MobSF/Mobile-Security-Framework-MobSF
1
0
Fork 0
mirror of https://github.com/MobSF/Mobile-Security-Framework-MobSF.git synced 2026-10-12 02:06:59 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,900 Commits 6 Branches 58 Tags
b6287be97adcdddee0bf9a6212254cd34c6ee5ce
Commit Graph
68 Commits
Author SHA1 Message Date
Ajin Abraham c6f037103d Bug Fixes + Improvements (#2307) 
* Replace Android test APK
* Added tests for Library analysis from binary (scan_library route)
* iOS merge findings from swift and objective c rules with same rule identifier. Fixes #2287 
* iOS Binary analysis, sort regex matches. Fixes #2252
* Framework dylibs with no extensions to skip PIE checks. Fixes #2307
* Select correct network_security config. Fixes #2049
* Android Manifest Analysis added support for detecting task hijacking (StrandHogg 1.0 and StrandHogg 2.0) . Fixes #2124
* Added new manifest analysis rule to warn on apps targeting older Android OS
* Updated severity of findings
* UI improvement for AppSec dashboard to show a loader
* UI changes in Static Analysis to collapse large no of files in API and Code Analysis for better real estate
* Improved certificate file analysis for android, jar, aar, and ios
* MobSF version Bump
 2023-12-16 22:19:09 -08:00
Ajin Abraham 6e329c0d3f [HOTFIX] bs4 malformed xml parsing + xml namespace detection (#2248) 
* Use BeautifulSoup4 to prettify malformed XML
* Detect non standard XML namespace in AndroidManifest.xml (Fixes : https://github.com/MobSF/Mobile-Security-Framework-MobSF/issues/2198) 
* Updated android permissions list
* Updated android permission update check script
 2023-08-26 18:32:07 -07:00
Ajin Abraham 8e29cb06a6 Pip to Poetry, Ubuntu Base image Bump, Dockerfile QA, Python 3.11 support (#2244) 
* Docker base image update
* Docker file QA
* Github Actions version update
* Removed unwanted pinned repository
* Pip to Poetry migration
* Bump httptools
* Jump yara-python-dex
* Python 3.11 support
 2023-08-25 21:15:28 -07:00
Ajin Abraham 76cd47d851 HOTFIX: Setup improvement (#2078) 
* Improve setup scripts.
* Python support to 3.8 - 3.10
* Delete MobSF data directory on running setup.
* Bump applicable dependencies.
 2022-11-22 16:01:34 -08:00
th3-d4v1d-c0de dd18c9619e Installation script error: Solving spelling error (#2067) 
changed "installtion" to "installation"
 2022-11-02 09:10:30 -07:00
Amin Vakil 5d45143f45 Add --no-cache-dir to pip install (#1844) 
* Add --no-cache-dir to pip install

* Add --no-cache-dir to pip install in install_java_wkhtmltopdf.sh
 2021-11-18 05:11:24 -08:00
Srikanth L ae3e5bd070 Modify PWD stack to support health check (#1832) 
Add extra_hosts to support resolution of host.docker.internal for healthcheck
https://medium.com/@TimvanBaarsen/how-to-connect-to-the-docker-host-from-inside-a-docker-container-112b4c71bc66
 2021-10-27 09:30:38 -07:00
Ajin Abraham 7c0ba62625 July 21 QA (#1768) 
* Fixes:#1745, iOS permissions as dict

* Fixes #1753, Fix all typos from codespell

* add codespell to lint check
 2021-07-17 15:47:55 -07:00
cryptaxaxelleAjin Abraham
 		0f167452c3 fixing issue settings.py not found from postgress_support.sh script (#1738) 
* fixing issue settings.py not found from postgress_support.sh script

Co-authored-by: axelle <[email protected]>
Co-authored-by: Ajin Abraham <[email protected]>
 2021-06-02 19:20:27 -07:00
Ajin Abraham 3aa18db627 install git 2021-05-22 14:55:06 -07:00
Ajin Abraham 4aa45faba3 fix typo: 2021-05-22 14:45:34 -07:00
Ajin Abraham 7914172b79 build for arm 2021-05-22 14:45:14 -07:00
Ajin Abraham 6baa006fb0 Dockerfile QA 2021-05-22 13:29:05 -07:00
Ajin Abraham 2d614059d4 arm only support 2021-05-22 12:01:52 -07:00
Ajin Abraham bb745fad3e Dockerfile QA 2021-05-22 11:41:39 -07:00
Ajin Abraham c660ca099b HOTFIX: Code QA, Move Version String, USE_HOME by default + Others (see desc) (#1712) 
* Move Version to init.py
* Default to Use HOME from MobSF v3.4
* Update Checking improvement
* New Android Rule AES ECB Default
* Update all code locations to dynamically detect config/settings location.
* Rescan Code QA Re: #1670
 2021-03-27 16:49:32 -07:00
Ajin Abraham 18f4a483d3 HOTFIX: Update APKiD, http-tools, MobSF CA bug fix, Recent Scan Bug Fix, MD5 Search Fix, Removed yara wheels (#1661) 
Remove yara-python wheels, updated apkid with prebuilt wheels
Frida Bump
http-tools 2.1.0
Fixes #1666
Fixes #1664
Fixes #1667
 2021-02-06 21:19:32 -08:00
Ajin Abraham 1262a02f83 Python3.9 support (#1651) 
Python 3.9 support
Prebuilt DEX enabled yara-python wheels
 2021-01-19 19:09:27 -05:00
Ajin Abraham bb9a3201b8 Update clean.bat 2021-01-18 04:06:51 +05:30
Ajin Abraham e976bdca21 Reduce Repo Size, download frida-server dynamically (#1648) 
Reduce Repo Size, download frida-server dynamically (#1648)
 2021-01-18 03:33:59 +05:30
Ajin Abraham cf59941081 HOTFIX: setup.py and directory refactoring 
Python setup.py #1585
directory refactoring
 2021-01-17 01:47:49 -05:00
Ajin Abraham d1f8f87d2d Multiple Feature Improvements around Binary Analysis and NIAP support (#1558) 
* NIAP Analysis for Android based on https://www.niap-ccevs.org/MMO/PP/394.R/pp_app_v1.2_table-reqs.htm
* Improved Android Code Analysis Rules
* Code QA
* Android App Compare QA
* Improved Android SO binary analysis. (Thanks to https://lief.quarkslab.com/ and https://gist.github.com/apogiatzis/fb617cd118a9882749b5cb167dae0c5d)
* Android Strings now includes strings from shared objects.
* URLs and emails are now extracted from shared objects as well.
* Refactor iOS Binary Analysis with LIEF (Thanks to https://gist.github.com/ChiChou/15f0772db25343be0bb7072f15992a4e)
* Fixes Bugs #621, #1242 #1516
* Remove Otool Requirements and jtool2
 2020-10-08 09:28:26 -04:00
Ajin Abraham a020e9ea9e post install check (#1541) 
A check to verify that python requirements are installed after install.
Exodus Tracker DB update
 2020-09-14 17:27:10 -04:00
Arnaud de BockAjin Abrahamsuperpoussin22
 		06f34f613d PostgreSQL support for Docker + Adding entrypoint to isolate build and run phases in Docker (#1490) 
* Add Postgresql support

Co-authored-by: Ajin Abraham <[email protected]>
Co-authored-by: superpoussin22 <[email protected]>
 2020-08-04 01:25:49 -04:00
idhytandAjin Abraham 36c1440b80 bugfix: incorrect quotes (#1419) 
after run below command, will delete all content MobSF/settings.py after '# Postgres DB - Install psycopg2'

sed -i "/# Postgres DB - Install psycopg2/,/'''/d" ../MobSF/settings.py

Co-authored-by: Ajin Abraham <[email protected]>
 2020-07-11 10:44:55 -04:00
Ajin Abrahamandvitalybalashov bf6e919c5a Hotfix: Genymotion Cloud Support (#1389) 
* Fixes to support AWS Genymotion Android AMI

* Genymotion Cloud Support

* move large files to git lfs

Co-authored-by: vitalybalashov <[email protected]>
 2020-05-10 13:48:20 -04:00
Ajin Abrahamandsuperpoussin22 990eeae38b Prebuilt dex-enabled yara-python, improved setup script, Dockerfile, travis etc. (#1377) 
* prebuilt dex enabled yara-python and improved setup,tox,tests.

* Update Dockerfile to Ubuntu 12.04 LTS and Python 3.8

Co-authored-by: superpoussin22 <[email protected]>
 2020-04-27 11:30:12 -04:00
Ajin Abraham 9ba79892e5 HOTFIX: win setup fail fast. Fixes #1352 2020-04-12 13:14:15 -04:00
pyup.io bot d5fb76ae24 Update frida, deps, add a frida update script, update android permissions 
* update frida, deps, add a frida update script, update android permissions
 2020-04-02 16:03:12 -04:00
Ajin Abraham f9949decd4 windows cleanup script & optimizations 2019-12-09 21:40:52 -05:00
Ajin Abraham a8e6fbc5bd files update 2019-12-07 16:53:45 -05:00
Ajin Abraham 648bbb45a5 Add Play With Docker button on README 
Update README.md
 2019-11-11 11:43:50 -05:00
Srikanth L 0258f50e17 Added stack to scripts folder. 2019-11-11 10:22:10 +00:00
Ajin Abraham 45ac19de4f update permissions and exodus_db 2019-11-09 23:47:50 -05:00
Ajin Abraham 7f3c853a00 Delete kali_fix.sh 2019-09-26 16:32:31 -04:00
Ajin Abraham 595c534576 Dynamic Analysis with Genymotion. Supports Android 4.1 -9.0 (#1067) 
Dynamic Analysis with Genymotion. Supports Android 4.1 -9.0
Static Analyzer
  Threaded baksmali
  Improved Recent Scan
  Browser PDF Generation
Dynamic Analyzer
  Restructuring Dynamic Analyzer
  Code QA and Modularization
  Automatic MobSFy with Xposed and Frida
  Full pass on all versions of android with basic features
  Streaming logcat
  Live API Monitor
  Better SQlite DB View
  In line frida scripting + loading from frida code share
  basic frida env, ssl unpin, root check, debugger detection bypass.
  Custom Frida Scripts and integration
  Frida Log Viewer
  Frida scripts loader
  Frida custom user script loader
 2019-09-22 06:53:08 +05:30
superpoussin22 f819fa728f use os.chmod 2019-07-21 10:14:21 +02:00
superpoussin22 b983330bd6 correct quoting 2019-07-21 10:06:02 +02:00
superpoussin22 d8e7226b2d Merge pull request #1010 from MobSF/little-qa 
Little qa
 2019-07-21 08:59:31 +02:00
superpoussin22 7332365194 little qa 2019-07-20 20:12:40 +02:00
superpoussin22 cbda87a709 little qa 2019-07-20 20:11:50 +02:00
superpoussin22 324f47aea8 little QA 2019-07-20 20:11:03 +02:00
superpoussin22 865f2eda45 correct typo 2019-07-20 18:40:42 +02:00
Ajin Abraham 41347d4e5b flake8 linting and code QA 2019-07-18 16:48:59 -04:00
superpoussin22 0d8c3c4586 add shebang 2019-06-10 17:57:48 +02:00
superpoussin22 fb50bb2b62 add shebang 2019-06-10 17:57:18 +02:00
Ajin Abraham 8f7fd85a21 stale apkid files 2019-05-13 21:09:37 -04:00
superpoussin22 8e9d754421 Update apkid rules mac linux (#886) 
* Code QA
* Fix Setup
* Disable APKiD due to bug in master
 2019-05-13 20:59:55 -04:00
superpoussin22 e6c778dd5d Code QA, Bug Fix #861 
* Refactored Logging
* Improved UI Error Display
* Fixed Bug in Dynamic Analysis #861
 2019-02-09 15:51:51 +05:30
Ajin Abraham 92f18f7c0b code QA 2019-02-06 14:40:46 +05:30