mirror of
https://github.com/MobSF/Mobile-Security-Framework-MobSF.git
synced 2026-10-12 02:06:59 +00:00
Update android_binary_analysis.pdf.html
This commit is contained in:
@@ -177,19 +177,19 @@ body {
|
||||
{{ certinfo | safe}}
|
||||
|
||||
{% if issued == "good" %}
|
||||
<strong>Certicate Status: </strong><span class="label label-success">Good</span>
|
||||
<strong>Certificate Status: </strong><span class="label label-success">Good</span>
|
||||
{% elif issued == "bad" %}
|
||||
<strong>Certicate Status: </strong><span class="label label-danger">Bad</span>
|
||||
<strong>Certificate Status: </strong><span class="label label-danger">Bad</span>
|
||||
<strong>Description:</strong>App Signed by 'Android Debug' Certificate.
|
||||
Production ready applications should not be signed with 'Android Debug' Certificate.
|
||||
{% elif issued == "missing" %}
|
||||
<strong>Certicate Status: </strong><span class="label label-warning">Certificate not found</span>
|
||||
<strong>Certificate Status: </strong><span class="label label-warning">Certificate not found</span>
|
||||
{% elif issued == "bad hash" and sha256Digest is True %}
|
||||
<strong>Certicate Status: </strong><span class="label label-warning">Warning</span>
|
||||
<strong>Certificate Status: </strong><span class="label label-warning">Warning</span>
|
||||
<strong>Description:</strong>The app is signed with `SHA1withRSA`. SHA1 hash algorithm is known to have collision issues.
|
||||
<strong>Note:</strong>The manifest indicates `SHA256withRSA` is in use. Be sure to manually confirm this issue.
|
||||
{% elif issued == "bad hash" %}
|
||||
<strong>Certicate Status: </strong><span class="label label-danger">Bad</span>
|
||||
<strong>Certificate Status: </strong><span class="label label-danger">Bad</span>
|
||||
<strong>Description:</strong>The app is signed with `SHA1withRSA`. SHA1 hash algorithm is known to have collision issues.
|
||||
{% endif %}
|
||||
</pre>
|
||||
|
||||
Reference in New Issue
Block a user