1 需求
2 语法
usage: soot-infoflow-cmd [OPTIONS]
-?,--help Print this help message
-a,--apkfile APK file to analyze
-aa,--aliasalgo Use the specified aliasing
algorithm (NONE, FLOWSENSITIVE,
PTSBASED, LAZY)
-ac,--additionalclasspath Additional JAR file that shal be
put on the classpath
-af,--aliasflowins Use a flow-insensitive alias
analysis
-al,--aplength Maximum access path length
-c,--configfile Use the given configuration file
-ca,--callbackanalyzer Use the specified callback
analyzer (DEFAULT, FAST)
-ce,--codeelimination Use the specified code
elimination algorithm (NONE,
PROPAGATECONSTS, REMOVECODE)
-cf,--callgraphdir The file in which to store and
from which to read serialized
callgraphs
-cg,--cgalgo Callgraph algorithm to use
(AUTO, CHA, VTA, RTA, SPARK,
GEOM)
-cp,--paths Compute the taint propagation
paths and not just
source-to-sink connections. This
is a shorthand notation for -pr
fast.
-cs,--callbacksourcemode Use the specified mode for
defining which callbacks
introduce which sources (NONE,
ALL, SOURCELIST)
-ct,--callbacktimeout Timeout for the callback
collection phase
-d,--mergedexfiles Merge all dex files in the given
APK file into one analysis
target
-ds,--dataflowsolver Use the specified data flow
solver (CONTEXTFLOWSENSITIVE,
FLOWINSENSITIVE)
-dt,--timeout Timeout for the main data flow
analysis
-ff,--analyzeframeworks Analyze the full frameworks
together with the app without
any optimizations
-i,--implicit Use the specified mode when
processing implicit data flows
(NONE, ARRAYONLY, ALL)
-im,--iccmodel File containing the
inter-component data flow model
(ICC model)
-l,--layoutmode Mode for considerung layout
controls as sources (NONE, PWD,
ALL)
-ls,--logsourcesandsinks Write the discovered sources and
sinks to the log output
-mc,--maxcallbackspercomponent Eliminate Android components
that have more than the given
number of callbacks
-md,--maxcallbacksdepth Only analyze callback chains up
to the given depth
-ms,--missingsummariesoutputfile Outputs a file with information
about which summaries are
missing
-mt,--maxthreadnum Limit the maximum number of
threads to the given value
-nc,--nocallbacks Do not analyze Android callbacks
-ne,--noexceptions Do not track taints across
exceptional control flow edges
-np,--noiccresultspurify Do not purify the ICC results,
i.e., do not remove simple flows
that also have a corresponding
ICC flow
-nr,--nothischainreduction Disable reduction of inner class
chains
-ns,--nostatic Do not track static data flows
-nt,--notypechecking Disable type checking during
taint propagation
-o,--outputfile Output XML file for the
discovered data flows
-ol,--outputlinenumbers Enable the output of bytecode
line numbers associated with
sources and sinks in XML results
-on,--originalnames Enable the usage of original
variablenames if available
-os,--onesourceatatime Analyze one source at a time
-ot,--onecomponentatatime Analyze one Android component at
a time
-p,--platformsdir Path to the platforms directory
from the Android SDK
-pa,--pathalgo Use the specified algorithm for
computing result paths
(CONTEXTSENSITIVE,
CONTEXTINSENSITIVE, SOURCESONLY)
-pr,--pathreconstructionmode Use the specified mode for
reconstructing taint propagation
paths (NONE, FAST, PRECISE).
-ps,--pathspecificresults Report different results for
same source/sink pairs if they
differ in their propagation
paths
-r,--enablereflection Enable support for reflective
method calls
-rt,--resulttimeout Timeout for the result
collection phase
-s,--sourcessinksfile Definition file for sources and
sinks
-sa,--singlejoinpointabstraction Only use a single abstraction at
join points, i.e., do not
support multiple sources for one
value
-sf,--staticmode Use the specified mode when
tracking static data flows
(CONTEXTFLOWSENSITIVE,
CONTEXTFLOWINSENSITIVE, NONE)
-si,--skipapkfile APK file to skip when processing
a directory of input files
-sp,--sequentialpathprocessing Process the result paths
sequentially instead of in
parallel
-t,--taintwrapperfile Definition file for the taint
wrapper
-tw,--taintwrapper Use the specified taint wrapper
algorithm (NONE, EASY,
STUBDROID, MULTI)
-wj,--writejimplefiles Write out the Jimple files
-x,--callgraphonly Only compute the callgraph and
terminate
3 示例
4 参考资料
GitHub - secure-software-engineering/FlowDroid: FlowDroid Static Data Flow Tracker
暑期编程PK赛 得CSDN机械键盘等精美礼品！
