
        at soot.jimple.infoflow.android.SetupApplication.runInfoflow(SetupApplication.java:1318)
        at soot.jimple.infoflow.android.SetupApplication.constructCallgraph(SetupApplication.java:1182)
        at main.CogniCryptAndroid.main(CogniCryptAndroid.java:53)
deepseek.apk:1.82722592354seconds

mv: cannot stat '/home/myeeygo/cryptographicTools/cryptoeval/code/lib/CrySL/cognicrypt-reports/deepseek/CogniCrypt-Report.txt': No such file or directory