Commit Graph
82 Commits
Author SHA1 Message Date
Ajin Abraham 2aecb905b3 iOS Dynamic Analysis with Corellium (#2194)
* iOS Dynamic Analysis Support with Corellium Jailbroken iOS devices
* Corellium API layer for complete device and project management
* Frida instrumentation (attach, spawn and inject) over SSH local port forward
* Shell access over SSH
* MobSF httptools proxy integration over SSH remote port forward
* Device File upload and download over SSH
* Frida scripts for core defense bypass, monitoring, and tracing
* Helper iOS Frida scripts for pentesting and malware analysis
* Screen cast with touch, swipe and text input support from web UI
* Dynamic Analysis device data dump and  report Generation
* Android Certificate analysis, replaced oscrypto with cryptography for public key parsing
* Python minimum support is 3.10
* Bumped httptools to latest, fixes httptools repeat bug
* Added unzip to docker to fix a bug
2023-12-03 02:01:10 -08:00
Ajin Abraham 941f7c5dd4 [HOTFIX] iOS Framework Analysis + Multiple Feature QA (#2260)
* iOS Framework Analysis
* Static Analysis URL simplification
* Replace hardcoded urls in template with `{% url %}`
* Code QA
* Remove unwanted template file
* Remove `rescan` query param from url
* Android icon SVG guessing improvements
* Icon analysis refactoring, change icon storage location
* Remove SVG to PNG converter. Support PNG and SVG icon.
* Github docker release action update
2023-09-06 23:55:06 -07:00
Ajin Abraham bb700fa071 [HOTFIX] Migrate from setup.py to poetry, tox QA (#2249)
* Migrate from setup.py to use poetry build and publish
* Tox QA
* Version is now configured only at pyproject.toml
* Added poetry build test
* Updated mobsf PyPI publishing workflow 
* Update local DBs
2023-08-27 21:08:29 -07:00
Ajin Abraham 74f100de90 [HOTFIX] Docker Buildx test (#2247)
* Docker image build test for PRs
2023-08-26 11:45:39 -07:00
Ajin Abraham 8e29cb06a6 Pip to Poetry, Ubuntu Base image Bump, Dockerfile QA, Python 3.11 support (#2244)
* Docker base image update
* Docker file QA
* Github Actions version update
* Removed unwanted pinned repository
* Pip to Poetry migration
* Bump httptools
* Jump yara-python-dex
* Python 3.11 support
2023-08-25 21:15:28 -07:00
Ajin Abraham d021da6eab HOTFIX: MobSF Android Dynamic Analysis Docker Support (#2214)
* MobSF Android Docker Support

* Pin pip version

* Update mobsf-test.yml
2023-07-21 23:41:45 -07:00
Ajin Abraham aeaa9b122a New Android Manifest Rule: App support vulnerable android versions (#2114)
* add a new rule: dangerous os version

* qa

* lint checks

* run lint test on one os
2023-01-11 09:49:20 -08:00
Ajin Abraham 277e74d485 [EFR-02]Enterprise Feature Request - False Positive Triaging (#2000)
* Suppression logic

* Android code analysis suppression

* Fixes #1981

* iOS source support bundle id extraction

* iOS Source Code - Suppression support

* Remove check in CFBundleURLName

* iOS Binary code analysis suppression support

* Add Code QL

* Suppression support for Manifest analysis

* Fixes #2014

* REST API + Docs

* Address review comments

* update suppression wordings

* Fixes #2043

* Icon analysis code QA
2022-10-03 19:25:29 -07:00
Ajin Abraham c630a9011d HOTFIX: libsast, iOS Rule, M1 Mac support 2022-07-16 18:03:45 -07:00
Ajin Abraham 1a5f9a7356 Hotfix: Broken slack channel link fix 2022-06-12 15:57:22 -07:00
Ajin Abraham dba910de1c Hotfix:Slack link 2022-03-10 07:02:57 -08:00
Ajin Abraham c1afb4f63e Hotfix:Slack link 2022-03-10 07:00:37 -08:00
Ajin Abraham 05e17d3829 Hotfix: Slack link 2022-03-10 06:58:33 -08:00
Ajin Abraham 4ad0b5ccd9 Hotfix: update slack link 2022-03-10 06:57:15 -08:00
Ajin Abraham 3c6bf4e683 HOTFIX: Publish Tagged Release to DockerHub 2022-01-23 14:49:59 -08:00
Ajin Abraham afc5c49e44 HOTFIX: Publish to DockerHub on Release 2022-01-23 14:45:41 -08:00
Ajin Abraham 33abc69b54 Hotfix: Revert to latest 2022-01-11 22:25:44 -08:00
Ajin Abraham dd7fdd9629 HOTFIX:Temp docker update 2022-01-11 22:22:22 -08:00
superpoussin22 eb5704a060 Move to new Quark (#1771)
* Upgrade Quark Version

* suppress unnecessary print()

* suppress androguard warnings

* fix wkhtmltopdf in windows

* Remove version string
Co-authored-by: Haeter <[email protected]>
Co-authored-by: Haeter <[email protected]>
Co-authored-by: Ajin Abraham <[email protected]>
2022-01-08 13:58:18 -08:00
Ajin Abraham d5ae46bf44 Python Dependency update and QA (#1852)
* Py deps update and QA
* lint fix
2021-11-28 09:26:26 -08:00
Ajin Abraham f096d6fa58 Update and rename docker-build.yml to docker-publish.yml 2021-10-12 00:00:24 -07:00
Ajin Abraham 16dd3434db Update docker-build.yml 2021-10-11 23:52:11 -07:00
Ajin Abraham 03dddd1ff6 Update bug_report.md 2021-10-05 16:51:59 +05:30
Ajin Abraham e98de367bc Update auto-comment.yml 2021-10-05 16:49:13 +05:30
Ajin Abraham 2d614059d4 arm only support 2021-05-22 12:01:52 -07:00
Ajin Abraham 39288ef267 update tag 2021-05-22 10:43:44 -07:00
Ajin Abraham 2138cee658 update action 2021-05-22 10:40:22 -07:00
Ajin Abraham 7182b9929a build multiplatform docker image 2021-05-22 10:32:20 -07:00
Ajin Abraham c63d9fa949 Hotfix: Dependency bump + Link update 2021-05-10 18:30:51 -07:00
Ajin Abraham 9122a00104 Update bug_report.md 2021-04-28 20:51:00 -07:00
Ajin Abraham 6e417b0fa2 Update mobsf_test.yml 2021-04-19 20:01:58 -07:00
Ajin Abraham 71b957047e Update mobsf_test.yml 2021-04-03 22:54:35 -07:00
Ajin Abraham 4939a6a5fa Update mobsf_test.yml 2021-04-03 22:53:57 -07:00
Ajin Abraham c660ca099b HOTFIX: Code QA, Move Version String, USE_HOME by default + Others (see desc) (#1712)
* Move Version to init.py
* Default to Use HOME from MobSF v3.4
* Update Checking improvement
* New Android Rule AES ECB Default
* Update all code locations to dynamically detect config/settings location.
* Rescan Code QA Re: #1670
2021-03-27 16:49:32 -07:00
Ajin Abraham a180ac2855 Update auto-comment.yml 2021-03-26 13:29:50 -07:00
Ajin Abraham e58ada4dbf Delete auto-comment.yml (#1709) 2021-03-26 13:26:15 -07:00
Ajin Abraham d32af967c1 Create auto-comment.yml 2021-03-26 13:23:15 -07:00
Ajin Abraham d0e9372bf3 Create auto-comment.yml 2021-03-25 23:25:45 -07:00
Ajin Abraham 18f4a483d3 HOTFIX: Update APKiD, http-tools, MobSF CA bug fix, Recent Scan Bug Fix, MD5 Search Fix, Removed yara wheels (#1661)
Remove yara-python wheels, updated apkid with prebuilt wheels
Frida Bump
http-tools 2.1.0
Fixes #1666
Fixes #1664
Fixes #1667
2021-02-06 21:19:32 -08:00
Ajin Abraham 1262a02f83 Python3.9 support (#1651)
Python 3.9 support
Prebuilt DEX enabled yara-python wheels
2021-01-19 19:09:27 -05:00
Ajin Abraham 384070f800 Update python-publish.yml 2021-01-17 13:31:57 +05:30
Ajin Abraham 3462b03f8d Create python-publish.yml 2021-01-17 02:16:52 -05:00
Ajin Abraham cf59941081 HOTFIX: setup.py and directory refactoring
Python setup.py #1585
directory refactoring
2021-01-17 01:47:49 -05:00
Ajin Abraham 289457e7a0 Update 25 days to 10 2021-01-06 13:55:18 -05:00
Ajin Abraham c15050addb Migrate from Travis to Github Actions (#1630)
Migrate from Travis to Github Actions
2020-12-27 19:05:20 -05:00
Ajin Abraham 89f89fbe6e Delete mobsf_test.yml 2020-12-27 15:40:08 -05:00
Ajin Abraham 95c9873cba Create mobsf_test.yml 2020-12-27 15:38:08 -05:00
Ajin Abraham ea9e98a62e Add Github Sponsors 2020-10-02 13:04:10 -04:00
Ajin Abraham 7198c9ca34 iOS Swift, OWASP MASVS/MSTG Support (#1302)
* iOS Swift support
* Improved rules for Swift and Objective C
* OWASP MSTG support - https://mobile-security.gitbook.io/masvs/security-requirements/
* Changes to Code Matcher
* Add Status to iOS Permissions
* Standardize IPA binary analysis rules
* Refactoring SAST Code
* Refactor Classdump
* Updated Readme

Thanks to @karolpiateknet (Netguru S. A team)
2020-03-13 12:25:25 -04:00
Ajin Abraham 40b1d229f7 HOTFIX: Fix typo 2019-11-22 10:27:02 -05:00