Commit Graph
1988 Commits
Author SHA1 Message Date
Ajin Abraham b608ce46dc Revert Hotfix 2023-06-21 15:59:50 -07:00
Ajin Abraham 89efdeebcc HOTFIX: update lief 2023-06-21 15:55:07 -07:00
Ajin Abraham c7578b8735 Update requirements.txt
0.13.1 not available.
2023-06-14 14:12:51 -07:00
pyup.io botandAjin Abraham d2f0603d66 Scheduled weekly dependency update for week 24 (#2187)
* Update ip2location from 8.9.0 to 8.10.0

* Update quark-engine from 22.10.1 to 23.5.1

* Update LIEF from to 0.13.1

* Update tldextract from 3.4.0 to 3.4.4

* Update requirements.txt

---------

Co-authored-by: Ajin Abraham <[email protected]>
2023-06-14 13:59:48 -07:00
Ajin Abraham b1922d8a0d Enable binary analysis for aar/jar 2023-05-20 11:23:44 -07:00
Ajin Abraham b43b561a65 [EFR05] Enterprise Feature Request: AAR and JAR support (#2163)
* AAR and JAR support
2023-04-17 12:02:02 -07:00
Ajin Abraham 0cd255cb90 [Enterprise Feature Request EFR02] Support summary of severity in each section. (#2160)
* Summary for Android and iOS SCA
2023-04-10 14:57:02 -07:00
Ajin Abraham a13bf58c55 HOTFIX: Android min SDK check on janus vulnerability detection (#2159)
* Android min SDK  check on janus check

* Update README.md
2023-04-07 20:02:43 -07:00
Ajin.Abraham 93432c961a Merge branch 'master' of github.com:MobSF/Mobile-Security-Framework-MobSF 2023-03-30 14:02:57 -07:00
Ajin.Abraham bfef7e6285 HOTFIX: Fixes #2144 2023-03-30 14:02:40 -07:00
Ajin Abraham be23758bc6 [HOTFIX] Add support for environment variable for MobSF config (#2150)
* add support for environment variable config
* Fixes #2109
* update lief
2023-03-30 12:20:35 -07:00
Ajin Abraham 6bc642813c HOTIX: Update Dockerfile to install jq (#2149)
* Update Dockerfile

* Update tox.ini
2023-03-28 00:23:02 -07:00
antoinbo 6c64d17229 Fix Scorecard Severity Distribution chart data (#2140) 2023-03-15 18:12:39 -07:00
Ajin Abraham 7ad41a454e HOTFIX: Fix docker build (#2135) 2023-02-17 15:40:43 -08:00
evmxattrandnone 1f249c4f2a Support for filenames containing & (#2129)
Co-authored-by: none <[email protected]>
2023-02-08 21:13:57 -08:00
Ajin Abraham aeaa9b122a New Android Manifest Rule: App support vulnerable android versions (#2114)
* add a new rule: dangerous os version

* qa

* lint checks

* run lint test on one os
2023-01-11 09:49:20 -08:00
Ajin.Abraham 5ccb028cc6 version bump 2023-01-10 17:38:06 -08:00
Ajin.Abraham 0b259d015d HOTFIX: Icon should be a file 2023-01-10 17:37:23 -08:00
superpoussin22 1016a3d069 Apktool 2.7.0 update (#2082)
* Update apktool to version 2.7.0
2022-12-13 11:19:47 -08:00
Ajin Abraham 76cd47d851 HOTFIX: Setup improvement (#2078)
* Improve setup scripts.
* Python support to 3.8 - 3.10
* Delete MobSF data directory on running setup.
* Bump applicable dependencies.
2022-11-22 16:01:34 -08:00
Ajin Abraham 2e234ec543 Android APK support extracting icon SVG from XML (#2060)
* Added support for SVG icon extraction
* Add jar binaries
* code refactoring
* Update settings.py
2022-11-07 09:22:40 -08:00
th3-d4v1d-c0de dd18c9619e Installation script error: Solving spelling error (#2067)
changed "installtion" to "installation"
2022-11-02 09:10:30 -07:00
Ajin Abraham 9b49285e1c HOTFIX: jadx update to 1.4.5 (#2064)
* jadx update to 1.4.5
* MobSF version bump
* Fixes CVE-2022-42889 in third party dependency
2022-10-27 14:00:49 -07:00
superpoussin22 075e9c1862 hotfix for quyark rules location (#2053) 2022-10-17 11:33:36 -07:00
Ajin Abraham c03edc1524 Hotfix: UI icon 2022-10-16 10:08:16 -07:00
Ajin.Abraham 751fab2ff5 Hotfix: Homescreen Navbar 2022-10-14 14:54:24 -07:00
Ajin.Abraham b22231ab4c Hotfix: ui on donate page 2022-10-14 14:49:39 -07:00
Ajin Abraham 43ea3c0f43 HOTFIX: Split certificate analysis out, suppression list fixes (#2052) 2022-10-14 14:47:21 -07:00
Ajin Abraham 2387cd7cb6 HOTFIX: UI changes and warning on mobsf.live (#2051)
* UI changes and warning on mobsf.live

* Update home.html
2022-10-14 14:40:21 -07:00
Ajin Abraham 7fcec120fc HOTFIX: revert frida to 15.X 2022-10-14 10:08:57 -07:00
pyup.io botandAjin Abraham be59bc31ec Scheduled weekly dependency update for week 41 (#2046)
* Update quark-engine from 22.6.1 to 22.9.1

* Update frida from 15.2.2 to 16.0.1

* Update tldextract from 3.3.1 to 3.4.0

* Update openstep-parser from 1.5.3 to 1.5.4

Co-authored-by: Ajin Abraham <[email protected]>
2022-10-14 09:52:32 -07:00
TrellixVulnTeam 5e88b0683a Adding numeric_owner as a keyword argument (#2050)
numeric_owner needs to be a keyword argument.
2022-10-14 09:51:55 -07:00
Ajin.Abraham 037caac135 Unit Test for False Positive Triaging v3.6.0 2022-10-03 20:17:12 -07:00
Ajin Abraham 277e74d485 [EFR-02]Enterprise Feature Request - False Positive Triaging (#2000)
* Suppression logic

* Android code analysis suppression

* Fixes #1981

* iOS source support bundle id extraction

* iOS Source Code - Suppression support

* Remove check in CFBundleURLName

* iOS Binary code analysis suppression support

* Add Code QL

* Suppression support for Manifest analysis

* Fixes #2014

* REST API + Docs

* Address review comments

* update suppression wordings

* Fixes #2043

* Icon analysis code QA
2022-10-03 19:25:29 -07:00
ohyeah521 41dc607733 fix res directory not exist (#2042)
Fix the problem that the res resource folder does not exist, the solution is to copy from the apktool_out directory
2022-10-03 18:34:18 -07:00
664d3392ed Adding tarfile member sanitization to extractall() (#2039)
Co-authored-by: TrellixVulnTeam <[email protected]>
Co-authored-by: Ajin Abraham <[email protected]>
2022-09-30 15:57:57 -07:00
superpoussin22 de7ace620c update apkid to 2.1.4 (#2037) 2022-09-30 15:54:47 -07:00
pyup.io botandAjin Abraham 324c44e459 Update ip2location from 8.8.0 to 8.8.1 (#2035)
Co-authored-by: Ajin Abraham <[email protected]>
2022-09-27 23:17:28 -07:00
3ae54e8427 Fix bug #1917 where checking for stripped debugging symbols produces false positives in iOS. (#2023)
Co-authored-by: Toor <[email protected]>
Co-authored-by: Ajin Abraham <[email protected]>
2022-09-27 23:16:35 -07:00
superpoussin22 e0422523e1 Update README.md (#2020)
add Badge App
2022-09-27 22:51:03 -07:00
pyup.io bot 29068545f3 Update frida from 15.1.28 to 15.2.2 (#2002) 2022-07-29 18:03:47 -07:00
Ajin.Abraham 767896e2e3 Hotfix #1999 2022-07-23 11:59:18 -07:00
Ajin Abraham c630a9011d HOTFIX: libsast, iOS Rule, M1 Mac support 2022-07-16 18:03:45 -07:00
pyup.io bot e7e839fcff Scheduled weekly dependency update for week 28 (#1993)
* Update frida from 15.1.27 to 15.1.28

* Update tldextract from 3.3.0 to 3.3.1
2022-07-11 12:05:54 -07:00
pyup.io bot 4a5a0005de Update quark-engine from 22.5.1 to 22.6.1 (#1989) 2022-07-05 09:17:03 -07:00
pyup.io bot 14c8c094c0 Scheduled weekly dependency update for week 26 (#1986)
* Update ip2location from 8.7.4 to 8.8.0

* Update frida from 15.1.24 to 15.1.27
2022-06-27 11:44:46 -07:00
Ajin Abraham c2d1127a9e Revert "Add the checking of the parent element of the permission-related elements to manifest analysis (#1905)" (#1984)
HOTFIX: Revert #1905
2022-06-24 17:00:05 -07:00
Ajin Abraham db3e516b4d Remove RELRO (#1978) 2022-06-15 08:52:52 -07:00
Han0nlyandAjin Abraham 774eae4cb1 Add the checking of the parent element of the permission-related elements to manifest analysis (#1905)
* Add the checking of the parent element of the permission-related elements to manifest analysis

Co-authored-by: Ajin Abraham <[email protected]>
2022-06-13 12:06:06 -07:00
Ajin Abraham 7b4991281c Feature Parity Allow iOS IPA download (#1977)
* Allow iOS IPA download

* Code QA
2022-06-12 23:06:27 -07:00