MobSF/Mobile-Security-Framework-MobSF
1
0
Fork 0
mirror of https://github.com/MobSF/Mobile-Security-Framework-MobSF.git synced 2026-10-12 02:06:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

[SECURITY] Security Update + Dependency Bump (#2584)

Browse Source 
* Bump Dependencies
* Fix a Stored XSS: GHSA-8hf7-h89p-3pqj
* Remove all  | safe in templates and HTML from Python
* Add permissions to Github Actions
This commit is contained in:
Ajin Abraham
2026-01-25 22:33:34 -08:00
committed by GitHub
parent 457d1e61f3
commit 2b08dd050e
18 changed files with 258 additions and 354 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/SECURITY.md
+2 -1
View File
@@ -4,12 +4,13 @@ Keeping MobSF updated to the latest version is essential for ensuring security a
## Reporting a Vulnerability
Please report all security issues [here](https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/new) or email ajin25(gmail). We believe in coordinated and responsible disclosure.
Please report all security issues [here](https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/new). We believe in coordinated and responsible disclosure.
## Past Security Issues
| Vulnerability | Affected Versions |
| ------- | ------------------ |
| [Stored XSS via Manifest Analysis - Dialer Code Host Field](https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-8hf7-h89p-3pqj) | `<=4.4.4` |
| [Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction](https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-9gh8-9r95-3fc3) | `<=4.4.0` |
| [Path Traversal in GET /download/`<filename>` using absolute filenames in MobSF data directory)](https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-ccc3-fvfx-mw3v) | `<=4.4.0` |
| [Zip bomb Denial of Service (DoS) via Resource Exhaustion (Disk Space)](https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-c5vg-26p8-q8cr) | `<=4.3.2` |
.github/workflows/auto-comment.yml
+4
View File
@@ -2,6 +2,10 @@ name: Auto Comment
on: [issues, pull_request]
permissions:
issues: write
pull-requests: write
jobs:
run:
runs-on: ubuntu-latest
.github/workflows/codeql-analysis.yml
+3
View File
@@ -19,6 +19,9 @@ jobs:
# required to fetch internal or private CodeQL packs
packages: read
# required for commenting on pull requests
pull-requests: write
# only required for workflows in private repositories
actions: read
contents: read
.github/workflows/docker-latest.yml
+3
View File
@@ -5,6 +5,9 @@ on:
branches:
- master
permissions:
contents: read
jobs:
buildx:
runs-on: ubuntu-latest
.github/workflows/docker-release.yml
+3
View File
@@ -4,6 +4,9 @@ on:
release:
types: [created]
permissions:
contents: read
jobs:
buildx:
runs-on: ubuntu-latest
.github/workflows/docker-test.yml
+3
View File
@@ -4,6 +4,9 @@ on:
pull_request:
branches: [ master ]
permissions:
contents: read
jobs:
buildx:
runs-on: ubuntu-latest
.github/workflows/mobsf-test.yml
+3
View File
@@ -6,6 +6,9 @@ on:
pull_request:
branches: [ master ]
permissions:
contents: read
env:
MOBSF_DISABLE_AUTHENTICATION: "1"
.github/workflows/python-publish.yml
+3
View File
@@ -4,6 +4,9 @@ on:
release:
types: [created]
permissions:
contents: read
jobs:
deploy:
mobsf/MobSF/init.py
+1 -1
View File
@@ -18,7 +18,7 @@ from mobsf.install.windows.setup import windows_config_local
logger = logging.getLogger(__name__)
VERSION = '4.4.4'
VERSION = '4.4.5'
BANNER = r"""
__ __ _ ____ _____ _ _ _ _
| \/ | ___ | |__/ ___|| ___|_ _| || | | || |
mobsf/StaticAnalyzer/views/android/kb/android_manifest_desc.py
+85 -87
View File
@@ -1,7 +1,7 @@
MANIFEST_DESC = {
'well_known_assetlinks': {
'title': ('App Link assetlinks.json file not found'
'<br>[android:name=%s]<br>[android:host=%s]'),
'[android:name=%s][android:host=%s]'),
'level': 'high',
'description': ('App Link asset verification URL (%s) not found or '
'configured incorrectly. (Status Code: %s). '
@@ -22,7 +22,7 @@ MANIFEST_DESC = {
},
'clear_text_traffic': {
'title': ('Clear text traffic is Enabled For App'
'<br>[android:usesCleartextTraffic=true]'),
'[android:usesCleartextTraffic=true]'),
'level': 'high',
'description': ('The app intends to use cleartext network traffic,'
' such as cleartext HTTP, FTP stacks, DownloadManager,'
@@ -38,7 +38,7 @@ MANIFEST_DESC = {
'[android:usesCleartextTraffic=true]'),
},
'direct_boot_aware': {
'title': 'App is direct-boot aware <br>[android:directBootAware=true]',
'title': 'App is direct-boot aware [android:directBootAware=true]',
'level': 'info',
'description': ('This app can run before the user unlocks the device. '
'If you\'re using a custom subclass of Application, '
@@ -52,7 +52,7 @@ MANIFEST_DESC = {
},
'has_network_security': {
'title': ('App has a Network Security Configuration'
'<br>[android:networkSecurityConfig=%s]'),
'[android:networkSecurityConfig=%s]'),
'level': 'info',
'description': ('The Network Security Configuration feature lets apps'
' customize their network security settings in a safe,'
@@ -64,7 +64,7 @@ MANIFEST_DESC = {
},
'vulnerable_os_version': {
'title': ('App can be installed on a vulnerable '
'unpatched Android version<br>Android %s, [minSdk=%s]'),
'unpatched Android version %s, [minSdk=%s]'),
'level': 'high',
'description': ('This application can be installed on an older version'
' of android that has multiple unfixed '
@@ -76,8 +76,8 @@ MANIFEST_DESC = {
'unpatched Android version %s, [minSdk=%s]'),
},
'vulnerable_os_version2': {
'title': ('App can be installed on a vulnerable Android version'
'<br>Android %s, minSdk=%s]'),
'title': ('App can be installed on a vulnerable Android version %s,'
' minSdk=%s]'),
'level': 'warning',
'description': ('This application can be installed on an older version'
' of android that has multiple vulnerabilities. '
@@ -87,7 +87,7 @@ MANIFEST_DESC = {
' %s, [minSdk=%s]'),
},
'app_is_debuggable': {
'title': 'Debug Enabled For App<br>[android:debuggable=true]',
'title': 'Debug Enabled For App [android:debuggable=true]',
'level': 'high',
'description': ('Debugging was enabled on the app which makes it '
'easier for reverse engineers to hook a debugger to'
@@ -96,8 +96,7 @@ MANIFEST_DESC = {
'name': 'Debug Enabled For App [android:debuggable=true]',
},
'app_allowbackup': {
'title': ('Application Data can be Backed up'
'<br>[android:allowBackup=true]'),
'title': ('Application Data can be Backed up [android:allowBackup=true]'),
'level': 'warning',
'description': ('This flag allows anyone to backup your application'
' data via adb. It allows users who have enabled USB'
@@ -106,7 +105,7 @@ MANIFEST_DESC = {
'name': 'Application Data can be Backed up [android:allowBackup=true]',
},
'allowbackup_not_set': {
'title': ('Application Data can be Backed up<br>[android:allowBackup]'
'title': ('Application Data can be Backed up [android:allowBackup]'
' flag is missing.'),
'level': 'warning',
'description': ('The flag [android:allowBackup] should be set to false'
@@ -118,14 +117,14 @@ MANIFEST_DESC = {
' is missing.'),
},
'app_in_test_mode': {
'title': 'Application is in Test Mode <br>[android:testOnly=true]',
'title': 'Application is in Test Mode [android:testOnly=true]',
'level': 'high',
'description': ('It may expose functionality or data outside of itself'
' that would cause a security hole.'),
'name': 'Application is in Test Mode [android:testOnly=true]',
},
'task_affinity_set': {
'title': 'TaskAffinity is set for activity <br>(%s)',
'title': 'TaskAffinity is set for activity (%s)',
'level': 'warning',
'description': ('If taskAffinity is set, then other application'
' could read the Intents sent to Activities '
@@ -187,7 +186,7 @@ MANIFEST_DESC = {
'name': 'Activity (%s) is vulnerable to StrandHogg 2.0',
},
'improper_provider_permission': {
'title': 'Improper Content Provider Permissions<br>[%s]',
'title': 'Improper Content Provider Permissions [%s]',
'level': 'warning',
'description': ('A content provider permission was set to allows'
' access from any other app on the device. '
@@ -198,7 +197,7 @@ MANIFEST_DESC = {
},
'dialer_code_found': {
'title': ('Dailer Code: %s Found'
' <br>[android:scheme="android_secret_code"]'),
' [android:scheme="android_secret_code"]'),
'level': 'warning',
'description': ('A secret code was found in the manifest. These codes,'
' when entered into the dialer grant access to hidden'
@@ -207,7 +206,7 @@ MANIFEST_DESC = {
' [android:scheme="android_secret_code"]'),
},
'sms_receiver_port_found': {
'title': 'Data SMS Receiver Set on Port: %s Found<br>[android:port]',
'title': 'Data SMS Receiver Set on Port: %s Found [android:port]',
'level': 'warning',
'description': ('A binary SMS receiver is configured to listen on a'
' port. Binary SMS messages sent to a device are '
@@ -219,7 +218,7 @@ MANIFEST_DESC = {
'name': 'Data SMS Receiver Set on Port: %s Found. [android:port]',
},
'high_intent_priority_found': {
'title': 'High Intent Priority (%s) - {%s} Hit(s)<br>[android:priority]',
'title': 'High Intent Priority (%s) - {%s} Hit(s) [android:priority]',
'level': 'warning',
'description': ('By setting an intent priority higher than another'
' intent, the app effectively overrides '
@@ -227,7 +226,7 @@ MANIFEST_DESC = {
'name': 'High Intent Priority (%s) - {%s} Hit(s) [android:priority]',
},
'high_action_priority_found': {
'title': 'High Action Priority (%s)<br>[android:priority] ',
'title': 'High Action Priority (%s)[android:priority] ',
'level': 'warning',
'description': ('By setting an action priority higher than'
' another action, the app effectively '
@@ -235,8 +234,8 @@ MANIFEST_DESC = {
'name': 'High Action Priority (%s). [android:priority]',
},
'exported_protected_permission_signature': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission.'
'<br>%s<br>[android:exported=true]'),
'title': ('%s (%s) is Protected by a permission.'
'%s [android:exported=true]'),
'level': 'info',
'description': ('A%s %s is found to be exported, but'
' is protected by permission.'),
@@ -244,9 +243,9 @@ MANIFEST_DESC = {
' [%s] [android:exported=true]'),
},
'exported_protected_permission_normal': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission, but'
'title': ('%s (%s) is Protected by a permission, but'
' the protection level of the permission should be checked.'
'<br>%s <br>[android:exported=true]'),
'%s [android:exported=true]'),
'level': 'warning',
'description': ('A%s %s is found to be shared with other apps on the'
' device therefore leaving it accessible to any other'
@@ -264,9 +263,9 @@ MANIFEST_DESC = {
' [%s] [android:exported=true]'),
},
'exported_protected_permission_dangerous': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission, but'
'title': ('%s (%s) is Protected by a permission, but'
' the protection level of the permission should be checked.'
'<br>%s <br>[android:exported=true]'),
' %s [android:exported=true]'),
'level': 'warning',
'description': ('A%s %s is found to be shared with other apps on the'
' device therefore leaving it accessible to any other'
@@ -283,9 +282,9 @@ MANIFEST_DESC = {
' [%s] [android:exported=true]'),
},
'exported_protected_permission_signatureorsystem': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission, but'
'title': ('%s (%s) is Protected by a permission, but'
' the protection level of the permission should be checked.'
'<br>%s <br>[android:exported=true]'),
' %s [android:exported=true]'),
'level': 'info',
'description': ('A%s %s is found to be exported, but is protected by'
' a permission. However, the protection level of the'
@@ -300,9 +299,9 @@ MANIFEST_DESC = {
' [%s] [android:exported=true]'),
},
'exported_protected_permission_not_defined': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission, but'
'title': ('%s (%s) is Protected by a permission, but'
' the protection level of the permission should be checked.'
'<br>%s <br>[android:exported=true]'),
' %s [android:exported=true]'),
'level': 'warning',
'description': ('A%s %s is found to be shared with other apps on the'
' device therefore leaving it accessible to any other'
@@ -321,10 +320,9 @@ MANIFEST_DESC = {
'checked. [%s] [android:exported=true]'),
},
'exported_protected_permission_normal_app_level': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission at'
'title': ('%s (%s) is Protected by a permission at'
' the application level, but the protection level of the '
'permission should be checked.<br>%s <br>'
'[android:exported=true]'),
'permission should be checked. %s [android:exported=true]'),
'level': 'warning',
'description': ('A%s %s is found to be shared with other apps on the'
' device therefore leaving it accessible to any other'
@@ -341,10 +339,10 @@ MANIFEST_DESC = {
'checked. [%s] [android:exported=true]'),
},
'exported_protected_permission_dangerous_app_level': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission at'
'title': ('%s (%s) is Protected by a permission at'
' the application level, but the protection level of the '
'permission should be checked.'
'<br>%s <br>[android:exported=true]'),
' %s [android:exported=true]'),
'level': 'warning',
'description': ('A%s %s is found to be shared with other apps on the'
' device therefore leaving it accessible to any other'
@@ -362,8 +360,8 @@ MANIFEST_DESC = {
'checked. [%s] [android:exported=true]'),
},
'exported_protected_permission': {
'title': ('<strong>%s</strong> (%s) Protected by a permission at'
' the application level.<br>%s<br>[android:exported=true]'),
'title': ('%s (%s) Protected by a permission at'
' the application level. %s [android:exported=true]'),
'level': 'info',
'description': ('A%s %s is found to be exported, but is protected by'
' a permission at the application level.'),
@@ -371,10 +369,10 @@ MANIFEST_DESC = {
' [%s] [android:exported=true]'),
},
'exported_protected_permission_signatureorsystem_app_level': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission at '
'title': ('%s (%s) is Protected by a permission at '
'the application level, but the protection level of the '
'permission should be checked.'
'<br>%s <br>[android:exported=true]'),
' %s [android:exported=true]'),
'level': 'info',
'description': ('A%s %s is found to be exported, but is protected '
'by a permission at the application level. However,'
@@ -390,10 +388,10 @@ MANIFEST_DESC = {
' [%s] [android:exported=true]'),
},
'exported_protected_permission_app_level': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission'
'title': ('%s (%s) is Protected by a permission'
' at the application, but the protection level of the '
'permission should be checked.'
'<br>%s <br>[android:exported=true]'),
' %s [android:exported=true]'),
'level': 'warning',
'description': ('A%s %s is found to be shared with other apps on '
'the device therefore leaving it accessible to any'
@@ -413,8 +411,8 @@ MANIFEST_DESC = {
' [%s] [android:exported=true]'),
},
'explicitly_exported': {
'title': ('<strong>%s</strong> (%s) is not Protected.'
' <br>[android:exported=true]'),
'title': ('%s (%s) is not Protected.'
' [android:exported=true]'),
'level': 'warning',
'description': ('A%s %s is found to be shared with other apps on the'
' device therefore leaving it accessible to any other'
@@ -422,8 +420,8 @@ MANIFEST_DESC = {
'name': '%s %s is not Protected. [android:exported=true]',
},
'exported_intent_filter_exists': {
'title': ('<strong>%s</strong> (%s) is not Protected.<br>'
'An intent-filter exists.'),
'title': ('%s (%s) is not Protected.'
' An intent-filter exists.'),
'level': 'warning',
'description': ('A%s %s is found to be shared with other apps on the'
' device therefore leaving it accessible to any other '
@@ -433,7 +431,7 @@ MANIFEST_DESC = {
'name': '%s %s is not Protected.An intent-filter exists.',
},
'exported_provider': {
'title': ('<strong>%s</strong> (%s) is not Protected. <br>'
'title': ('%s (%s) is not Protected. '
'[Content Provider, targetSdkVersion < 17]'),
'level': 'warning',
'description': ('A%s %s is found to be shared with other apps'
@@ -447,9 +445,9 @@ MANIFEST_DESC = {
' [Content Provider, targetSdkVersion < 17]'),
},
'exported_provider_2': {
'title': ('<strong>%s</strong> (%s) would not be Protected if the'
'title': ('%s (%s) would not be Protected if the'
' application ran on a device where the the API level was'
' less than 17. <br>[Content Provider, '
' less than 17. [Content Provider, '
'targetSdkVersion >= 17]'),
'level': 'warning',
'description': ('The Content Provider(%s %s) would be exported if the'
@@ -464,9 +462,9 @@ MANIFEST_DESC = {
' [Content Provider, targetSdkVersion >= 17]'),
},
'exported_provider_normal': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission, but'
'title': ('%s (%s) is Protected by a permission, but'
' the protection level of the permission should be checked.'
'<br>%s <br>[Content Provider, targetSdkVersion < 17]'),
' %s [Content Provider, targetSdkVersion < 17]'),
'level': 'warning',
'description': ('A%s %s is found to be shared with other apps on the'
' device therefore leaving it accessible to any other'
@@ -485,9 +483,9 @@ MANIFEST_DESC = {
' targetSdkVersion < 17]'),
},
'exported_provider_danger': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission, '
'title': ('%s (%s) is Protected by a permission, '
'but the protection level of the permission should be '
'checked.<br>%s <br>[Content Provider, '
'checked. %s [Content Provider, '
'targetSdkVersion < 17]'),
'level': 'warning',
'description': ('A%s %s is found to be shared with other apps on the'
@@ -506,8 +504,8 @@ MANIFEST_DESC = {
'targetSdkVersion < 17]'),
},
'exported_provider_signature': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission.'
'<br>%s <br>[Content Provider, targetSdkVersion < 17]'),
'title': ('%s (%s) is Protected by a permission.'
' %s [Content Provider, targetSdkVersion < 17]'),
'level': 'info',
'description': ('A%s %s is found to be shared with other apps on the'
' device therefore leaving it accessible to any other'
@@ -517,9 +515,9 @@ MANIFEST_DESC = {
'targetSdkVersion < 17]'),
},
'exported_provider_signatureorsystem': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission,'
'title': ('%s (%s) is Protected by a permission,'
' but the protection level of the permission should be '
'checked.<br>%s <br>[Content Provider, '
'checked. %s [Content Provider, '
'targetSdkVersion < 17]'),
'level': 'info',
'description': ('A%s %s is found to be exported, but is protected by'
@@ -535,9 +533,9 @@ MANIFEST_DESC = {
'targetSdkVersion < 17]'),
},
'exported_provider_unknown': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission, but'
'title': ('%s (%s) is Protected by a permission, but'
' the protection level of the permission should be checked.'
'<br>%s <br>[Content Provider, targetSdkVersion < 17]'),
' %s [Content Provider, targetSdkVersion < 17]'),
'level': 'warning',
'description': ('A%s %s is found to be shared with other apps on the '
'device therefore leaving it accessible to any other '
@@ -556,10 +554,10 @@ MANIFEST_DESC = {
' targetSdkVersion < 17]'),
},
'exported_provider_normal_app': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission at'
'title': ('%s (%s) is Protected by a permission at'
' the application level, but the protection level of the'
' permission should be checked.'
'<br>%s <br>[Content Provider, targetSdkVersion < 17]'),
' %s [Content Provider, targetSdkVersion < 17]'),
'level': 'warning',
'description': ('A%s %s is found to be shared with other apps on the'
' device therefore leaving it accessible to any other'
@@ -577,10 +575,10 @@ MANIFEST_DESC = {
' [%s] [Content Provider, targetSdkVersion < 17]'),
},
'exported_provider_danger_appl': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission at '
'title': ('%s (%s) is Protected by a permission at '
'the application level, but the protection level of the '
'permission should be checked.'
'<br>%s <br>[Content Provider, targetSdkVersion < 17]'),
' %s [Content Provider, targetSdkVersion < 17]'),
'level': 'warning',
'description': ('A%s %s is found to be shared with other apps on the'
' device therefore leaving it accessible to any other'
@@ -598,8 +596,8 @@ MANIFEST_DESC = {
'[%s] [Content Provider, targetSdkVersion < 17]'),
},
'exported_provider_signature_appl': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission at'
' the application level.<br>%s <br>[Content Provider,'
'title': ('%s (%s) is Protected by a permission at'
' the application level. %s [Content Provider,'
' targetSdkVersion < 17]'),
'level': 'info',
'description': ('A%s %s is found to be shared with other apps on'
@@ -610,10 +608,10 @@ MANIFEST_DESC = {
'[%s] [Content Provider, targetSdkVersion < 17]'),
},
'exported_provider_signatureorsystem_app': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission at'
'title': ('%s (%s) is Protected by a permission at'
' the application level, but the protection level of the'
' permission should be checked.'
'<br>%s <br>[Content Provider, targetSdkVersion < 17]'),
' %s [Content Provider, targetSdkVersion < 17]'),
'level': 'info',
'description': ('A%s %s is found to be exported, but is protected by'
' a permission at the application level. However, the'
@@ -628,10 +626,10 @@ MANIFEST_DESC = {
'checked. [%s] [Content Provider, targetSdkVersion < 17]'),
},
'exported_provider_unknown_app': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission at'
'title': ('%s (%s) is Protected by a permission at'
' application level, but the protection level of the '
'permission should be checked.<br>%s '
'<br>[Content Provider, targetSdkVersion < 17]'),
'permission should be checked. %s '
'[Content Provider, targetSdkVersion < 17]'),
'level': 'warning',
'description': ('A%s %s is found to be shared with other apps on the'
' device therefore leaving it accessible to any other'
@@ -650,11 +648,11 @@ MANIFEST_DESC = {
' [%s] [Content Provider, targetSdkVersion < 17]'),
},
'exported_provider_normal_new': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission, '
'title': ('%s (%s) is Protected by a permission, '
'but the protection level of the permission should be '
'checked if the application runs on a device where the '
'the API level is less than 17'
'<br>%s <br>[Content Provider, targetSdkVersion >= 17]'),
' %s [Content Provider, targetSdkVersion >= 17]'),
'level': 'warning',
'description': ('The Content Provider (%s) would be exported if the'
' application ran on a device where the the API level'
@@ -673,10 +671,10 @@ MANIFEST_DESC = {
' [%s] [Content Provider, targetSdkVersion >= 17]'),
},
'exported_provider_danger_new': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission,'
'title': ('%s (%s) is Protected by a permission,'
' but the protection level of the permission should be '
'checked if the application runs on a device where '
'the API level is less than 17.<br>%s <br>'
'the API level is less than 17. %s '
'[Content Provider, targetSdkVersion >= 17]'),
'level': 'warning',
'description': ('The Content Provider(%s) would be exported if the'
@@ -696,8 +694,8 @@ MANIFEST_DESC = {
' [%s] [Content Provider, targetSdkVersion >= 17]'),
},
'exported_provider_signature_new': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission.'
'<br>%s <br>[Content Provider, targetSdkVersion >= 17]'),
'title': ('%s (%s) is Protected by a permission.'
' %s [Content Provider, targetSdkVersion >= 17]'),
'level': 'info',
'description': ('The Content Provider(%s) would be exported if the'
' application ran on a device where the the API level'
@@ -707,9 +705,9 @@ MANIFEST_DESC = {
' [%s] [Content Provider, targetSdkVersion >= 17]'),
},
'exported_provider_signatureorsystem_new': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission, but'
'title': ('%s (%s) is Protected by a permission, but'
' the protection level of the permission should be checked.'
'<br>%s <br>[Content Provider, targetSdkVersion >= 17]'),
' %s [Content Provider, targetSdkVersion >= 17]'),
'level': 'info',
'description': ('The Content Provider(%s) would be exported if the '
'application ran on a device where the API level was'
@@ -726,10 +724,10 @@ MANIFEST_DESC = {
' [%s] [Content Provider, targetSdkVersion >= 17]'),
},
'exported_provider_unknown_new': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission, but'
'title': ('%s (%s) is Protected by a permission, but'
' the protection level of the permission should be checked'
' if the application runs on a device where the the API '
'level is less than 17.<br>%s <br>'
'level is less than 17. %s '
'[Content Provider, targetSdkVersion >= 17]'),
'level': 'warning',
'description': ('The Content Provider(%s) would be exported if the'
@@ -751,11 +749,11 @@ MANIFEST_DESC = {
' [%s] [Content Provider, targetSdkVersion >= 17]'),
},
'exported_provider_normal_app_new': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission at'
'title': ('%s (%s) is Protected by a permission at'
' the application level, but the protection level of the'
' permission should be checked if the application runs on'
' a device where the the API level is less than 17'
'<br>%s <br>[Content Provider, targetSdkVersion >= 17]'),
' %s [Content Provider, targetSdkVersion >= 17]'),
'level': 'warning',
'description': ('The Content Provider (%s) would be exported if the'
' application ran on a device where the the API '
@@ -775,11 +773,11 @@ MANIFEST_DESC = {
' [%s] [Content Provider, targetSdkVersion >= 17]'),
},
'exported_provider_danger_app_new': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission at'
'title': ('%s (%s) is Protected by a permission at'
' the application level, but the protection level of the'
' permission should be checked if the application runs on'
' a device where the the API level is less than 17.'
'<br>%s <br>[Content Provider, targetSdkVersion >= 17]'),
' %s [Content Provider, targetSdkVersion >= 17]'),
'level': 'warning',
'description': ('The Content Provider(%s) would be exported if the'
' application ran on a device where the the API '
@@ -799,8 +797,8 @@ MANIFEST_DESC = {
'[Content Provider, targetSdkVersion >= 17]'),
},
'exported_provider_signature_app_new': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission at'
' the application level.<br>%s<br>'
'title': ('%s (%s) is Protected by a permission at'
' the application level. %s '
'[Content Provider, targetSdkVersion >= 17]'),
'level': 'info',
'description': ('The Content Provider(%s) would be exported if the'
@@ -811,10 +809,10 @@ MANIFEST_DESC = {
' [%s] [Content Provider, targetSdkVersion >= 17]'),
},
'exported_provider_signatureorsystem_app_new': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission at'
'title': ('%s (%s) is Protected by a permission at'
' the application level, but the protection level of the'
' permission should be checked.'
'<br>%s <br>[Content Provider, targetSdkVersion >= 17]'),
' %s [Content Provider, targetSdkVersion >= 17]'),
'level': 'info',
'description': ('The Content Provider(%s) would be exported if the'
' application ran on a device where the API level was'
@@ -831,11 +829,11 @@ MANIFEST_DESC = {
' [%s] [Content Provider, targetSdkVersion >= 17]'),
},
'exported_provider_unknown_app_new': {
'title': ('<strong>%s</strong> (%s) is Protected by a permission at '
'title': ('%s (%s) is Protected by a permission at '
'the application level, but the protection level of the '
'permission should be checked if the application runs on'
' a device where the the API level is less than 17.'
'<br>%s <br>[Content Provider, targetSdkVersion >= 17]'),
' %s [Content Provider, targetSdkVersion >= 17]'),
'level': 'warning',
'description': ('The Content Provider(%s) would be exported if the'
' application ran on a device where the the API level'
mobsf/StaticAnalyzer/views/android/manifest_analysis.py
+15
View File
@@ -6,6 +6,7 @@ from urllib.parse import urlparse
import requests
from concurrent.futures import ThreadPoolExecutor
from django.utils.html import escape
from mobsf.MobSF.utils import (
append_scan_status,
@@ -68,6 +69,13 @@ ANDROID_API_LEVEL_MAP = {
}
def escape_manifest_attribute(value):
"""Escape manifest attributes."""
if not value:
return value
return escape(value)
def assetlinks_check(act_name, well_knowns):
"""Well known assetlink check."""
findings = []
@@ -314,6 +322,7 @@ def manifest_analysis(app_dic, man_data_dic):
# Checks for Activities
if itemname in ['Activity', 'Activity-Alias']:
item = node.getAttribute(f'{ns}:name')
item = escape_manifest_attribute(item)
# Browsable Activities
browse_dic = get_browsable_activities(node, ns)
if browse_dic['browsable']:
@@ -377,6 +386,7 @@ def manifest_analysis(app_dic, man_data_dic):
if node.getAttribute(f'{ns}:exported') == 'true':
perm = ''
item = node.getAttribute(f'{ns}:name')
item = escape_manifest_attribute(item)
if node.getAttribute(f'{ns}:permission'):
# permission exists
perm = ('<strong>Permission: </strong>'
@@ -490,6 +500,7 @@ def manifest_analysis(app_dic, man_data_dic):
is_inf = True
if is_inf:
item = node.getAttribute(f'{ns}:name')
item = escape_manifest_attribute(item)
if node.getAttribute(f'{ns}:permission'):
# permission exists
perm = ('<strong>Permission: </strong>'
@@ -605,6 +616,7 @@ def manifest_analysis(app_dic, man_data_dic):
if itemname == 'Content Provider' and int(man_data_dic['target_sdk']) < ANDROID_4_2_LEVEL:
perm = ''
item = node.getAttribute(f'{ns}:name')
item = escape_manifest_attribute(item)
if node.getAttribute(f'{ns}:permission'):
# permission exists
perm = ('<strong>Permission: </strong>'
@@ -686,6 +698,7 @@ def manifest_analysis(app_dic, man_data_dic):
perm = ''
item = node.getAttribute(
f'{ns}:name')
item = escape_manifest_attribute(item)
if node.getAttribute(f'{ns}:permission'):
# permission exists
perm = ('<strong>Permission: </strong>'
@@ -773,10 +786,12 @@ def manifest_analysis(app_dic, man_data_dic):
for data in data_tag:
if data.getAttribute(f'{ns}:scheme') == 'android_secret_code':
xmlhost = data.getAttribute(f'{ns}:host')
xmlhost = escape_manifest_attribute(xmlhost)
ret_list.append(('dialer_code_found', (xmlhost,), ()))
elif data.getAttribute(f'{ns}:port'):
dataport = data.getAttribute(f'{ns}:port')
dataport = escape_manifest_attribute(dataport)
ret_list.append(('sms_receiver_port_found', (dataport,), ()))
# INTENTS
processed_priorities = {}
mobsf/templates/pdf/android_report.html
+1 -1
View File
@@ -522,7 +522,7 @@
<tr>
<td>{{ forloop.counter }}</td>
<td>
{{item|key:"title" | safe}}
{{item|key:"title"}}
</td>
<td>
mobsf/templates/static_analysis/android_binary_analysis.html
+1 -1
View File
@@ -1140,7 +1140,7 @@
<tr>
<td>{{ forloop.counter }}</td>
<td>
{{item|key:"title" | safe}}
{{item|key:"title"}}
</td>
<td>
mobsf/templates/static_analysis/android_source_analysis.html
+1 -1
View File
@@ -876,7 +876,7 @@
<tr>
<td>{{ forloop.counter }}</td>
<td>
{{item|key:"title" | safe}}
{{item|key:"title"}}
</td>
<td>
mobsf/templates/static_analysis/compare.html
+3 -3
View File
@@ -872,17 +872,17 @@
<tr>
<td>
{% for url in urls.common %}
{{ url | safe}} <br/>
{{ url }} <br/>
{% endfor %}
</td>
<td>
{% for url in urls.only_first %}
{{ url | safe }} <br/>
{{ url }} <br/>
{% endfor %}
</td>
<td>
{% for url in urls.only_second %}
{{ url | safe}} <br/>
{{ url }} <br/>
{% endfor %}
</td>
</tr>
mobsf/templates/static_analysis/windows_binary_analysis.html
+1 -1
View File
@@ -430,7 +430,7 @@
<div class="modal-body">
<pre><code>
{% for string in strings %}
{{string | safe}}
{{string}}
{% endfor %}
</code></pre>
</div>
poetry.lock
Generated
+125 -257
View File
File diff suppressed because it is too large Load Diff
pyproject.toml
+1 -1
View File
@@ -1,6 +1,6 @@
[tool.poetry]
name = "mobsf"
version = "4.4.4"
version = "4.4.5"
description = "Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis."
keywords = ["mobsf", "mobile security framework", "mobile security", "security tool", "static analysis", "dynamic analysis", "malware analysis"]
authors = ["Ajin Abraham <[email protected]>"]