search

MobSF / Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
https://opensecurity.in
GNU General Public License v3.0
17.12k stars 3.21k forks source link

Error Performing Static Analysis #1743

Closed Asecbug closed 3 years ago

Asecbug commented 3 years ago

ENVIRONMENT

OS and Version: ubuntu 20.04 desktop  x64
Python Version:  Python 3.8.5  
MobSF Version: Mobile Security Framework v3.4.4 Beta

EXPLANATION OF THE ISSUE

Error during static analysis.

STEPS TO REPRODUCE THE ISSUE

1. Upload apk
2. Upload complete
3. Static analysis starts
4. Error Performing Static Analysis

LOG FILE

(venv) sandbox@ubuntu:~/Desktop/Mobile-Security-Framework-MobSF$ ./run.sh 
....
[INFO] 04/Jun/2021 06:23:08 - Mobile Security Framework v3.4.4 Beta
[INFO] 04/Jun/2021 06:23:08 - OS: Linux
[INFO] 04/Jun/2021 06:23:08 - Platform: Linux-5.8.0-53-generic-x86_64-with-glibc2.29
[INFO] 04/Jun/2021 06:23:08 - Dist: ubuntu 20.04 focal
[INFO] 04/Jun/2021 06:23:08 - MobSF Basic Environment Check
[WARNING] 04/Jun/2021 06:23:08 - Dynamic Analysis related functions will not work. 
Make sure a Genymotion Android VM/Android Studio Emulator is running before performing Dynamic Analysis.
[INFO] 04/Jun/2021 06:23:09 - Checking for Update.
[INFO] 04/Jun/2021 06:23:09 - No updates available.
[INFO] 04/Jun/2021 06:23:13 - MIME Type: application/vnd.android.package-archive FILE: dropbox.apk
[INFO] 04/Jun/2021 06:23:13 - Performing Static Analysis of Android APK
[INFO] 04/Jun/2021 06:23:13 - Starting Analysis on: dropbox.apk
[INFO] 04/Jun/2021 06:23:13 - Generating Hashes
[INFO] 04/Jun/2021 06:23:14 - Unzipping
[INFO] 04/Jun/2021 06:23:16 - APK Extracted
[INFO] 04/Jun/2021 06:23:16 - Getting Hardcoded Certificates/Keystores
[INFO] 04/Jun/2021 06:23:16 - Getting AndroidManifest.xml from APK
[INFO] 04/Jun/2021 06:23:16 - Parsing AndroidManifest.xml
[INFO] 04/Jun/2021 06:23:19 - Fetching icon path
[INFO] 04/Jun/2021 06:23:21 - Extracting Manifest Data
[INFO] 04/Jun/2021 06:23:21 - Fetching Details from Play Store: com.dropbox.android
[INFO] 04/Jun/2021 06:23:21 - Manifest Analysis Started
[INFO] 04/Jun/2021 06:23:21 - Binary Analysis Started
[INFO] 04/Jun/2021 06:23:21 - Analyzing lib/armeabi-v7a/libbugsnag-ndk.so
[INFO] 04/Jun/2021 06:23:21 - Analyzing lib/armeabi-v7a/libbugsnag-root-detection.so
[INFO] 04/Jun/2021 06:23:21 - Analyzing lib/armeabi-v7a/libbugsnag-plugin-android-anr.so
[INFO] 04/Jun/2021 06:23:21 - Analyzing lib/armeabi-v7a/libBreakpadInstaller.so
[INFO] 04/Jun/2021 06:23:22 - Analyzing lib/armeabi-v7a/libDbxFileObserver.so
[INFO] 04/Jun/2021 06:23:22 - Analyzing lib/armeabi-v7a/libDropboxXplat.so
[INFO] 04/Jun/2021 06:23:26 - Analyzing lib/armeabi-v7a/libpspdfkit.so
[INFO] 04/Jun/2021 06:23:27 - Analyzing lib/arm64-v8a/libbugsnag-ndk.so
[INFO] 04/Jun/2021 06:23:27 - Analyzing lib/arm64-v8a/libbugsnag-root-detection.so
[INFO] 04/Jun/2021 06:23:27 - Analyzing lib/arm64-v8a/libbugsnag-plugin-android-anr.so
[INFO] 04/Jun/2021 06:23:27 - Analyzing lib/arm64-v8a/libBreakpadInstaller.so
[INFO] 04/Jun/2021 06:23:28 - Analyzing lib/arm64-v8a/libDbxFileObserver.so
[INFO] 04/Jun/2021 06:23:28 - Analyzing lib/arm64-v8a/libDropboxXplat.so
[INFO] 04/Jun/2021 06:23:31 - Analyzing lib/arm64-v8a/libpspdfkit.so
[INFO] 04/Jun/2021 06:23:33 - Analyzing lib/x86/libbugsnag-ndk.so
[INFO] 04/Jun/2021 06:23:33 - Analyzing lib/x86/libbugsnag-root-detection.so
[INFO] 04/Jun/2021 06:23:33 - Analyzing lib/x86/libbugsnag-plugin-android-anr.so
[INFO] 04/Jun/2021 06:23:33 - Analyzing lib/x86/libBreakpadInstaller.so
[INFO] 04/Jun/2021 06:23:33 - Analyzing lib/x86/libDbxFileObserver.so
[INFO] 04/Jun/2021 06:23:33 - Analyzing lib/x86/libDropboxXplat.so
[INFO] 04/Jun/2021 06:23:37 - Analyzing lib/x86/libpspdfkit.so
[INFO] 04/Jun/2021 06:23:38 - Analyzing lib/x86_64/libbugsnag-ndk.so
[INFO] 04/Jun/2021 06:23:38 - Analyzing lib/x86_64/libbugsnag-root-detection.so
[INFO] 04/Jun/2021 06:23:38 - Analyzing lib/x86_64/libbugsnag-plugin-android-anr.so
[INFO] 04/Jun/2021 06:23:38 - Analyzing lib/x86_64/libBreakpadInstaller.so
[INFO] 04/Jun/2021 06:23:38 - Analyzing lib/x86_64/libDbxFileObserver.so
[INFO] 04/Jun/2021 06:23:38 - Analyzing lib/x86_64/libDropboxXplat.so
[INFO] 04/Jun/2021 06:23:42 - Analyzing lib/x86_64/libpspdfkit.so
[INFO] 04/Jun/2021 06:23:43 - Reading Code Signing Certificate
[INFO] 04/Jun/2021 06:23:43 - Running APKiD 2.1.2
[INFO] 04/Jun/2021 06:23:52 - Trackers Database is up-to-date
[INFO] 04/Jun/2021 06:23:52 - Detecting Trackers
[INFO] 04/Jun/2021 06:23:55 - APK -> JAVA
[INFO] 04/Jun/2021 06:23:55 - Decompiling to Java with jadx
[INFO] 04/Jun/2021 06:25:00 - DEX -> SMALI
[INFO] 04/Jun/2021 06:25:00 - Converting classes3.dex to Smali Code
[INFO] 04/Jun/2021 06:25:00 - Converting classes5.dex to Smali Code
[INFO] 04/Jun/2021 06:25:00 - Converting classes4.dex to Smali Code
[INFO] 04/Jun/2021 06:25:00 - Converting classes.dex to Smali Code
[INFO] 04/Jun/2021 06:25:00 - Converting classes2.dex to Smali Code
[INFO] 04/Jun/2021 06:25:00 - Code Analysis Started on - java_source
[INFO] 04/Jun/2021 06:28:49 - Running NIAP Analyzer
[INFO] 04/Jun/2021 06:30:11 - Finished Code Analysis, Email and URL Extraction
[INFO] 04/Jun/2021 06:30:11 - Extracting Strings from APK
[INFO] 04/Jun/2021 06:30:16 - Detecting Firebase URL(s)
[INFO] 04/Jun/2021 06:30:17 - Performing Malware Check on extracted Domains
[ERROR] 04/Jun/2021 06:30:17 - Error Performing Static Analysis
Traceback (most recent call last):
  File "/home/sandbox/Desktop/Mobile-Security-Framework-MobSF/mobsf/StaticAnalyzer/views/android/static_analyzer.py", line 247, in static_analyzer
    code_an_dic['domains'] = MalwareDomainCheck().scan(
  File "/home/sandbox/Desktop/Mobile-Security-Framework-MobSF/mobsf/MalwareAnalyzer/views/MalwareDomainCheck.py", line 34, in __init__
    self.IP2Loc = IP2Location.IP2Location()
  File "/home/sandbox/Desktop/Mobile-Security-Framework-MobSF/venv/lib/python3.8/site-packages/IP2Location.py", line 155, in __init__
    if os.path.isfile(filename) == False:
  File "/usr/lib/python3.8/genericpath.py", line 30, in isfile
    st = os.stat(path)
TypeError: stat: path should be string, bytes, os.PathLike or integer, not NoneType
[ERROR] 04/Jun/2021 06:30:17 - stat: path should be string, bytes, os.PathLike or integer, not NoneType
[ERROR] 04/Jun/2021 06:30:17 - Internal Server Error: /static_analyzer/

apk sample Link: https://apkpure.com/kr/dropbox-cloud-storage-photo-backup-file-manager/com.dropbox.android

setting.py config

# noqa: E800
"""
Django settings for MobSF project.

MobSF and Django settings
"""

import imp
import logging
import os

from mobsf.MobSF.init import (
    first_run,
    get_mobsf_home,
    get_mobsf_version,
)

logger = logging.getLogger(__name__)

# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
#       MOBSF CONFIGURATION
# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
BANNER, VERSION, MOBSF_VER = get_mobsf_version()
USE_HOME = True
# True : All Uploads/Downloads will be stored in user's home directory
# False : All Uploads/Downloads will be stored under MobSF root directory

# MobSF Data Directory
BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
MobSF_HOME = get_mobsf_home(USE_HOME, BASE_DIR)
# Download Directory
DWD_DIR = os.path.join(MobSF_HOME, 'downloads/')
# Screenshot Directory
SCREEN_DIR = os.path.join(MobSF_HOME, 'downloads/screen/')
# Upload Directory
UPLD_DIR = os.path.join(MobSF_HOME, 'uploads/')
# Database Directory
DB_DIR = os.path.join(MobSF_HOME, 'db.sqlite3')
# Signatures used by modules
SIGNATURE_DIR = os.path.join(MobSF_HOME, 'signatures/')
# Tools Directory
TOOLS_DIR = os.path.join(BASE_DIR, 'DynamicAnalyzer/tools/')
# Secret File
SECRET_FILE = os.path.join(MobSF_HOME, 'secret')

# ==========Load MobSF User Settings==========
try:
    if USE_HOME:
        USER_CONFIG = os.path.join(MobSF_HOME, 'config.py')
        sett = imp.load_source('user_settings', USER_CONFIG)
        locals().update(  # lgtm [py/modification-of-locals]
            {k: v for k, v in list(sett.__dict__.items())
                if not k.startswith('__')})
        CONFIG_HOME = True
    else:
        CONFIG_HOME = False
except Exception:
    logger.exception('Reading Config')
    CONFIG_HOME = False

# ===MOBSF SECRET GENERATION AND DB MIGRATION====
SECRET_KEY = first_run(SECRET_FILE, BASE_DIR, MobSF_HOME)

# =============ALLOWED DOWNLOAD EXTENSIONS=====
ALLOWED_EXTENSIONS = {
    '.txt': 'text/plain',
    '.png': 'image/png',
    '.zip': 'application/zip',
    '.tar': 'application/x-tar',
    '.apk': 'application/octet-stream',
}
# =============ALLOWED MIMETYPES=================
APK_MIME = [
    'application/octet-stream',
    'application/vnd.android.package-archive',
    'application/x-zip-compressed',
    'binary/octet-stream',
]
IPA_MIME = [
    'application/iphone',
    'application/octet-stream',
    'application/x-itunes-ipa',
    'application/x-zip-compressed',
    'binary/octet-stream',
]
ZIP_MIME = [
    'application/zip',
    'application/octet-stream',
    'application/x-zip-compressed',
    'binary/octet-stream',
]
APPX_MIME = [
    'application/octet-stream',
    'application/vns.ms-appx',
    'application/x-zip-compressed',
]

# REST API only mode
# Set MOBSF_API_ONLY to 1 to enable REST API only mode
# In this mode, web UI related urls are disabled.
API_ONLY = os.getenv('MOBSF_API_ONLY', '0')

# -----External URLS--------------------------
MALWARE_DB_URL = 'https://www.malwaredomainlist.com/mdlcsv.php'
MALTRAIL_DB_URL = ('https://raw.githubusercontent.com/stamparm/aux/'
                   'master/maltrail-malware-domains.txt')
VIRUS_TOTAL_BASE_URL = 'https://www.virustotal.com/vtapi/v2/file/'
EXODUS_URL = 'https://reports.exodus-privacy.eu.org'
APPMONSTA_URL = 'https://api.appmonsta.com/v1/stores/android/details/'
ITUNES_URL = 'https://itunes.apple.com/lookup'
GITHUB_URL = ('https://raw.githubusercontent.com/'
              'MobSF/Mobile-Security-Framework-MobSF/'
              'master/mobsf/MobSF/init.py')
FRIDA_SERVER = 'https://api.github.com/repos/frida/frida/releases/tags/'
GOOGLE = 'https://www.google.com'
BAIDU = 'https://www.baidu.com/'
APKPURE = 'https://m.apkpure.com/android/{}/download?from=details'
APKTADA = 'https://apktada.com/download-apk/'
APKPLZ = 'https://apkplz.net/download-app/'

# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
# ============DJANGO SETTINGS =================
# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

# Database
# https://docs.djangoproject.com/en/dev/ref/settings/#databases
# Sqlite3 suport

DATABASES = {
    'default': {
        'ENGINE': 'django.db.backends.sqlite3',
        'NAME': DB_DIR,
    },
}
# End Sqlite3 support

# Postgres DB - Install psycopg2
"""
DATABASES = {
    'default': {
        'ENGINE': 'django.db.backends.postgresql_psycopg2',
        'NAME': 'mobsf',
        'USER': os.environ['POSTGRES_USER'],
        'PASSWORD': os.environ['POSTGRES_PASSWORD'],
        'HOST': os.environ['POSTGRES_HOST'],
        'PORT': 5432,
    }
}
# End Postgres support
"""
# ===============================================

DEBUG = True
DJANGO_LOG_LEVEL = DEBUG
ALLOWED_HOSTS = ['127.0.0.1', 'mobsf', '*']
# Application definition
INSTALLED_APPS = (
    # 'django.contrib.admin',
    'django.contrib.auth',
    'django.contrib.contenttypes',
    'django.contrib.sessions',
    'django.contrib.messages',
    'django.contrib.staticfiles',
    'mobsf.StaticAnalyzer',
    'mobsf.DynamicAnalyzer',
    'mobsf.MobSF',
    'mobsf.MalwareAnalyzer',
)
MIDDLEWARE_CLASSES = (
    'django.middleware.security.SecurityMiddleware',
    'whitenoise.middleware.WhiteNoiseMiddleware',
    'django.contrib.sessions.middleware.SessionMiddleware',
    'django.middleware.common.CommonMiddleware',
    'django.middleware.csrf.CsrfViewMiddleware',
    'django.contrib.auth.middleware.AuthenticationMiddleware',
    'django.contrib.auth.middleware.SessionAuthenticationMiddleware',
    'django.contrib.messages.middleware.MessageMiddleware',
    'django.middleware.clickjacking.XFrameOptionsMiddleware',
)
MIDDLEWARE = (
    'mobsf.MobSF.views.api.api_middleware.RestApiAuthMiddleware',
)
ROOT_URLCONF = 'mobsf.MobSF.urls'
WSGI_APPLICATION = 'mobsf.MobSF.wsgi.application'
LANGUAGE_CODE = 'en-us'
TIME_ZONE = os.getenv('TIME_ZONE', 'UTC')
USE_I18N = True
USE_L10N = True
USE_TZ = True
TEMPLATES = [
    {
        'BACKEND': 'django.template.backends.django.DjangoTemplates',
        'APP_DIRS': True,
        'DIRS':
            [
                os.path.join(BASE_DIR, 'templates'),
            ],
        'OPTIONS':
            {
                'debug': True,
            },
    },
]
MEDIA_ROOT = os.path.join(BASE_DIR, 'uploads')
MEDIA_URL = '/uploads/'
STATIC_URL = '/static/'
STATIC_ROOT = os.path.join(BASE_DIR, 'static')
STATICFILES_STORAGE = 'whitenoise.storage.CompressedStaticFilesStorage'
# 256MB
DATA_UPLOAD_MAX_MEMORY_SIZE = 268435456
# Better logging
LOGGING = {
    'version': 1,
    'disable_existing_loggers': True,
    'formatters': {
        'standard': {
            'format': '[%(levelname)s] %(asctime)-15s - %(message)s',
            'datefmt': '%d/%b/%Y %H:%M:%S',
        },
        'color': {
            '()': 'colorlog.ColoredFormatter',
            'format':
                '%(log_color)s[%(levelname)s] %(asctime)-15s - %(message)s',
            'datefmt': '%d/%b/%Y %H:%M:%S',
            'log_colors': {
                'DEBUG': 'cyan',
                'INFO': 'green',
                'WARNING': 'yellow',
                'ERROR': 'red',
                'CRITICAL': 'red,bg_white',
            },
        },
    },
    'handlers': {
        'logfile': {
            'level': 'DEBUG',
            'class': 'logging.FileHandler',
            'filename': os.path.join(MobSF_HOME, 'debug.log'),
            'formatter': 'standard',
        },
        'console': {
            'level': 'DEBUG',
            'class': 'logging.StreamHandler',
            'formatter': 'color',
        },
    },
    'loggers': {
        'django': {
            'handlers': ['console', 'logfile'],
            'level': 'DEBUG',
            'propagate': True,
        },
        'django.db.backends': {
            'handlers': ['console', 'logfile'],
            # DEBUG will log all queries, so change it to WARNING.
            'level': 'INFO',
            'propagate': False,   # Don't propagate to other handlers
        },
        'mobsf.MobSF': {
            'handlers': ['console', 'logfile'],
            'level': 'DEBUG',
            'propagate': False,
        },
        'mobsf.StaticAnalyzer': {
            'handlers': ['console', 'logfile'],
            'level': 'DEBUG',
            'propagate': False,
        },
        'mobsf.MalwareAnalyzer': {
            'handlers': ['console', 'logfile'],
            'level': 'DEBUG',
            'propagate': False,
        },
        'mobsf.DynamicAnalyzer': {
            'handlers': ['console', 'logfile'],
            'level': 'DEBUG',
            'propagate': False,
        },
    },
}
# ===================
# USER CONFIGURATION
# ===================
if CONFIG_HOME:
    logger.info('Loading User config from: %s', USER_CONFIG)
else:
    """
    IMPORTANT
    If 'USE_HOME' is set to True,
    then below user configuration settings are not considered.
    The user configuration will be loaded from
    .MobSF/config.py in user's home directory.
    """
    # ^CONFIG-START^: Do not edit this line
    # !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    #          MOBSF USER CONFIGURATIONS
    # !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    # -------------------------
    # STATIC ANALYZER SETTINGS
    # -------------------------

    # ==========ANDROID SKIP CLASSES==========================
    # Common third party classes/paths that will be skipped
    # during static analysis
    SKIP_CLASS_PATH = {
        'com/google/', 'androidx', 'okhttp2/', 'okhttp3/',
        'com/android/', 'com/squareup', 'okhttp/'
        'android/content/', 'com/twitter/', 'twitter4j/',
        'android/support/', 'org/apache/', 'oauth/signpost',
        'android/arch', 'org/chromium/', 'com/facebook',
        'org/spongycastle', 'org/bouncycastle',
        'com/amazon/identity/', 'io/fabric/sdk',
        'com/instabug', 'com/crashlytics/android',
        'kotlinx/', 'kotlin/',
    }

    # ==============================================

    # ======WINDOWS STATIC ANALYSIS SETTINGS ===========

    # Private key
    WINDOWS_VM_SECRET = 'mobsf/MobSF/windows_vm_priv_key.asc'
    # IP and Port of the MobSF Windows VM
    # example: WINDOWS_VM_IP = '127.0.0.1'   ;noqa E800
    WINDOWS_VM_IP = None
    WINDOWS_VM_PORT = '8000'
    # ==================================================

    # ==============3rd Party Tools=================
    """
    If you want to use a different version of 3rd party tools used by MobSF.
    You can do that by specifying the path here. If specified, MobSF will run
    the tool from this location.
    """

    # Android 3P Tools
    JADX_BINARY = '/home/sandbox/Desktop/jadx/bin/'
    BACKSMALI_BINARY = ''
    APKTOOL_BINARY = ''
    ADB_BINARY = ''

    # iOS 3P Tools
    JTOOL_BINARY = ''
    CLASSDUMP_BINARY = ''
    CLASSDUMP_SWIFT_BINARY = ''

    # COMMON
    JAVA_DIRECTORY = '/usr/bin/'
    VBOXMANAGE_BINARY = ''
    PYTHON3_PATH = '/usr/bin/'

    """
    Examples:
    JAVA_DIRECTORY = 'C:/Program Files/Java/jdk1.7.0_17/bin/'
    JAVA_DIRECTORY = '/usr/bin/'
    VBOXMANAGE_BINARY = '/usr/bin/VBoxManage'
    PYTHON3_PATH = 'C:/Users/Ajin/AppData/Local/Programs/Python/Python35-32/'
    JADX_BINARY = 'C:/Users/Ajin/AppData/Local/Programs/jadx/bin/jadx.bat'
    JADX_BINARY = '/Users/ajin/jadx/bin/jadx'
    """
    # ==========================================================
    # -------------------------
    # DYNAMIC ANALYZER SETTINGS
    # -------------------------

    # =======ANDROID DYNAMIC ANALYSIS SETTINGS===========
    ANALYZER_IDENTIFIER = ''
    FRIDA_TIMEOUT = 4
    # ==============================================

    # ================HTTPS PROXY ===============
    PROXY_IP = '127.0.0.1'
    PROXY_PORT = 1337  # Proxy Port
    # ===================================================

    # ========UPSTREAM PROXY SETTINGS ==============
    # If you are behind a Proxy
    UPSTREAM_PROXY_ENABLED = False
    UPSTREAM_PROXY_SSL_VERIFY = True
    UPSTREAM_PROXY_TYPE = 'http'
    UPSTREAM_PROXY_IP = '127.0.0.1'
    UPSTREAM_PROXY_PORT = 3128
    UPSTREAM_PROXY_USERNAME = ''
    UPSTREAM_PROXY_PASSWORD = ''
    # ==============================================

    # --------------------------
    # MALWARE ANALYZER SETTINGS
    # --------------------------
    DOMAIN_MALWARE_SCAN = False
    APKID_ENABLED = False
    # ==============================================

    # ========DISABLED BY DEFAULT COMPONENTS=========

    # Get AppMonsta API from https://appmonsta.com/dashboard/get_api_key/
    APPMONSTA_API = ''
    # ----------VirusTotal--------------------------
    VT_ENABLED = False
    VT_API_KEY = ''
    VT_UPLOAD = False
    # Before setting VT_ENABLED to True,
    # Make sure VT_API_KEY is set to your VirusTotal API key
    # register at: https://www.virustotal.com/#/join-us
    # You can get your API KEY from:
    # https://www.virustotal.com/en/user/<username>/apikey/
    # Files will be uploaded to VirusTotal
    # if VT_UPLOAD is set to True.
    # ==============================================
    # ^CONFIG-END^: Do not edit this line
github-actions[bot] commented 3 years ago

👋 @Asecbug Issues is only for reporting a bug/feature request. For limited support, questions, and discussions, please join MobSF Slack channel: http://tiny.cc/mobsf Please include all the requested and relevant information when opening a bug report. Improper reports will be closed without any response.

ajinabraham commented 3 years ago

This is caused by an update in IP2Location https://github.com/chrislim2888/IP2Location-Python/issues/15 You can use IP2Location 8.5.1 to fix this.

 source venv/bin/activate
 pip install IP2Location==8.5.1

and run MobSF again.

minnn0306 commented 3 years ago

[ERROR] 25/Jun/2021 14:59:12 - Error Performing Static Analysis Traceback (most recent call last): File "D:\Program Files (x86)\Mobile-Security-Framework-MobSF-3.4.0\Mobile-Security-Framework-MobSF-3.4.0\mobsf\StaticAnalyzer\views\android\static_analyzer.py", line 239, in static_analyzer code_an_dic['domains'] = MalwareDomainCheck().scan( File "D:\Program Files (x86)\Mobile-Security-Framework-MobSF-3.4.0\Mobile-Security-Framework-MobSF-3.4.0\mobsf\MalwareAnalyzer\views\MalwareDomainCheck.py", line 34, in init self.IP2Loc = IP2Location.IP2Location() File "d:\program files (x86)\mobile-security-framework-mobsf-3.4.0\mobile-security-framework-mobsf-3.4.0\venv\lib\site-packages\IP2Location.py", line 155, in init if os.path.isfile(filename) == False: File "D:\python38\lib\genericpath.py", line 30, in isfile st = os.stat(path) TypeError: stat: path should be string, bytes, os.PathLike or integer, not NoneType [ERROR] 25/Jun/2021 14:59:12 - stat: path should be string, bytes, os.PathLike or integer, not NoneType [ERROR] 25/Jun/2021 14:59:12 - Internal Server Error: /static_analyzer/

On windows, the same problem also appears. How to deal with it.

This method is still unable to solve the problem pip install IP2Location==8.5.1

minnn0306 commented 3 years ago

这是由IP2Location chrislim2888/IP2Location-Python#15 中的更新引起的， 您可以使用它IP2Location 8.5.1来解决此问题。

 source venv/bin/activate
 pip install IP2Location==8.5.1

并再次运行 MobSF。

On windows, the same problem also appears. How to deal with it.

This method is still unable to solve the problem pip install IP2Location==8.5.1

ajinabraham commented 3 years ago

you might not be installing it to the virtual environment. Pull the latest master and try running setup again.

minnn0306 commented 3 years ago

您可能没有将其安装到虚拟环境中。拉取最新的 master 并再次尝试运行 setup。

The problem has been solved after pulling the latest code. Thank you.