* Anti-analysis bypass
- JADX fallback to DEX files on APK decompilation failure
- apktool fallback to androguard for AndroidManifest.xml extraction
- apksigner.jar fallback to apksigtool/androguard for signature version extraction
- Graceful erorrs for failures instead of exceptions
* String extraction from APK, Source, AAR, JAR, SO
* Strings sections to show source of strings extracted
* Strings Refactor
* Support for independent .SO scan
* Android SCA rules update
* Entropies scan support for strings
* URLs/Email extraction refactor
* Bug Fixes
* iOS Source Report Fix
* Frida APK Patcher (WIP)
* Dynamic Analyzer identifier not available
* Settings env var not working fix for enabled by default features
* AppSec Score fix
* Recent `scan not completed` fix for iOS zip
* MobSF Application Security Score Card
* Scorecard API
* Improved App Security Scoring Mechanism
* Improved PDF Report
* Disable CVSSv2 by default.
* For application security use case, use severity levels High, Warning, Low and Secure across all components applicable.
* Non blocking upload flow.
* Fixes#1885
* Added support for Dynamic Analysis without uninstall to preserve application settings/config
* Ability to perform Dynamic Analysis without Static Analysis
* Ability to perform Dynamic Analysis of 3rd party apps present in VM/AVD
* Added Support for Static Analysis of 3rd party apps from VM/Device
* Frida SSL Pinning Bypass Improvements
* Code QA
* Added new Frida script intent dumper
Ajin Abraham