MobSF/Mobile-Security-Framework-MobSF
1
0
Fork 0
mirror of https://github.com/MobSF/Mobile-Security-Framework-MobSF.git synced 2026-10-12 02:06:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Janus Description updates (#1857)

Browse Source 
* Modify cert_analysis - Janus

Updated the Janus Vulnerability to reflect the difference cases.

Co-authored-by: Th30 <[email protected]>
This commit is contained in:
Ajin Abraham
2021-12-01 11:42:20 -08:00
committed by GitHub
co-authored by Th30
parent d5ae46bf44
commit 9463b74525
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mobsf/StaticAnalyzer/views/android/cert_analysis.py
+4 -1
View File
@@ -131,7 +131,10 @@ def cert_info(app_dir, app_file):
status,
'Application is signed with v1 signature scheme, '
'making it vulnerable to Janus vulnerability on '
'Android <7.0'))
'Android 5.0-8.0, if signed only with v1 signature'
' scheme. Applications running on Android 5.0-7.0'
' signed with v1, and v2/v3 '
'scheme is also vulnerable.'))
if re.findall(r'CN=Android Debug', cert_info):
findings.append((
'bad',