2022-02-23 14:07:13 +00:00
|
|
|
# Mobile Verification Toolkit (MVT)
|
2023-02-08 19:18:16 +00:00
|
|
|
# Copyright (c) 2021-2023 Claudio Guarnieri.
|
2022-02-23 14:07:13 +00:00
|
|
|
# Use of this software is governed by the MVT License 1.1 that can be found at
|
|
|
|
# https://license.mvt.re/1.1/
|
|
|
|
|
|
|
|
import hashlib
|
|
|
|
|
|
|
|
from mvt.android.parsers.backup import parse_backup_file, parse_tar_for_sms
|
|
|
|
|
|
|
|
from ..utils import get_artifact
|
|
|
|
|
|
|
|
|
|
|
|
class TestBackupParsing:
|
|
|
|
def test_parsing_noencryption(self):
|
|
|
|
file = get_artifact("android_backup/backup.ab")
|
|
|
|
with open(file, "rb") as f:
|
|
|
|
data = f.read()
|
|
|
|
ddata = parse_backup_file(data)
|
|
|
|
|
|
|
|
m = hashlib.sha256()
|
|
|
|
m.update(ddata)
|
2023-06-01 21:40:26 +00:00
|
|
|
assert (
|
|
|
|
m.hexdigest()
|
|
|
|
== "ce1ac5009fea5187a9f546b51e1446ba450243ae91d31dc779233ec0937b5d18"
|
|
|
|
)
|
2022-02-23 14:07:13 +00:00
|
|
|
sms = parse_tar_for_sms(ddata)
|
2022-03-18 10:10:06 +00:00
|
|
|
assert isinstance(sms, list)
|
2022-06-23 09:05:04 +00:00
|
|
|
assert len(sms) == 2
|
2022-02-23 14:07:13 +00:00
|
|
|
assert len(sms[0]["links"]) == 1
|
2022-06-23 09:05:04 +00:00
|
|
|
assert sms[0]["links"][0] == "http://google.com"
|
2022-02-23 14:07:13 +00:00
|
|
|
|
|
|
|
def test_parsing_encryption(self):
|
|
|
|
file = get_artifact("android_backup/backup2.ab")
|
|
|
|
with open(file, "rb") as f:
|
|
|
|
data = f.read()
|
|
|
|
ddata = parse_backup_file(data, password="123456")
|
|
|
|
|
|
|
|
m = hashlib.sha256()
|
|
|
|
m.update(ddata)
|
2023-06-01 21:40:26 +00:00
|
|
|
assert (
|
|
|
|
m.hexdigest()
|
|
|
|
== "f365ace1effbc4902c6aeba241ca61544f8a96ad456c1861808ea87b7dd03896"
|
|
|
|
)
|
2022-02-23 14:07:13 +00:00
|
|
|
sms = parse_tar_for_sms(ddata)
|
2022-03-18 10:10:06 +00:00
|
|
|
assert isinstance(sms, list)
|
2022-02-23 14:07:13 +00:00
|
|
|
assert len(sms) == 1
|
|
|
|
assert len(sms[0]["links"]) == 1
|
|
|
|
assert sms[0]["links"][0] == "https://google.com/"
|
|
|
|
|
2022-02-23 15:18:45 +00:00
|
|
|
def test_parsing_compression(self):
|
|
|
|
file = get_artifact("android_backup/backup3.ab")
|
|
|
|
with open(file, "rb") as f:
|
|
|
|
data = f.read()
|
|
|
|
ddata = parse_backup_file(data)
|
2022-02-23 14:07:13 +00:00
|
|
|
|
2022-02-23 15:18:45 +00:00
|
|
|
m = hashlib.sha256()
|
|
|
|
m.update(ddata)
|
2023-06-01 21:40:26 +00:00
|
|
|
assert (
|
|
|
|
m.hexdigest()
|
|
|
|
== "33e73df2ede9798dcb3a85c06200ee41c8f52dd2f2e50ffafcceb0407bc13e3a"
|
|
|
|
)
|
2022-02-23 15:18:45 +00:00
|
|
|
sms = parse_tar_for_sms(ddata)
|
2022-08-13 00:14:24 +00:00
|
|
|
print(sms)
|
2022-03-18 10:10:06 +00:00
|
|
|
assert isinstance(sms, list)
|
2022-02-23 15:18:45 +00:00
|
|
|
assert len(sms) == 1
|
|
|
|
assert len(sms[0]["links"]) == 1
|
|
|
|
assert sms[0]["links"][0] == "https://google.com/"
|