MobSF/Mobile-Security-Framework-MobSF
1
0
Fork 0
mirror of https://github.com/MobSF/Mobile-Security-Framework-MobSF.git synced 2026-10-12 02:06:59 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,851 Commits 6 Branches 58 Tags
28b7fdeca5a806a3d429593c8eec012373fe2b24
Commit Graph
1851 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Ajin Abraham 28b7fdeca5 [HOTFIX] Regex + Rule Update (#2232) 
* IOS Swift Rules updates
  *  Updated or added rules `ios_biometric_bool`, `ios_biometric_acl`, `ios_keychain_weak_acl_device_passcode`, `ios_keychain_weak_accessibility_value`, `ios_insecure_random_no_generator`, `ios_biometry_hardened`
 * Regex Hardening: Fixes possible Regex DoS in rules and MobSF code base
 2023-08-10 01:16:12 -07:00
Ajin Abraham 9e57c5767d Dynamic Analysis support alert (#2227) 2023-08-02 00:46:01 -07:00
Ajin Abraham 9ae65e682a HOTFIX: translate upstream proxy ip for docker 2023-08-01 16:46:51 -07:00
superpoussin22andAjin Abraham 14e9382668 update apktool (#2225) 
Co-authored-by: Ajin Abraham <[email protected]>
 2023-07-31 00:58:21 -07:00
superpoussin22 808cacba9a update apktool to 2.8.1 (#2220) 2023-07-31 00:55:38 -07:00
Ajin Abraham 218954d3e7 Hotfix: Handle Docker <-> ADB connectivity internally (#2219) 
* host.docker.internal transilation for localhost

* Replace urlparse with re

* version bump

* update ascii art
 2023-07-25 13:19:06 -07:00
Ajin Abraham 1fde1cfa6d Update dynamic_analysis.html (#2218) 2023-07-24 23:49:41 -07:00
Ajin Abraham b1d4abcab4 Hotfix: Broken donate link fix 2023-07-24 18:32:37 -07:00
Ajin Abraham 8c25cb21aa Hotfix: Add Corellium support message 2023-07-24 18:02:19 -07:00
Ajin Abraham a54faf8dec Hotfix: Docker error fixes 2023-07-24 17:52:54 -07:00
Ajin Abraham 3c7c9afecd Update setup.py 2023-07-23 12:48:17 -07:00
Ajin Abraham d021da6eab HOTFIX: MobSF Android Dynamic Analysis Docker Support (#2214) 
* MobSF Android Docker Support

* Pin pip version

* Update mobsf-test.yml
v3.6.9 		2023-07-21 23:41:45 -07:00
Ajin Abraham dc0dc273e5 HOTFIX: Feature updates and Bug Fixes (#2197) 
* OFAC, jquery bump, tox fix
* AAR handle multiple application tags
 2023-06-22 15:13:01 -07:00
Ajin Abraham b608ce46dc Revert Hotfix 2023-06-21 15:59:50 -07:00
Ajin Abraham 89efdeebcc HOTFIX: update lief 2023-06-21 15:55:07 -07:00
Ajin Abraham c7578b8735 Update requirements.txt 
0.13.1 not available.
 2023-06-14 14:12:51 -07:00
pyup.io botandAjin Abraham d2f0603d66 Scheduled weekly dependency update for week 24 (#2187) 
* Update ip2location from 8.9.0 to 8.10.0

* Update quark-engine from 22.10.1 to 23.5.1

* Update LIEF from to 0.13.1

* Update tldextract from 3.4.0 to 3.4.4

* Update requirements.txt

---------

Co-authored-by: Ajin Abraham <[email protected]>
 2023-06-14 13:59:48 -07:00
Ajin Abraham b1922d8a0d Enable binary analysis for aar/jar 2023-05-20 11:23:44 -07:00
Ajin Abraham b43b561a65 [EFR05] Enterprise Feature Request: AAR and JAR support (#2163) 
* AAR and JAR support
 2023-04-17 12:02:02 -07:00
Ajin Abraham 0cd255cb90 [Enterprise Feature Request EFR02] Support summary of severity in each section. (#2160) 
* Summary for Android and iOS SCA
 2023-04-10 14:57:02 -07:00
Ajin Abraham a13bf58c55 HOTFIX: Android min SDK check on janus vulnerability detection (#2159) 
* Android min SDK  check on janus check

* Update README.md
 2023-04-07 20:02:43 -07:00
Ajin.Abraham 93432c961a Merge branch 'master' of github.com:MobSF/Mobile-Security-Framework-MobSF 2023-03-30 14:02:57 -07:00
Ajin.Abraham bfef7e6285 HOTFIX: Fixes #2144 2023-03-30 14:02:40 -07:00
Ajin Abraham be23758bc6 [HOTFIX] Add support for environment variable for MobSF config (#2150) 
* add support for environment variable config
* Fixes #2109
* update lief
 2023-03-30 12:20:35 -07:00
Ajin Abraham 6bc642813c HOTIX: Update Dockerfile to install jq (#2149) 
* Update Dockerfile

* Update tox.ini
 2023-03-28 00:23:02 -07:00
antoinbo 6c64d17229 Fix Scorecard Severity Distribution chart data (#2140) 2023-03-15 18:12:39 -07:00
Ajin Abraham 7ad41a454e HOTFIX: Fix docker build (#2135) 2023-02-17 15:40:43 -08:00
evmxattrandnone 1f249c4f2a Support for filenames containing & (#2129) 
Co-authored-by: none <[email protected]>
 2023-02-08 21:13:57 -08:00
Ajin Abraham aeaa9b122a New Android Manifest Rule: App support vulnerable android versions (#2114) 
* add a new rule: dangerous os version

* qa

* lint checks

* run lint test on one os
 2023-01-11 09:49:20 -08:00
Ajin.Abraham 5ccb028cc6 version bump 2023-01-10 17:38:06 -08:00
Ajin.Abraham 0b259d015d HOTFIX: Icon should be a file 2023-01-10 17:37:23 -08:00
superpoussin22 1016a3d069 Apktool 2.7.0 update (#2082) 
* Update apktool to version 2.7.0
 2022-12-13 11:19:47 -08:00
Ajin Abraham 76cd47d851 HOTFIX: Setup improvement (#2078) 
* Improve setup scripts.
* Python support to 3.8 - 3.10
* Delete MobSF data directory on running setup.
* Bump applicable dependencies.
 2022-11-22 16:01:34 -08:00
Ajin Abraham 2e234ec543 Android APK support extracting icon SVG from XML (#2060) 
* Added support for SVG icon extraction
* Add jar binaries
* code refactoring
* Update settings.py
 2022-11-07 09:22:40 -08:00
th3-d4v1d-c0de dd18c9619e Installation script error: Solving spelling error (#2067) 
changed "installtion" to "installation"
 2022-11-02 09:10:30 -07:00
Ajin Abraham 9b49285e1c HOTFIX: jadx update to 1.4.5 (#2064) 
* jadx update to 1.4.5
* MobSF version bump
* Fixes CVE-2022-42889 in third party dependency
 2022-10-27 14:00:49 -07:00
superpoussin22 075e9c1862 hotfix for quyark rules location (#2053) 2022-10-17 11:33:36 -07:00
Ajin Abraham c03edc1524 Hotfix: UI icon 2022-10-16 10:08:16 -07:00
Ajin.Abraham 751fab2ff5 Hotfix: Homescreen Navbar 2022-10-14 14:54:24 -07:00
Ajin.Abraham b22231ab4c Hotfix: ui on donate page 2022-10-14 14:49:39 -07:00
Ajin Abraham 43ea3c0f43 HOTFIX: Split certificate analysis out, suppression list fixes (#2052) 2022-10-14 14:47:21 -07:00
Ajin Abraham 2387cd7cb6 HOTFIX: UI changes and warning on mobsf.live (#2051) 
* UI changes and warning on mobsf.live

* Update home.html
 2022-10-14 14:40:21 -07:00
Ajin Abraham 7fcec120fc HOTFIX: revert frida to 15.X 2022-10-14 10:08:57 -07:00
pyup.io botandAjin Abraham be59bc31ec Scheduled weekly dependency update for week 41 (#2046) 
* Update quark-engine from 22.6.1 to 22.9.1

* Update frida from 15.2.2 to 16.0.1

* Update tldextract from 3.3.1 to 3.4.0

* Update openstep-parser from 1.5.3 to 1.5.4

Co-authored-by: Ajin Abraham <[email protected]>
 2022-10-14 09:52:32 -07:00
TrellixVulnTeam 5e88b0683a Adding numeric_owner as a keyword argument (#2050) 
numeric_owner needs to be a keyword argument.
 2022-10-14 09:51:55 -07:00
Ajin.Abraham 037caac135 Unit Test for False Positive Triaging v3.6.0 2022-10-03 20:17:12 -07:00
Ajin Abraham 277e74d485 [EFR-02]Enterprise Feature Request - False Positive Triaging (#2000) 
* Suppression logic

* Android code analysis suppression

* Fixes #1981

* iOS source support bundle id extraction

* iOS Source Code - Suppression support

* Remove check in CFBundleURLName

* iOS Binary code analysis suppression support

* Add Code QL

* Suppression support for Manifest analysis

* Fixes #2014

* REST API + Docs

* Address review comments

* update suppression wordings

* Fixes #2043

* Icon analysis code QA
 2022-10-03 19:25:29 -07:00
ohyeah521 41dc607733 fix res directory not exist (#2042) 
Fix the problem that the res resource folder does not exist, the solution is to copy from the apktool_out directory
 2022-10-03 18:34:18 -07:00
TrellixVulnTeamTrellixVulnTeamAjin Abraham
 		664d3392ed Adding tarfile member sanitization to extractall() (#2039) 
Co-authored-by: TrellixVulnTeam <[email protected]>
Co-authored-by: Ajin Abraham <[email protected]>
 2022-09-30 15:57:57 -07:00
superpoussin22 de7ace620c update apkid to 2.1.4 (#2037) 2022-09-30 15:54:47 -07:00