from libmproxy.protocol.http import decoded error

[cnscyy]

I have install mitmproxy using apt-get mitmproxy, the version is 0.15.1. it don't work when i install mitmproxy using pip install.
Then i run python VMclient.py
Traceback ImportError: cannot import name decoded.
The linux OS is Ubunt16.4

This is an error in mitmproxy, i want ask what envirment do you use? do you meet the same question?

[jheguia]

Hi, We're using mitmproxy version 0.11.3. They've been changing the API, so it's very likely that newer versions will not work with the dynamic analyzer. I'll try and change it to the new version, but I can't give you time estimates for that. Cheers, Juan 2016-12-01 5:18 GMT-03:00 cnscyy <notifications@github.com>:

…

I have install mitmproxy using apt-get mitmproxy, the version is 0.15.1. it don't work when i install mitmproxy using pip install. Then i run python VMclient.py Traceback ImportError: cannot import name decoded. The linux OS is Ubunt16.4 This is an error in mitmproxy, i want ask what envirment do you use? do you meet the same question? — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#1>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AIB9qiGGhWuXH_t5dMh0Ap1kaX3hJelmks5rDoK_gaJpZM4LBHMD> .

[cnscyy]

Thanks for answer my question. I use the same version of mitmproxy as yours, it did not appear this question. Than you a lot.

[cnscyy]

hello，in the dynamic analyzer, can i use android X86 4.4 or higher version？

[jheguia]

There are two problems with that: Cydia Substrate support and fixed network support. I was able to make a version of Toqueton that uses Xposed Framework instead of Cydia Substrate, but the newer images insisted on raising the dhcp daemon and changing the routes, thus evading the proxy. I haven't found a way to get the network interface to use fixed address and routes. Best regards, Juan 2016-12-16 2:30 GMT-03:00 cnscyy <notifications@github.com>:

…

hello，in the dynamic analyzer, can i use android X86 4.4 or higher version？ — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#1 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AIB9qjobZXLl4wQpfPiOrglKSy4PNfMKks5rIiHZgaJpZM4LBHMD> .

[cnscyy]

Thank you for your patience！
I have another question about this project. the VM_MANAGER_IP、REPORTER_IP、DOWNLOAD_APK_SITE and frontpage ip are the same or different?
if they are the same, is just the port number different?

[cnscyy]

this project--Marvin-dynamic-Analyzer can run in the windows?
it can be achieved with serveral vms instead of OpenNebula?

[jheguia]

Hi, VM_MANAGER_IP is the address where the server is running. REPORTER_IP is where the client is running, and DOWNLOAD_APK_SITE is where the Marvin front-end is running. You can run the different parts of Marvin in different machines, or in the same machine. Cheers, Juan 2016-12-22 6:25 GMT-03:00 cnscyy <notifications@github.com>:

…

Thank you for your patience！ I have another question about this project. the VM_MANAGER_IP、REPORTER_IP、DOWNLOAD_APK_SITE and frontpage ip are the same or different? if they are the same, is just the port number different? — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#1 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AIB9qmis3EhXJW_VzjHxuHvPRfWWIl9Hks5rKkIdgaJpZM4LBHMD> .

[jheguia]

It will not work "out of the box": it will require minor modifications to the startup scripts, figuring out how to redirect traffic to the proxy, and maybe do some changes to the calls to "sys" and the threads part. I think it's better if you run it in a Linux VM. As for replacing OpenNebula, any VM solution that lets you restore "live" snapshots programmatically should work fine. Best regards, Juan 2016-12-22 7:20 GMT-03:00 cnscyy <notifications@github.com>:

…

this project--Marvin-dynamic-Analyzer can run in the windows? it can be achieved with serveral vms instead of OpenNebula? — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#1 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AIB9qtemgBFNvS4TEIAIxGOJFj-fa5jtks5rKk7xgaJpZM4LBHMD> .

[cnscyy]

Hello，thanks a lot. I will run it in Linux VMs.
when i use emulator_setup.sh to root the android-x86 4.3, it always prompts "Permission denied":

mount: Permission denied

mkdir failed for /system/bin/.ext, Read-only file system

Unable to chmod /system/xbin/su: Read-only file system

remount failed: Permission denied

what should i do about this?

./emulator_setup.sh SSL 192.168.137.102 192.168.137.1
Run with {SSL/NOSSL} {EMULATOR-IP} {GATEWAY-IP-FOR-EMULATOR} as args
SSL
192.168.137.102
192.168.137.1
Using emulator address 192.168.137.102:5556

connected to 192.168.137.102:5556
192.168.137.102:5556
adb connect 192.168.137.102:5556
adbd is already running as root
adb -s 192.168.137.102:5556 root
already connected to 192.168.137.102:5556
adb connect 192.168.137.102:5556
push: emulator_support_files/Android-x86-RootScript-4.3/system/etc/init.sh -> /data/local/system/etc/init.sh
push: emulator_support_files/Android-x86-RootScript-4.3/system/bin/.ext/.su -> /data/local/system/bin/.ext/.su
push: emulator_support_files/Android-x86-RootScript-4.3/system/bin/README -> /data/local/system/bin/README
push: emulator_support_files/Android-x86-RootScript-4.3/system/app/Superuser.apk -> /data/local/system/app/Superuser.apk
push: emulator_support_files/Android-x86-RootScript-4.3/system/xbin/su -> /data/local/system/xbin/su
push: emulator_support_files/Android-x86-RootScript-4.3/system/xbin/daemonsu -> /data/local/system/xbin/daemonsu
push: emulator_support_files/Android-x86-RootScript-4.3/install-device.sh -> /data/local/install-device.sh
7 files pushed. 0 files skipped.
3413 KB/s (2628119 bytes in 0.751s)

---

Root script for Android 4.3
By Quinny899 @ XDA
Root by Chainfire @ XDA

Script loaded
Installing to device from device
Mounting...
mount: Permission denied
Removing old files...
rm failed for /system/xbin/daemonsu, Read-only file system
rm failed for /system/xbin/su, Read-only file system
rm failed for /system/app/Superuser.apk, Read-only file system
Copying files...
mkdir failed for /system/bin/.ext, Read-only file system
cp: /system/bin/.ext is not a directory
cp: /system/xbin/su: Read-only file system
cp: /system/xbin/daemonsu: Read-only file system
cp: /system/app/Superuser.apk: Read-only file system
install-device.sh[25]: can't create /system/etc/init.sh: Read-only file system
Setting permissions...
Unable to chmod /system/xbin/su: Read-only file system
Unable to chmod /system/xbin/daemonsu: No such file or directory
Unable to chmod /system/bin/.ext/.su: No such file or directory
Unable to chmod /system/bin/.ext: No such file or directory
Unable to chmod /system/etc/init.sh: Read-only file system
Cleaning up...
Finished. You need to reboot for root to be available
remount failed: Permission denied
sed: can't create temp file '/system/etc/init.shac2367': Read-only file system
/system/bin/sh: can't create /system/etc/init.sh: Read-only file system
/system/bin/sh: can't create /system/etc/init.sh: Read-only file system
/system/bin/sh: can't create /system/etc/init.sh: Read-only file system
/system/bin/sh: can't create /system/etc/init.sh: Read-only file system
/bin/.ext is not a directory
cp: /system/xbin/su: Read-only file system
cp: /system/xbin/daemonsu: Read-only file system
cp: /system/app/Superuser.apk: Read-only file system
install-device.sh[25]: can't create /system/etc/init.sh: Read-only file system
Setting permissions...

[cnscyy]

the android x86 system is android-x86-4.3-20130725.iso

[cnscyy]

Hello，sorry for bother you again!
the question of rooting android x86 4.3 has been solved.
now, i still have some question to ask you.
is the front-end combine the static-analyzer with dynamic-analyzer? i have not find link for dynamic-analyzer in the front pages.now the static-analyzer and dynamic-analyzer use the same database, but work independently at the same ip but different ports.

[jheguia]

The front end, the static analyzer and the dynamic analyzer all use the same DB backend, so you can see the results from the front end. The dynamic analyzer runs as stand alone; in fact you can have several clients for a server (as well as several Android VMs). The static analyzer is run from the front end, but is quite self-contained. Cheers, Juan 2017-01-10 23:44 GMT-03:00 cnscyy <notifications@github.com>:

…

Hello，sorry for bother you again! the question of rooting android x86 4.3 has been solved. now, i still have some question to ask you. is the front-end combine the static-analyzer with dynamic-analyzer? i have not find link for dynamic-analyzer in the front pages.now the static-analyzer and dynamic-analyzer use the same database, but work independently at the same ip but different ports. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#1 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AIB9qifLBQIgPuPJMh__S45VOv_z0v6uks5rREIFgaJpZM4LBHMD> .

[cnscyy]

hello，again.
now, i have run the VMmanage.py and VMclient.py. the REPORTER_IP='localhost:8081', i haven't see any code about the REPORTER_IP, when VMclient.py is running, it cann't send report to the ip, is there something i ignore?
when VMclient.py running, usingTrigger.py and Analyzer.py to analyze the apk, i cann't see anything in the results, the report: {'trigger': {}, 'analyzer': {}} is still empty. i want to ask it will feedback the results when testing in the android system. and is there something more i shoud do?
thanks for your patient!

[jheguia]

Hi, REPORTER_IP is used by Utils.get_reporter(), which itself is called by functions in Trigger.py and Analyzer.py. Perhaps you don't have forwarding enabled, or the iptables set? Check client/client_setup.sh and check that: a) You ran it as root b) The network interface mentioned (eth0) is the one your machine uses and there are no more network interfaces. c) The Android emulator routing tables have as default gateway the machine where you're running the client. You can check if everything works by running mitmproxy -T and accessing some unencrypted page from the Android browser: if it's working, the traffic should show up in mitmproxy. Cheers, Juan 2017-01-19 7:18 GMT-03:00 cnscyy <notifications@github.com>:

…

hello，again. now, i have run the VMmanage.py and VMclient.py. the REPORTER_IP='localhost:8081', i haven't see any code about the REPORTER_IP, when VMclient.py is running, it cann't send report to the ip, is there something i ignore? when VMclient.py running, usingTrigger.py and Analyzer.py to analyze the apk, i cann't see anything in the results, the report: {'trigger': {}, 'analyzer': {}} is still empty. i want to ask it will feedback the results when testing in the android system. and is there something more i shoud do? thanks for your patient! — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#1 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AIB9qvgDaD3w88G0RwFZaVN224iOKuoLks5rTzhygaJpZM4LBHMD> .

[cnscyy]

hi, thanks again!
through Analyzer.py call the StorageAnalyzer(self).analyze_storage(), in StorageAnalyzer.py
for keyword, value in self.sensitiveValues().iteritems():
if value in content:
self.analyzer.add_to_report(self.get_filter_id(),
"Found plaintext {0} (value {1}) in file {2}".format(keyword, value, file))
the self.sensitiveValues().iteritems() is the FUZZER_VALUES in the settings.py,
FUZZER_VALUES={
'PASSWORD': 's3cr3tpass',
'MAIL' : 'fakeemailandroid@gmail.com',
'PHONE' : '1112341234',
'CONTACTNAME' : 'C0ntactFuzz',
'CONTACTPHONE' : '1107060504'
}
for every time to compare the value with content, it is always different, so it never add anything to the report.
does the FUZZER_VALUES should be configed in some rules?
and in the project, i only see the Analyzer.py call the StorageAnalyzer, don't find the call to other analyzer file? is the something i don't do correctly?