Question about Android 6.0 Support

[honeynet]

Question about Android 6.0 Support

[yuanchun-li]

Yes.

[mingwayzhang]

Thanks a lot!

But could you clarify that, since this repo seems only contain 4.1.1 image. How may I use it for marshmallow?

[mingwayzhang]

OK. So Droidbot is using Droidbox, which is based on static apk instrumentation using androguard. Everything else here is pretty much android version independent. That's why Droidbot is agnostic to Android versions, right?

[yuanchun-li]

Hello, you can use DroidBot on any device.
Using with DroidBox is just a recommended way to do dynamic analysis, as DroidBox is able to monitor sensitive behaviours at runtime.

To use DroidBot with Android 6.0, you need to:

1. start a Android 6.0 emulator or connect to a Android 6.0 device via ADB;
2. get the device serial no using adb devices;
3. start droidbot with droidbot -a <xxx.apk> -d <serial no> -event ... -env ...

[mingwayzhang]

Thanks for the clarification!

Another question is that what is the "taint" feature in droidbot.py?

[yuanchun-li]

DroidBox can track sensitive information flow using taint tracking (based on TaintDroid).
Thus the taint feature is in DroidBox instead of DroidBot.
Did I understand your question correctly?

[mingwayzhang]

Thanks for the information. Yes.