{"id":19235614,"url":"https://github.com/vu1nt0tal/vehicle-security-toolkit","last_synced_at":"2025-12-15T22:10:06.047Z","repository":{"id":38204566,"uuid":"392330006","full_name":"Vu1nT0tal/Vehicle-Security-Toolkit","owner":"Vu1nT0tal","description":"汽车/安卓/固件/代码安全测试工具集","archived":false,"fork":false,"pushed_at":"2024-05-13T09:07:44.000Z","size":12628,"stargazers_count":543,"open_issues_count":5,"forks_count":107,"subscribers_count":11,"default_branch":"main","last_synced_at":"2024-05-14T19:08:24.335Z","etag":null,"topics":["android","apk","cve","pentest","reverse-engineering","security","static-analysis","vulnerability"],"latest_commit_sha":null,"homepage":"https://vulntotal-team.github.io/Vehicle-Security-Toolkit/","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Vu1nT0tal.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-08-03T13:37:31.000Z","updated_at":"2024-05-13T09:07:49.000Z","dependencies_parsed_at":"2024-03-13T04:25:01.104Z","dependency_job_id":"4101c612-83c3-42ec-8a70-a0846ead00da","html_url":"https://github.com/Vu1nT0tal/Vehicle-Security-Toolkit","commit_stats":null,"previous_names":["vu1nt0tal/vehicle-security-toolkit","vulntotal-team/vehicle-security-toolkit"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Vu1nT0tal%2FVehicle-Security-Toolkit","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Vu1nT0tal%2FVehicle-Security-Toolkit/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Vu1nT0tal%2FVehicle-Security-Toolkit/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Vu1nT0tal%2FVehicle-Security-Toolkit/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Vu1nT0tal","download_url":"https://codeload.github.com/Vu1nT0tal/Vehicle-Security-Toolkit/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247190250,"owners_count":20898702,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["android","apk","cve","pentest","reverse-engineering","security","static-analysis","vulnerability"],"created_at":"2024-11-09T16:17:35.381Z","updated_at":"2025-12-15T22:10:06.000Z","avatar_url":"https://github.com/Vu1nT0tal.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Vehicle-Security-Toolkit\n\n汽车/安卓/固件/代码安全测试工具集\n\n- [Vehicle-Security-Toolkit](#vehicle-security-toolkit)\n  - [安装](#安装)\n    - [init\\_local.sh](#init_localsh)\n    - [init\\_remote.sh](#init_remotesh)\n  - [固件提取](#固件提取)\n    - [img-extract.sh](#img-extractsh)\n    - [adb-extract.sh](#adb-extractsh)\n  - [APK 测试](#apk-测试)\n    - [apk-allinone.py](#apk-allinonepy)\n  - [二进制测试](#二进制测试)\n    - [bin-allinone.py](#bin-allinonepy)\n  - [源码测试](#源码测试)\n    - [src-allinone\\_java.py](#src-allinone_javapy)\n    - [src-allinone\\_c.py](#src-allinone_cpy)\n  - [系统测试](#系统测试)\n  - [漏洞测试](#漏洞测试)\n  - [隐私合规测试](#隐私合规测试)\n  - [APK Fuzz 测试](#apk-fuzz-测试)\n  - [Frida 测试脚本](#frida-测试脚本)\n  - [其他工具](#其他工具)\n  - [关注我们](#关注我们)\n\n## 安装\n\n在 Ubuntu20.04（Python3.8及以上）完整安装可能需要几个小时。如果担心破坏本地环境，可以使用虚拟机，具体请看 [dev](./dev)。\n\n### init_local.sh\n\n本地 Linux 设备安装 Android SDK，然后执行 `init_local.sh`。\n\n```sh\n$ sudo snap install android-studio --classic  # 完成后打开android-studio进行设置\n\n$ git clone https://github.com/firmianay/Vehicle-Security-Toolkit.git\n$ cd Vehicle-Security-Toolkit \u0026\u0026 ./init_local.sh\n```\n\n### init_remote.sh\n\n远程 Android 设备连接 ADB，然后执行 `init_remote.sh`：\n\n```sh\n$ ./init_remote.sh [android|linux] [adb|ssh ip:port]\n```\n\n注：Android 设备只有板子没有屏幕时可以使用 scrcpy 投屏。\n\n## 固件提取\n### img-extract.sh\n\n下载 fastboot.zip 包，解压后从 images 目录下取出 super.img。\n\n一键从 Android ROM 提取固件。\n\n```sh\n$ ./img-extract.sh [super.img|fastboot.zip]\n```\n\n### adb-extract.sh\n\n一键从 Android 设备提取固件。\n\n```sh\n$ ./adb-extract.sh\n******************* adb-extract.sh ********************\n    1. Collect basic information, init and selinux\n    2. Execute live commands\n    3. Execute package manager commands\n    4. Execute bugreport, dumpsys, appops\n    5. Acquire /system folder\n    6. Acquire /sdcard folder\n    7. Extract APK files\n    8. Extract data from content providers\n    9. Extract databases and keys\n    10. Extract compressed and bin files\n    11. Acquire an ADB Backup\n    12. Do all of the above\nChoose an option: \n```\n\n## APK 测试\n### apk-allinone.py\n\n一站式调用所有 APK 工具进行单个或批量扫描。[apk_scan](./apk_scan) 目录下的工具作为库被调用，也可以独立使用。\n\n```sh\n$ docker run -it --rm -p 8000:8000 opensecurity/mobile-security-framework-mobsf\n$ docker-compose -f ./tools/mobileAudit-main/docker-compose.yaml up\n\n$ find ~/apks -name \"*.apk\" | xargs realpath \u003e ./data/apk.list\n$ python3 apk-allinone.py --config ./data/apk.list --decompile\n```\n\n## 二进制测试\n### bin-allinone.py\n\n一站式调用所有二进制工具进行单个或批量扫描。[bin_scan](./bin_scan) 目录下的工具作为库被调用，也可以独立使用。\n\n```sh\n$ find ~/apks -type f | xargs file | grep \"ELF\" | cut -d \":\" -f 1 | xargs realpath \u003e ./data/bin.list\n$ python3 bin-allinone.py --config ./data/bin.list\n```\n\n## 源码测试\n### src-allinone_java.py\n\n一站式调用所有 Java/Android 源码工具进行单个或批量扫描。[src_scan](./src_scan) 目录下的工具作为库被调用，也可以独立使用。\n\n```sh\n$ readlink -f ~/hmi/apps/* \u003e ./data/src.list\n$ python3 src-allinone_java.py --config ./data/src.list --build_config ./demo/build_config.json --build\n```\n\n### src-allinone_c.py\n\n一站式调用所有 C/Cpp 源码工具进行批量扫描。\n\n```sh\n$ python3 src-allinone_c.py --src ~/source\n```\n\n## 系统测试\n\n一站式对 Android 内核配置、安全启动、SELinux 等进行扫描。\n\n```sh\n$ python3 sys-allinone.py --sys ~/source\n```\n\n## 漏洞测试\n\n一站式对 Android/Linux 设备进行漏洞扫描，[cve_scan](./cve_scan) 目录下的工具作为库被调用，也可以独立使用。\n\n```sh\n$ python3 cve_allinone.py --arch [x64|arm|aarch64] --connect [adb|ssh] --device ip:port\n```\n\n## 隐私合规测试\n\nAndroid App 隐私合规测试。\n\n```sh\n$ python3 tools/camille-master/camille.py -ns -t 3 -f demo.xls\n```\n\n## APK Fuzz 测试\n\n基于 drozer 实现的 Fuzz 工具。[apk_fuzz](./apk_fuzz)\n\n## Frida 测试脚本\n\n[Frida](./frida/)\n\n## 其他工具\n\n[其他工具](./others)\n\n## 关注我们\n\n[VulnTotal安全](https://github.com/VulnTotal-Team)致力于分享高质量原创文章和开源工具，包括物联网/汽车安全、移动安全、网络攻防等。\n\nGNU General Public License v3.0\n\n[![Stargazers over time](https://starchart.cc/VulnTotal-Team/Vehicle-Security-Toolkit.svg)](https://starchart.cc/VulnTotal-Team/Vehicle-Security-Toolkit)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fvu1nt0tal%2Fvehicle-security-toolkit","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fvu1nt0tal%2Fvehicle-security-toolkit","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fvu1nt0tal%2Fvehicle-security-toolkit/lists"}