From 59b069f00614073da8b52847c90e5c7659533297 Mon Sep 17 00:00:00 2001 From: Nex Date: Fri, 28 Jan 2022 12:25:50 +0100 Subject: [PATCH] Added lookups for non-system packages on check-adb too --- mvt/android/modules/adb/packages.py | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/mvt/android/modules/adb/packages.py b/mvt/android/modules/adb/packages.py index 34e12f4..f64949a 100644 --- a/mvt/android/modules/adb/packages.py +++ b/mvt/android/modules/adb/packages.py @@ -9,6 +9,8 @@ import os import pkg_resources from .base import AndroidExtraction +from mvt.android.lookups.koodous import koodous_lookup +from mvt.android.lookups.virustotal import virustotal_lookup log = logging.getLogger(__name__) @@ -157,13 +159,19 @@ class Packages(AndroidExtraction): if result["package_name"] == package_name: self.results[i][cmd["field"]] = True + packages_to_lookup = [] for result in self.results: if result["system"]: continue + packages_to_lookup.append(result) self.log.info("Found non-system package with name \"%s\" installed by \"%s\" on %s", result["package_name"], result["installer"], result["timestamp"]) + if not self.fast_mode: + virustotal_lookup(packages_to_lookup) + koodous_lookup(packages_to_lookup) + self.log.info("Extracted at total of %d installed package names", len(self.results))