Subho Halder

Hey, dependency (syrup.jar) was missing. Can you add that back ?

AXMLParser crashing for Obfuscated APK

9

APK file from [https://totok.ai/download-android](https://totok.ai/download-android) seems to be obfuscated and all tools including Androguard/jadX/Apktool fails to extract any XML files. Running APKiD gives the following output: ``` apkid totok_release_v1_6_5_325_totok.apk [+] APKiD...

Remove androguard dependecy

1

I just figured out that you're using the manifest file dumped using apktool to parse it, and I don't see any place where androguard is being used. Androguard alone makes...

Running from remote socket the operation times out

1

I tried running the Python script remotely. Trying to connect using ``` s = socket.socket() s.connect("remoteip", 6000) ``` does connect, but the moment I pass in data to perform action...

Added fix for AXML parsing for invalid header

1

Reference commit: https://github.com/androguard/androguard/commit/2f27cae53678559faec65e7c25e9d8fd0d730e3e Fix for: https://github.com/androguard/androguard/issues/835

The Android application exports Activity for use by other applications, but does not properly restrict which applications can launch the component or access the data it contains. ``` 1:None -...

Application was found to be writing logs to the system logs ``` 1:None - Log message tagged 'ParseHelper': 'cannot add relative layout rules when container is not relative' 2:None -...

Traces of Crypto Keys which might be intermediate keys used when loading the different libraries. ``` 1:None - AES implemented at Lcom/flipkart/android/t/b;->a ```

Insufficient transport layer protection issues happen when the data is sent from the mobile app to the server over unsecure channels. Whether the data is transmitted through the carrier network...