MobSF 掃描 android apk 失敗

項目需要 AppScan
經過了 IBM的AppScan 和 許多其他工具的測試
目前還沒有確定用哪個

在使用 MobSF 的時候 掃描 iOS成功了、 但是掃描android apk的時候直接 error

---

報錯：

[ERROR] 17/Mar/2020 07:42:57 - Error Performing Static Analysis
Traceback (most recent call last):
  File "/Users/ondor/Desktop/Other_source/Mobile-Security-Framework-MobSF-master/MalwareAnalyzer/views/apkid.py", line 45, in apkid_analysis
    findings = output._build_json_output(res)['files']
AttributeError: 'OutputFormatter' object has no attribute '_build_json_output'

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/Users/ondor/Desktop/Other_source/Mobile-Security-Framework-MobSF-master/StaticAnalyzer/views/android/static_analyzer.py", line 188, in static_analyzer
    'app_dir'], app_dic['app_path'], app_dic['app_name'])
  File "/Users/ondor/Desktop/Other_source/Mobile-Security-Framework-MobSF-master/MalwareAnalyzer/views/apkid.py", line 48, in apkid_analysis
    findings = output.build_json_output(res)['files']
  File "/Users/ondor/Library/Python/3.7/lib/python/site-packages/apkid/output.py", line 117, in build_json_output
    for filename, matches in results.items():
AttributeError: 'list' object has no attribute 'items'
[ERROR] 17/Mar/2020 07:42:57 - 'list' object has no attribute 'items'
[ERROR] 17/Mar/2020 07:42:57 - Internal Server Error: /StaticAnalyzer/
[ERROR] 17/Mar/2020 07:42:57 - "GET /StaticAnalyzer/?name=pwcpoc202003131350.apk&type=apk&checksum=7199c44fd93ae925585997775a70257e HTTP/1.1" 500 4952

關鍵詞
…/apkid.py", line 45, in apkid_analysis
和
AttributeError: ‘OutputFormatter’ object has no attribute ‘_build_json_output’

在瀏覽器中搜索 發現
大致原因是因爲啓用了apkid
但是 我們並沒有用這玩意啊 這是個什麼東西啊

看到一個哥們這麼說：

不使用此功能的時候，也可以禁用 apkid 是吧？
MobSF/settings.py 是吧？

在目錄中找到此文件settings.py
在文件中搜索apkid
找到
APKID_ENABLED = True

改成 False
保存

重新掃描一下 掃描成功
OK 成功