* iOS Dynamic Analysis Support with Corellium Jailbroken iOS devices
* Corellium API layer for complete device and project management
* Frida instrumentation (attach, spawn and inject) over SSH local port forward
* Shell access over SSH
* MobSF httptools proxy integration over SSH remote port forward
* Device File upload and download over SSH
* Frida scripts for core defense bypass, monitoring, and tracing
* Helper iOS Frida scripts for pentesting and malware analysis
* Screen cast with touch, swipe and text input support from web UI
* Dynamic Analysis device data dump and report Generation
* Android Certificate analysis, replaced oscrypto with cryptography for public key parsing
* Python minimum support is 3.10
* Bumped httptools to latest, fixes httptools repeat bug
* Added unzip to docker to fix a bug
* Migrate from setup.py to use poetry build and publish
* Tox QA
* Version is now configured only at pyproject.toml
* Added poetry build test
* Updated mobsf PyPI publishing workflow
* Update local DBs
* Run service as unprivileged user
* Update Dockerfile
Co-authored-by: superpoussin22 <[email protected]>
Co-authored-by: Ajin Abraham <[email protected]>
* Move Version to init.py
* Default to Use HOME from MobSF v3.4
* Update Checking improvement
* New Android Rule AES ECB Default
* Update all code locations to dynamically detect config/settings location.
* Rescan Code QA Re: #1670
Fix#1542 IPA can have Payload or payload directory.
Speed up getting scan results of already scanned iOS ZIP source.
Dockerfile optimisation for quick code change and build
* sppedup ios zip, test fix
* Update frida from 12.9.4 to 12.9.7
* update rsa to 4.1
* update wkhtml with Focal version
Co-authored-by: superpoussin22 <[email protected]>
Co-authored-by: Ajin Abraham <[email protected]>
Dynamic Analysis with Genymotion. Supports Android 4.1 -9.0
Static Analyzer
Threaded baksmali
Improved Recent Scan
Browser PDF Generation
Dynamic Analyzer
Restructuring Dynamic Analyzer
Code QA and Modularization
Automatic MobSFy with Xposed and Frida
Full pass on all versions of android with basic features
Streaming logcat
Live API Monitor
Better SQlite DB View
In line frida scripting + loading from frida code share
basic frida env, ssl unpin, root check, debugger detection bypass.
Custom Frida Scripts and integration
Frida Log Viewer
Frida scripts loader
Frida custom user script loader