Background
I like to use OS X for as much as possible when doing assessments, but on a recent Android test I had a hell of a time getting Drozer installed. I finally got it working and figured I’d share the steps in case anyone else out there runs into the same problems I had.
If you’re not familiar, Drozer is an awesome attack and testing framework for Android. You can read more about it here: https://labs.mwrinfosecurity.com/tools/drozer/ or on its main GitHub page https://github.com/mwrlabs/drozer
It’s written in Python and you can download the egg file. Since I do most of my android testing from Mac (with Genymotion and Burp), I figured I would just download the Drozer egg and install it with my native Python. The installation instructions don’t mention OS X, but they seemed simple enough for Linux (just using easy_install).
Turns out there’s quite a few dependency issues which were a pain to resolve. I’m gonna walk through the steps I took to finally get it up and running.
- officially supported UNDELETE commands. Maybe the DEC operating systemI'm not sure. Another semi-common practice on Unix system is to use /tmp as a place to put files you don’t want, but don’t want to immediately delete. They’ll be purged at the next reboot, but that didn’t happen often on servers.
- Global Nav Open Menu Global Nav Close Menu; Apple; Shopping Bag +.
- From the Apple menu in the corner of your screen, choose About This Mac. You should see the macOS name, such as macOS Big Sur, followed by its version number. If you need to know the build number as well, click the version number to see it. Which macOS version is the latest?
Dictionary - Free ebook download as Text File (.txt), PDF File (.pdf) or read book online for free. This is a dictionary file with all the words ever.
Dependency Hell
If you just download the egg and try to use “easy_install” on Mac, you’ll get some spectacular error codes when trying to install the dependencies. Drozer requires the following python modules:
The root of the problems is in pyOpenSSL. OS X El Capitan doesn’t come with OpenSSL installed anymore, and trying to compile pyOpenSSL will fail because it can’t find the required headers.
Installing Dependencies
First of all, don’t try to use Mac’s built-in python. Install python with homebrew ($ brew install python) and make sure you can “pip install” modules without needing sudo. Secondly, since Drozer has some hard coded dependencies on specific versions, I opted to install everything in a python virtual environment. I prefer to use virtualenvwrapper to create and manger virtualenvs:
Install OpenSSL. Use brew to install OpenSSL back onto OS X El Capitan. If it’s already present, uninstall and reinstall it:
Compile pyOpenSSL. Unfortunately, Drozer requires a specific version of pyOpenSSL - and this version has a typo that prevents it from compiling successfully. This took me forever to figure out until I saw a similar error and the fix here. We need to download the source for pyOpenSSL v0.13 then fix the typo (using sed):
The sed command fixes the typo (‘dup’ vs ‘dupe’). Next we need to build pyOpenSSL, but need to specify the location of the OpenSSL headers we installed from brew (using build_ext the ‘-L’ and ‘-I’ options):
Mac Os Mojave
Note: make sure you are in your drozer virtualenv before doing the build/install steps!
Install other dependencies. Once pyOpenSSL v0.13 is installed in the virtualenv, use easy_install to install the other dependencies:
Install Drozer. Finally, download the latest Drozer egg file from here: https://www.mwrinfosecurity.com/products/drozer/. Still inside your drozer virtualenv, use easy_install to install it. If all goes right it should work with no errors:
Running Drozer
You can now always run drozer from the virtual environment you created. Since I get sick of switching to virtual environments, it’s possible to just create a shortcut to run drozer from the virtual environment it’s in.
Create the file /usr/local/bin/drozer (or wherever you want the shortcut to be). For the shebang, put the absolute path the python executable for the drozer virtual environment. The file should look like this:
Now you have a command “drozer” in your path and can run it anywhere:
Hope this helps somebody! Happy android hacking :)
-ropnop
See also
CO-OP RPG ADVENTURE
Team up with friends from all over the world in this new online co-operative RPG from Spacetime Studios, creators of the smash-hit Pocket Legends.
Play this FREE game that unites desktop and mobile players across a huge variety of devices (iOS, Android, PC and Mac).
Arcane Legends is the ultimate mobile multiplayer experience!
CHOOSE YOUR PET!
Is your companion powerful in battle like a Wolf, a silent stalker like a Panther, or the world’s fastest Turtle? In Arcane Legends, you will collect a stable-full of powerful and mystical pets to aid you in your adventures. Each animal provides a different set of combat skills and buffs, so you can pick the one that suits your play style perfectly. Grow, feed, and play with dozens of different pets with unique attacks and special bonuses!
EXPLORE ARLOR
Discover a massive online world full of danger and intrigue. Carve out your destiny in the persistent world of Arlor as a deadly rogue, mystical sorcerer, or hulking warrior.
Battle foul goblins, trolls, necromancers and much more in your quest for glory and gold. Enjoy cinematic story-telling, dynamic and fast-paced combat, and a brand-new pets system.
Drol Mac Os Catalina
Seek out Arcane Legends now!