mirror of
https://github.com/MobSF/Mobile-Security-Framework-MobSF.git
synced 2026-10-11 22:50:09 +00:00
Python 3.13 Support (#2546)
* Python Support updated to 3.12-3.13 * Bump mitmproxy * Bump httptools * Remove pinned xmlsec, lxml * Android Permission Update * Updates Signatures
This commit is contained in:
Ajin Abraham
@@ -6,6 +6,7 @@
|
||||
.sonarcloud.properties
|
||||
.pyup.yml
|
||||
.python-version
|
||||
.venv
|
||||
tox.ini
|
||||
mobsf/db.sqlite3
|
||||
Dockerfile
|
||||
|
||||
@@ -15,7 +15,7 @@ jobs:
|
||||
fail-fast: false
|
||||
matrix:
|
||||
os: [ubuntu-22.04, macos-latest, windows-latest]
|
||||
python-version: ['3.12']
|
||||
python-version: ['3.12', '3.13']
|
||||
|
||||
runs-on: ${{ matrix.os }}
|
||||
steps:
|
||||
|
||||
@@ -9,6 +9,7 @@ __pycache__/
|
||||
|
||||
# Distribution / packaging
|
||||
.Python
|
||||
.venv/
|
||||
venv/
|
||||
env/
|
||||
build/
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
sonar.sources=.
|
||||
sonar.exclusions=mobsf/static/**/*,mobsf/templates/**/*
|
||||
sonar.sourceEncoding=UTF-8
|
||||
sonar.python.version=3.10, 3.11, 3.12
|
||||
sonar.python.version=3.12, 3.13
|
||||
+1
-1
@@ -1,5 +1,5 @@
|
||||
# Base image
|
||||
FROM python:3.12-slim-bookworm
|
||||
FROM python:3.13-slim-bookworm
|
||||
|
||||
LABEL \
|
||||
name="MobSF" \
|
||||
|
||||
@@ -6,7 +6,7 @@ Mobile Security Framework (MobSF) is a security research platform for mobile app
|
||||
|
||||
Made with  in India
|
||||
|
||||
[](https://hub.docker.com/r/opensecurity/mobile-security-framework-mobsf/) [](https://www.python.org/downloads/)
|
||||
[](https://hub.docker.com/r/opensecurity/mobile-security-framework-mobsf/) [](https://www.python.org/downloads/)
|
||||
[](https://badge.fury.io/py/mobsf)
|
||||
[](https://github.com/MobSF/Mobile-Security-Framework-MobSF/)
|
||||
[](https://www.gnu.org/licenses/gpl-3.0.html)
|
||||
|
||||
+1
-1
@@ -18,7 +18,7 @@ from mobsf.install.windows.setup import windows_config_local
|
||||
|
||||
logger = logging.getLogger(__name__)
|
||||
|
||||
VERSION = '4.4.1'
|
||||
VERSION = '4.4.2'
|
||||
BANNER = r"""
|
||||
__ __ _ ____ _____ _ _ _ _
|
||||
| \/ | ___ | |__/ ___|| ___|_ _| || | | || |
|
||||
|
||||
@@ -132,6 +132,8 @@ def print_version():
|
||||
dst_str = f' ({dist}) '
|
||||
env_str = f'OS Environment: {os}{dst_str}{pltfm}'
|
||||
logger.info(env_str)
|
||||
python_version = sys.version.split(' ')[0]
|
||||
logger.info('Python Version: %s', python_version)
|
||||
cores, threads, ram = get_system_resources()
|
||||
logger.info('CPU Cores: %s, Threads: %s, RAM: %.2f GB', cores, threads, ram)
|
||||
find_java_binary()
|
||||
|
||||
@@ -396,6 +396,22 @@ DVM_PERMISSIONS = {
|
||||
'READ_DROPBOX_DATA': ['normal', 'Allows an application to access data stored in Dropbox, intended exclusively for use by system-level or first-party applications, and not available for third-party applications.', 'Allows an application to access the data in Dropbox. Not for use by third-party applications.'],
|
||||
'SET_BIOMETRIC_DIALOG_ADVANCED': ['normal', 'Allows an application to customize BiometricDialog features, including logo and content view. Restricted to system use only.', 'Allows an application to set the advanced features on BiometricDialog (SystemUI), including logo, logo description, and content view with more options button. Not for use by third-party applications.'],
|
||||
'ACCESS_ORIENTATION': ['normal', 'Allows an application to access the device\'s orientation.', 'Allows an application to access the device\'s orientation.'],
|
||||
'ACCESS_LAUNCHER_DATA': ['normal', 'Manage home screen metadata and shortcuts', 'This permission protects a content provider within home/launcher applications, enabling management of home screen metadata such as shortcut placement, launch intents, and labels.'],
|
||||
'APPLY_PICTURE_PROFILE': ['normal', 'Apply media quality profiles to video layers', 'Allows an app to apply a ERROR(/MediaQualityManager.PictureProfile) to a layer via ERROR(/MediaCodec.PARAMETER_KEY_PICTURE_PROFILE) and, additionally, system apps via ERROR(/SurfaceControl.Transaction#setPictureProfileHandle) .'],
|
||||
'BIND_TV_AD_SERVICE': ['signature', 'Bind to TV advertising services', 'Must be required by a android.media.tv.ad.TvAdService to ensure that only the system can bind to it.'],
|
||||
'CAPTURE_KEYBOARD': ['normal', 'Capture keyboard input before system processing', 'Allows an application to be able to capture keys before Android system get chance to process system keys and shortcuts.'],
|
||||
'EXECUTE_APP_FUNCTIONS': ['normal', 'Execute functions on behalf of users', 'Allows an application to perform actions on behalf of users inside of applications.'],
|
||||
'MANAGE_DEVICE_POLICY_APP_FUNCTIONS': ['internal', 'Manage app function policies', 'Allows an application to manage policy related to AppFunctions.'],
|
||||
'MANAGE_DEVICE_POLICY_THREAD_NETWORK': ['internal', 'Manage Thread network policies', 'Allows an application to set policy related to Thread network.'],
|
||||
'POST_PROMOTED_NOTIFICATIONS': ['normal', 'Post promoted notifications', 'Required for apps to post promoted notifications.'],
|
||||
'QUERY_ADVANCED_PROTECTION_MODE': ['normal', 'Query advanced protection mode status', "Allows an application to query the device's advanced protection mode status."],
|
||||
'RANGING': ['dangerous', 'Range to nearby devices', 'Required to be able to range to devices using generic ranging module.'],
|
||||
'READ_COLOR_ZONES': ['normal', 'Read screen color zones for ambient lighting', 'Allows an application to read the aggregated color zones on the screen for use cases like TV ambient backlight usages.'],
|
||||
'READ_SYSTEM_PREFERENCES': ['normal', 'Read system settings and preferences', 'Allows an application to access the Settings Preference services to read settings exposed by the system Settings app and system apps that contribute settings surfaced by the Settings app. This allows the calling application to read settings values through the host application, agnostic of underlying storage.'],
|
||||
'RECEIVE_SENSITIVE_NOTIFICATIONS': ['signature', 'Receive sensitive notification content', 'Allows apps with a NotificationListenerService to receive notifications with sensitive information'],
|
||||
'REQUEST_OBSERVE_DEVICE_UUID_PRESENCE': ['normal', 'Observe nearby device presence by UUID', "Allows an application to subscribe to notifications about the nearby devices' presence status change base on the UUIDs. Not for use by third-party applications."],
|
||||
'TV_IMPLICIT_ENTER_PIP': ['normal', 'Enter Picture-in-Picture mode implicitly', 'Allows an app to enter Picture-in-Picture mode when the user is not explicitly requesting it. This includes using ERROR(/PictureInPictureParams.Builder#setAutoEnterEnabled) as well as lifecycle methods such as ERROR(/Activity#onUserLeaveHint) and ERROR(/Activity#onPause) to enter PiP when the user leaves the app. This permission should only be used for certain PiP usage types .'],
|
||||
'WRITE_SYSTEM_PREFERENCES': ['normal', 'Write system settings and preferences', 'Allows an application to access the Settings Preference services to write settings values exposed by the system Settings app and system apps that contribute settings surfaced in the Settings app. This allows the calling application to write settings values through the host application, agnostic of underlying storage.'],
|
||||
},
|
||||
|
||||
'SPECIAL_PERMISSIONS': {
|
||||
|
||||
File diff suppressed because one or more lines are too long
+136550
-2597
File diff suppressed because it is too large
Load Diff
Generated
+675
-590
File diff suppressed because it is too large
Load Diff
+6
-8
@@ -1,6 +1,6 @@
|
||||
[tool.poetry]
|
||||
name = "mobsf"
|
||||
version = "4.4.0"
|
||||
version = "4.4.2"
|
||||
description = "Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis."
|
||||
keywords = ["mobsf", "mobile security framework", "mobile security", "security tool", "static analysis", "dynamic analysis", "malware analysis"]
|
||||
authors = ["Ajin Abraham <[email protected]>"]
|
||||
@@ -23,7 +23,7 @@ classifiers = [
|
||||
mobsf = "mobsf.__main__:main"
|
||||
|
||||
[tool.poetry.dependencies]
|
||||
python = "^3.10"
|
||||
python = "^3.12"
|
||||
django = ">=3.1.5"
|
||||
rsa = ">=4.7"
|
||||
requests = ">=2.25.1"
|
||||
@@ -40,7 +40,7 @@ distro = ">=1.5.0"
|
||||
ip2location = "^8.10.4"
|
||||
pdfkit = ">=0.6.1"
|
||||
google-play-scraper = ">=0.1.2"
|
||||
apkid = "^2.1.5"
|
||||
apkid = "^3.0.0"
|
||||
frida = ">=17.0.0"
|
||||
frida-tools = "^14.3.0"
|
||||
tldextract = ">=5.1.3"
|
||||
@@ -49,21 +49,19 @@ svgutils = ">=0.3.4"
|
||||
arpy = ">=2.3.0"
|
||||
apksigtool = "^0.1.0"
|
||||
tzdata = "^2023.3"
|
||||
http-tools = ">=5.0.0"
|
||||
http-tools = ">=6.0.0"
|
||||
libsast = "^3.1.6"
|
||||
paramiko = "^3.3.1"
|
||||
six = ">=1.16.0"
|
||||
python3-saml = "^1.16.0"
|
||||
bcrypt = "4.0.1" # Remove this in mitmproxy 12
|
||||
psycopg2-binary = "^2.9.10"
|
||||
lief = "^0.15.1"
|
||||
lief = "^0.16.6"
|
||||
packaging = ">=24.2"
|
||||
django-ratelimit = "^4.1.0"
|
||||
django-q2 = "^1.7.4"
|
||||
defusedxml = "^0.7.1"
|
||||
xmlsec = "1.3.14" # Remove this after xmlsec issue is resolved: https://github.com/xmlsec/python-xmlsec/issues/345
|
||||
lxml = "5.3.1" # Same as above
|
||||
bleach = "^6.2.0"
|
||||
bcrypt = "4.0.1" # Pinned to avoid warnings with mitmproxy 12
|
||||
|
||||
[build-system]
|
||||
requires = ["poetry-core"]
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
rem Python Check
|
||||
set /a count=0
|
||||
where python >nul 2>&1 && (
|
||||
echo [INSTALL] Checking for Python version 3.10+
|
||||
echo [INSTALL] Checking for Python version 3.12+
|
||||
:redo
|
||||
if %count% lss 3 (
|
||||
set /a count+=1
|
||||
@@ -13,10 +13,10 @@ where python >nul 2>&1 && (
|
||||
) else (
|
||||
exit /b
|
||||
)
|
||||
echo %var%|findstr /R "[3].[101112]" >nul
|
||||
echo %var%|findstr /R "[3].[1213]" >nul
|
||||
if errorlevel 1 (
|
||||
if "%var%"=="" goto redo
|
||||
echo [ERROR] MobSF dependencies require Python 3.10-3.12. Your python points to %var%
|
||||
echo [ERROR] MobSF dependencies require Python 3.12-3.13. Your python points to %var%
|
||||
exit /b
|
||||
) else (
|
||||
echo [INSTALL] Found %var%
|
||||
|
||||
@@ -11,8 +11,8 @@ py_major=${python_version%%.*}
|
||||
py_minor=${python_version#*.}
|
||||
py_minor=${py_minor%%.*}
|
||||
|
||||
if [[ "$py_major" -ne 3 || "$py_minor" -lt 10 || "$py_minor" -gt 12 ]]; then
|
||||
echo "[ERROR] MobSF dependencies require Python 3.10 - 3.12. You have Python ${python_version}."
|
||||
if [[ "$py_major" -ne 3 || "$py_minor" -lt 12 || "$py_minor" -gt 13 ]]; then
|
||||
echo "[ERROR] MobSF dependencies require Python 3.12 - 3.13. You have Python ${python_version}."
|
||||
exit 1
|
||||
fi
|
||||
echo "[INSTALL] Found Python ${python_version}"
|
||||
|
||||
Reference in New Issue
Block a user