DroidXadmin/DroidSecureX

1from androguard.core.bytecodes.apk import APK2 3# Extract permissions and activities from APK4def rule_based_analysis(apk_path):5    try:6        apk = APK(apk_path)7        permissions = apk.get_permissions()8        activities = apk.get_activities()9        receivers = apk.get_receivers()10        package = apk.get_package()11 12        result = f"📦 Package: {package}\n"13        result += "🔐 Permissions:\n"14        for perm in permissions:15            result += f"- {perm}\n"16 17        result += "\n🏃 Activities: " + str(activities)18        result += "\n📡 Receivers: " + str(receivers)19 20        # Simple rule check for dangerous permissions21        dangerous = ["READ_SMS", "SEND_SMS", "RECEIVE_SMS", "READ_CONTACTS", "WRITE_CONTACTS", "READ_PHONE_STATE"]22        found_dangerous = [p for p in permissions if any(d in p for d in dangerous)]23        result += "\n\n✅ No dangerous behavior detected from permission scan." if not found_dangerous else "\n\n❗ Dangerous permissions found:\n" + "\n".join(found_dangerous)24 25        return result26    except Exception as e:27        return f"❌ Error during APK analysis: {str(e)}"28 29# Optional: Dummy CVE Lookup (You can later replace this with real API)30def lookup_cve(package_name):31    # Simulating empty CVE for testing32    return f"\n---\n\n❗ No vulnerabilities found or package not listed in CVE database."33