目录导航
Pithus简介
Pithus 是一个免费的开源平台，用于为活动家、记者、非政府组织、研究人员分析 Android 应用程序中可能存在的恶意程序,恶意权限获取,非法隐私读取,外联等信息.
我们希望尽可能全面的分析,所以pithus依赖于多种众所周知的工具，例如：
当一个 APK 被提交时，它会被上面列出的不同工具分析。每个报告都存储在ElasticSearch 中。
分析步骤在tasks.py文件中定义。
测试版可在beta.pithus.org 获得。
Pithus安装方法
在 Linux 上：
git clone [email protected]:Pithus/bazaar.git cd bazaar
可以使用docker-compose运行整个开发堆栈：
docker-compose -f local.yml up
使用方法
安装完成后浏览器打开[http://localhost:8001] 享受 Pithus！
注意：第一次浏览该地址时，您可能会因缺少索引而出错。可能是 Django 没有正确加载。为了解决这个问题，在任何 Django 文件中添加一个空行，保存它并在浏览器中刷新页面。
项目地址:
GitHub:https://github.com/Pithus/bazaar
官网地址
可以直接到官网上传apk进行分析.
开发文档
cookiecutter-django.readthedocs.io/project-…html
使用截图
打开官网上传apk后,等一会将会出现分析数据.
此处我用酷我音乐破解版的一个apk包来进行分析举例
分析数据如下:
https://beta.pithus.org/report/e7..40f0
分析出的指纹信息
包含文件hash值,应用程序标识符,SSdeep,Dexofuzzy
威胁情报信息
自动上传到virustotal进行分析.
APK分析
代码分析
行为分析
详细行为分析
使用MobSF计算的信息。
网络分析
域名及ip列表
CN searchrecterm.kuwo.cn 175.102.178.59
CN e.189.cn 42.123.76.65
CN misc.service.kuwo.cn 175.102.178.59
CN adnew.qq.com 121.51.132.57
CN ce3e75d5.jpush.cn 183.232.58.243
CN graph.qq.com 203.205.239.161
CN tv.kuwo.cn 175.102.178.59
CN www.qchannel01.cn 175.25.19.40
CN long.open.weixin.qq.com 203.205.234.140
CN tsis.jpush.cn 103.230.236.51
CN shop.kuwo.cn 175.102.178.59
HK www.baidu.com 103.235.46.39
CN s-gt.getui.com 183.131.7.106
DE fr.register.xmpush.global.xiaomi.com 18.184.226.26
HK market.m.qq.com 203.205.253.140
CN scs.openspeech.cn 220.248.230.134
CN mobileinterfaces.kuwo.cn 175.102.178.60
HK debugx5.qq.com 203.205.253.183
CN shouji.kuwo.cn 175.102.178.60
CN player.kuwo.cn 175.102.178.60
m.irs01.com
CN wmvkdat.kuwo.cn 182.207.100.37
DE musicbrainz.org 138.201.227.205
HK openmobile.qq.com 203.205.254.62
CN tingshu.kuwo.cn 175.102.178.60
CN nmobi.kuwo.cn 175.102.178.59
CN antistealingtcpproxy.kuwo.cn 175.102.178.75
sdk.open.inc2.igexin.com
HK log.tbs.qq.com 129.226.106.211
c.isdspeed.qq.com
HK fusion.qq.com 203.205.254.103
CN b-gtc.getui.com 124.160.127.216
- alpha.w.api.zego.im 192.168.100.239
kzone.kuwo.cn
CN down.shouji.kuwo.cn 113.105.172.41
CN cmnsguider.yunos.com 203.119.169.69
CN img1.kwcdn.kuwo.cn 1.180.22.132
CN ksingserver.kuwo.cn 175.102.178.60
CN openapi.openspeech.cn 42.62.116.35
CN mobilefhtj.kuwo.cn 175.102.178.59
CN proxy.kuwo.cn 175.102.178.59
DE www.openssl.org 23.45.99.93
CN artistpicserver.kuwo.cn 175.102.178.60
CN jx.kuwo.cn 111.166.22.197
CN m.alipay.com 110.76.30.76
CN logconf.iflytek.com 220.248.230.134
CN pipeline.qiniu.com 180.97.147.243
HK tools.3g.qq.com 129.226.106.18
CN sdk.open.amp.igexin.com 183.134.98.71
CN m.kuwo.cn 175.102.178.60
mobilegw-1-64.test.alipay.net
CN api.weixin.qq.com 203.205.239.94
HK abroad.apilocate.amap.com 47.246.152.68
HK wappaygw.alipay.com 205.204.122.2
NL mta.oa.com 193.123.33.15
HK wup.imtt.qq.com 203.205.255.78
CN service.weibo.com 36.51.254.229
CN zhiboserver.kuwo.cn 42.63.50.220
CN adtest.tencentmusic.com 43.129.254.79
CN adt.xdrig.com 140.179.101.159
CN log.iflytek.com 220.248.230.134
HK hd2.3g.qq.com 203.205.253.183
CN nksingserver.kuwo.cn 175.102.178.60
CN wapi.kuwo.cn 120.133.22.7
CN www.cmpassport.com 211.136.10.131
US mobilegw.alipaydev.com 198.11.186.9
CN sdk.open.phone.igexin.com 183.131.7.98
game.kuwo.cn
US cgicol.amap.com 198.11.146.6
HK open.weibo.cn 114.134.80.166
- alphartv.w.api.zego.im 192.168.100.28
US raw.githubusercontent.com 185.199.109.133
CN msgstate.kuwo.cn 175.102.178.60
CN data.openspeech.cn 220.248.230.134
CN mfan.iclick.com.cn 113.200.91.122
CN msg-test.eclicks.cn 113.107.248.148
CN i.tddmp.com 116.196.71.30
CN onekey1.cmpassport.com 211.136.10.131
cluster.kuwo.cn
CN wap.cmpassport.com 120.197.235.27
CN album.kuwo.cn 175.102.178.60
HK mmgr.gtimg.com 203.205.136.77
CN vip.kuwo.cn 175.102.178.59
CN img1.kuwo.cn 182.207.100.37
CN log1.cmpassport.com 120.232.169.169
CA www.winimage.com 144.217.225.1
HK debugtbs.qq.com 203.205.253.140
HK bjuser.jpush.cn 122.9.15.248
CN sdk.open.lbs.igexin.com 183.134.98.68
alphartv.report.api.zego.im
- alpha.hb.api.zego.im 192.168.100.239
CN huodong.kuwo.cn 175.102.178.59
CN voice.upload.cxcnd.kuwo.cn 120.133.22.24
CN kwsing.kuwo.cn 175.102.178.60
CN iws.openspeech.cn 36.7.109.160
CN pay.kuwo.cn 120.133.22.20
HK jdpaycert.jd.com 202.77.129.48
spdtest.kuwo.cn
HK qzs.qq.com 203.205.137.76
CN zhibodown.kuwo.cn 175.102.178.60
US www.w3.org 128.30.52.100
HK cgi.connect.qq.com 203.205.254.62
CN posp.ipaynow.cn 211.154.166.174
CN g.koowo.com 175.102.178.59
NL idmb.register.xmpush.global.xiaomi.com 20.47.97.231
CN d.gt.igexin.com 183.134.98.71
US github.com 140.82.121.3
CN p.koowo.com 120.133.22.20
CN newlyric.kuwo.cn 120.133.22.29
BG www.ffmpeg.org 79.124.17.100
artistfeeds.tencentmusic.com
CN kweex.kuwo.cn 175.102.178.59
CN wifiapi02.51y5.net 183.146.20.81
CN search.kuwo.cn 120.133.22.29
CN img1.sycdn.kuwo.cn 115.231.130.141
HK cfg.imtt.qq.com 203.205.253.183
US media-mixstream-hk-test.zegocloud.com 65.9.66.122
CN i.kuwo.cn 175.102.178.60
CN mobi.kuwo.cn 175.102.178.59
HK restapi.amap.com 47.246.109.112
CN api.lianhong.com 60.28.220.125
CN metok.sys.miui.com 124.251.100.14
CN c-gtc.getui.com 183.131.7.106
CN antiserver.kuwo.cn 175.102.178.59
CN img4.kwcdn.kuwo.cn 1.180.22.137
CN comment.kuwo.cn 175.102.178.59
mobilegw.stable.alipay.net
CN iss.openspeech.cn 42.62.43.147
CN collect.ux.21cn.com 222.93.106.185
CN mobile.kuwo.cn 120.133.22.20
CN pingma.qq.com 175.27.204.225
HK soft.tbs.imtt.qq.com 203.205.137.101
CN weixin.qq.com 203.205.235.205
CN me.xdrig.com 116.198.14.141
NL register.xmpush.global.xiaomi.com 20.47.97.231
CN dataplan.kuwo.cn 175.102.178.59
CN ug.edm.weibo.cn 39.156.6.91
CN msdk.irs01.com 113.200.91.121
CN api.weibo.cn 36.51.254.229
CN userupload.kuwo.cn 60.28.210.99
US www.xunfei.cn 163.171.132.220
CN www.talkingdata.net 106.38.6.38
CN html.kuwo.cn 114.236.93.72
CN listeninglin.kuwo.cn 175.102.178.60
HK aiwx.html5.qq.com 129.226.103.24
DE alpha.report.api.zego.im 47.254.140.49
imei.z.irs01.com
CN ncomment.kuwo.cn 175.102.178.59
CN open.weixin.qq.com 203.205.239.154
CN nmsublist.kuwo.cn 175.102.178.59
HK l.qq.com 203.205.254.177
CN api.ipaynow.cn 103.244.232.20
CN collect.kuwo.cn 175.102.178.59
CN image.kuwo.cn 182.207.100.37
CN m.10010.com 58.215.122.244
CN sdk.verification.jiguang.cn 120.46.145.6
CN c-hzgt2.getui.com 183.131.7.107
schemas.android.com
CN open.e.189.cn 42.123.76.87
CN a.qchannel03.cn 175.25.17.118
CN msg.eclicks.cn 113.107.248.130
CN thirdsso.kugou.com 103.254.188.41
CN b.qchannel03.cn 140.143.180.29
- alphartv.hb.api.zego.im 192.168.100.28
US mclient.alipay.com 198.11.186.44
CN h5app.kuwo.cn 175.102.178.60
CN config.cmpassport.com 120.232.169.180
DE uc.qbox.me 47.246.43.229
CN webstat.kuwo.cn 175.102.178.60
CN mobilelog.kuwo.cn 175.102.178.59
mobilegw.aaa.alipay.net
HK mqqad.html5.qq.com 203.205.253.140
CN xcstat.kuwo.cn 175.102.178.59
SG ccc.sys.miui.com 161.117.71.135
CN vip1.kuwo.cn 120.133.22.29
CN msphoneclick.kuwo.cn 175.102.178.60
CN ling.kuwo.cn 175.102.178.59
CN dev.voicecloud.cn 58.67.223.138
CN loginserver.kuwo.cn 175.102.178.60
US www.jivesoftware.com 35.238.7.255
CN mta.qq.com 119.36.226.210
CN recall.kuwo.cn 175.102.178.59
CN log.qchannel03.cn 175.25.17.126
CH www.slf4j.org 83.166.144.67
CN mobilebasedata.kuwo.cn 175.102.178.60
CN mgxhtj.kuwo.cn 175.102.178.59
CN musicpay.kuwo.cn 175.102.178.60
CN mobitest.kuwo.cn 175.102.178.60
HK mcgw.alipay.com 205.204.122.2
CN pmir.3g.qq.com 113.96.208.65
HK h5pay.jd.com 202.77.129.42
CN imagexc.kuwo.cn 114.236.93.72
HK mdc.html5.qq.com 203.205.253.140
HK pms.mb.qq.com 203.205.253.140
CN empty.kuwo.cn 120.133.22.20
HK api.weibo.com 114.134.80.166
CN kuwosing.kuwo.cn 175.102.178.59
US xmlpull.org 74.50.62.60
CN dby.ipaynow.cn 211.154.166.182
CN kwimg1.kuwo.cn 114.236.93.72
HK apilocate.amap.com 47.246.152.69
CN www.kuwo.cn 120.133.22.29
CN baby.kuwo.cn 120.133.22.29
CN sale.kuwo.cn 175.102.178.59
CN datacenter.kuwo.cn 175.102.178.59
FR www.videolan.org 213.36.253.2
CN nmsearch.kuwo.cn 175.102.178.60
wlan.vnet.cn
CN truth.qchannel03.cn 175.25.17.124
FR upload.ffmpeg.org 213.36.253.119
CN zhiborecserver.kuwo.cn 175.102.178.59
DE www.qq.com 104.111.239.81
CN api.iimedia.cn 14.17.121.130
mobi.tencentmusic.com
RU uplog.qbox.me 79.133.177.230
ns.adobe.com
CN img3.kwcdn.kuwo.cn 1.180.22.137
US dashboard.agora.io 52.8.151.151
wapi.tencentmusic.com
CN h5.lianhong.com 60.28.220.125
CN pay.ipaynow.cn 203.107.56.224
US h5.kugou.com 163.171.132.119
HK mobilegw.alipay.com 205.204.122.81
CN api.ktvdaren.com 106.75.107.85
NL api.xmpush.xiaomi.com 20.47.97.231
RU h5.m.taobao.com 79.133.177.234
CN mlyric.kuwo.cn 175.102.178.60
opencloud.wostore.cn
NL ru.register.xmpush.global.xiaomi.com 20.47.97.231
DE resolver.msg.xiaomi.net 3.67.213.142
HK appsupport.qq.com 129.226.107.77
HK fingerprint.kuwo.kugou.com 103.243.93.9
CN resua.kuwo.cn 103.79.26.11
HK apiinit.amap.com 47.246.109.112
HK wa.gtimg.com 203.205.137.185
CN offline.aps.amap.com 59.82.34.144
网址或ip如果存在恶意地址,则需要注意.
截图并不完整,具体可到如下网址进行查看
https://beta.pithus.org/report/..c40f0
如果你觉得你的APP有问题,你可以使用此工具进行分析.保护隐私.直接卸载.
转载请注明出处及链接