jdragons/drozer_plugin

Drozer_Plugin

Drozer_Plugin

Drozer检测工具插件的编写

#检测的主要原理

首先获取被导出的组件，然后获得这个组件的action。因为启动组件，比如activity和service都有两种启动方式，一种通过设置component的显式启动，另一种是通过设置action的隐式启动，所以方法attack里覆盖了这两种方法，一是直接启动组件名，不带action测试；另外是只发送action测试无组件的情况。

#插件的安装

安装drozer插件的命令为 module install 插件的绝对路径 比如我的就是"module install /home/drozer_module/drozer.attack.activity.py"，文件名与插件中的path变量有关，比如path是['drozer','attack']，我们的文件就要命名为drozer.attack.xxx，xxx是可以自定义的；另外一种方式就是目录形式的，建立目录drozer，子目录attack，里面文件名就可以是xxx.py了。

参考地址：http://www.ijiandao.com/safe/cto/11832.html

drozer_plugin's Issues

The module repository name should not be drozer (win10)

PS C:\Python27\Scripts> .\drozer.bat module repository list
Local repositories:
C:\Python27\Lib\site-packages\drozer\modules\drozer

that will cause problem when drozer import Module

PS C:\Python27\Scripts> .\drozer.bat console connect
C:\Python27\lib\site-packages\OpenSSL\crypto.py:12: CryptographyDeprecationWarning: Python 2 is no longer supported by the Python core team. Support for it is now deprecated in cryptography, and will be removed in a future release.
from cryptography import x509
Traceback (most recent call last):
File "C:\Python27\Scripts\drozer", line 30, in
import("drozer.cli.%s" % (sys.argv[1]))
File "C:\Python27\lib\site-packages\drozer\cli\console.py", line 8, in
from drozer.console import Console
File "C:\Python27\lib\site-packages\drozer\console_init_.py", line 4, in
from drozer.console.console import Console
File "C:\Python27\lib\site-packages\drozer\console\console.py", line 13, in
from drozer.console.session import Session, DebugSession
File "C:\Python27\lib\site-packages\drozer\console\session.py", line 21, in
from drozer.modules import collection, common, loader, Module
File "C:\Python27\lib\site-packages\drozer\modules_init_.py", line 1, in
from drozer.modules.base import Module
ImportError: No module named modules.base