Forever And Always 0.9 DEMO Mac OS
Background
I like to use OS X for as much as possible when doing assessments, but on a recent Android test I had a hell of a time getting Drozer installed. I finally got it working and figured I’d share the steps in case anyone else out there runs into the same problems I had.
Review by pafin on May 16, 2019 Version: 0.9.3.0 OS: Windows 7 64-bit Ease of use: 7/10 Functionality: 1/10 Value for money: 1/10 Overall: 1/10 Report! Most excellent, it will let you set the frame rate, height and width as well as other stuff. The guitar tones and effects have always been great, the problems were always tons of bugs, nonworking features, and insanely intrusive and lame product registration mechanism. The product registration part still sucks; it is some godawful Flash-based app or something, and it is horribly designed and still atrociously bad.
If you’re not familiar, Drozer is an awesome attack and testing framework for Android. You can read more about it here: https://labs.mwrinfosecurity.com/tools/drozer/ or on its main GitHub page https://github.com/mwrlabs/drozer
Betfair live casino. It’s written in Python and you can download the egg file. Since I do most of my android testing from Mac (with Genymotion and Burp), I figured I would just download the Drozer egg and install it with my native Python. The installation instructions don’t mention OS X, but they seemed simple enough for Linux (just using easy_install).
Turns out there’s quite a few dependency issues which were a pain to resolve. I’m gonna walk through the steps I took to finally get it up and running.
Forever And Always 0.9 Demo Mac Os Catalina
Dependency Hell
If you just download the egg and try to use “easy_install” on Mac, you’ll get some spectacular error codes when trying to install the dependencies. Drozer requires the following python modules:
The root of the problems is in pyOpenSSL. OS X El Capitan doesn’t come with OpenSSL installed anymore, and trying to compile pyOpenSSL will fail because it can’t find the required headers.
Installing Dependencies
First of all, don’t try to use Mac’s built-in python. Install python with homebrew ($ brew install python) and make sure you can “pip install” modules without needing sudo. Free welcome bonus no deposit. Secondly, since Drozer has some hard coded dependencies on specific versions, I opted to install everything in a python virtual environment. I prefer to use virtualenvwrapper to create and manger virtualenvs:
Install OpenSSL. Use brew to install OpenSSL back onto OS X El Capitan. If it’s already present, uninstall and reinstall it:
Mac Os 9.0.4
Compile pyOpenSSL. Unfortunately, Drozer requires a specific version of pyOpenSSL - and this version has a typo that prevents it from compiling successfully. This took me forever to figure out until I saw a similar error and the fix here. We need to download the source for pyOpenSSL v0.13 then fix the typo (using sed):
The sed command fixes the typo (‘dup’ vs ‘dupe’). Next we need to build pyOpenSSL, but need to specify the location of the OpenSSL headers we installed from brew (using build_ext the ‘-L’ and ‘-I’ options):
Note: make sure you are in your drozer virtualenv before doing the build/install steps!
Install other dependencies. Once pyOpenSSL v0.13 is installed in the virtualenv, use easy_install to install the other dependencies:
Install Drozer. Finally, download the latest Drozer egg file from here: https://www.mwrinfosecurity.com/products/drozer/. Still inside your drozer virtualenv, use easy_install to install it. If all goes right it should work with no errors:
Running Drozer
You can now always run drozer from the virtual environment you created. Since I get sick of switching to virtual environments, it’s possible to just create a shortcut to run drozer from the virtual environment it’s in.
Create the file /usr/local/bin/drozer (or wherever you want the shortcut to be). For the shebang, put the absolute path the python executable for the drozer virtual environment. The file should look like this:
Now you have a command “drozer” in your path and can run it anywhere:
Hope this helps somebody! Happy android hacking :)
-ropnop