search

alterakey / trueseeing

Non-decompiling Android app vulnerability scanner (DC25 demo lab, CB17)
GNU General Public License v3.0
59 stars 14 forks source link

cryptographic value inspection failure case #460

Closed alterakey closed 7 months ago

alterakey commented 7 months ago 
[-] fatal: unhandled exception
Traceback (most recent call last):
  File "/Users/alterakey/works/trueseeing/wc/.venv/lib/python3.9/site-packages/trueseeing/app/inspect.py", line 167, in run
    await self._run(s)
  File "/Users/alterakey/works/trueseeing/wc/.venv/lib/python3.9/site-packages/trueseeing/app/inspect.py", line 181, in _run
    if not await self._run_cmd(o, line=None):
  File "/Users/alterakey/works/trueseeing/wc/.venv/lib/python3.9/site-packages/trueseeing/app/inspect.py", line 223, in _run_cmd
    await self._as_cmd(ent['e'](args=tokens))
  File "/Users/alterakey/works/trueseeing/wc/.venv/lib/python3.9/site-packages/trueseeing/app/inspect.py", line 229, in _as_cmd
    await coro
  File "/Users/alterakey/works/trueseeing/wc/.venv/lib/python3.9/site-packages/trueseeing/app/cmd/scan.py", line 65, in _scan
    nr = await scanner.scan(q)
  File "/Users/alterakey/works/trueseeing/wc/.venv/lib/python3.9/site-packages/trueseeing/core/scan.py", line 53, in scan
    await asyncio.gather(*[_call(k, v) for k,v in self._sigs.items()])
  File "/Users/alterakey/works/trueseeing/wc/.venv/lib/python3.9/site-packages/trueseeing/core/scan.py", line 48, in _call
    await ent['e']()
  File "/Users/alterakey/works/trueseeing/wc/.venv/lib/python3.9/site-packages/trueseeing/sig/android/crypto.py", line 60, in detect
    await asyncio.gather(self._do_detect_case1(), self._do_detect_case2())
  File "/Users/alterakey/works/trueseeing/wc/.venv/lib/python3.9/site-packages/trueseeing/sig/android/crypto.py", line 141, in _do_detect_case2
    typ = self._inspect_value_type(val)
  File "/Users/alterakey/works/trueseeing/wc/.venv/lib/python3.9/site-packages/trueseeing/sig/android/crypto.py", line 213, in _inspect_value_type
    r = b64decode(v)
  File "/Applications/Xcode.app/Contents/Developer/Library/Frameworks/Python3.framework/Versions/3.9/lib/python3.9/base64.py", line 87, in b64decode
    return binascii.a2b_base64(s)
binascii.Error: Invalid base64-encoded string: number of data characters (2009) cannot be 1 more than a multiple of 4