MobSF/Mobile-Security-Framework-MobSF
1
0
Fork 0
mirror of https://github.com/MobSF/Mobile-Security-Framework-MobSF.git synced 2026-10-11 22:50:09 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,959 Commits 6 Branches 58 Tags
cc625fe8430f3437a473e82aa2966d100a4dc883
Commit Graph
1959 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Ajin Abraham cc625fe843 [SECURITY][HOTFIX] Fixes GHSA-4hh3-vj32-gr6j (#2421) 
* Fixes GHSA-4hh3-vj32-gr6j
* update SECURITY.md
* update dependencies
 2024-08-18 02:07:14 -07:00
Ajin Abraham 5b7c5c0075 [EFR][HOTFIX] Realtime Scan status and logs (#2416) 
* Realtime Scan Status in UI and PDF reports
* Scan Status REST API & tests
* Fixes #2414
* Address #2413
* Code QA
* Dependency and version bump
 2024-08-04 12:07:38 -07:00
Ajin Abraham 1fdc718b07 Update SECURITY.md (#2418) 2024-07-31 11:57:39 -07:00
Ajin Abraham fdaad81314 HOTFIX: Fix and OpenRedirect vulnerability 2024-07-31 11:51:27 -07:00
Ajin Abraham a9de0335d4 [HOTFIX] AppSec PNW 2024, Deeplink Trigger Support for Android Dynamic Analyzer (#2402) 
* iOS  Dynamic Analyzer String Compare Frida script improvement
* Android Dynamic Analyzer Deeplink UI trigger support 
* Android & iOS Dynamic Analyzer UI Improvements
* Android & iOS Dynamic Analyzer Bug fixes
 2024-07-25 21:30:09 -07:00
Ajin Abraham 39ba3e64be [HOTFIX] Code QA (#2393) 
* QA
* Add new android rule setAllow*FromFileURLs
* android root bypass and debugger bypass scripts improvements
* Dockerfile qa
* prevent entrypoint exit if username already exists
 2024-06-02 16:37:00 -07:00
Ajin Abraham 680ca5d302 [HOTFIX] Support AAB with MobSF, Convert AAB to APK, Fixes #2387 (#2391) 
* AAB to APK conversion
* relative urls fix for recent scan
 2024-05-24 20:46:23 -07:00
Ajin Abraham e35782328f Pagination support for recent scans 2024-05-24 16:34:44 -07:00
Ajin Abraham 94175956a0 QA 2024-05-24 16:34:22 -07:00
Ajin Abraham cf390e2863 Merge branch 'master' into master 2024-05-24 12:34:44 -07:00
Ajin Abraham 8b97723817 HOTFIX: Fix docker run errors 2024-05-23 23:32:13 -07:00
Ajin Abraham aeba044014 [HOTFIX] SSO Support hosts behind proxy (#2390) 
* Added support for proxy setup and custom SP host
 2024-05-23 13:05:27 -07:00
Ajin Abraham b46c0037ac [EFR][HOTFIX] SSO Support + Okta SSO Documentation (#2389) 
* Add support for SSO with SAML2.0
* Bump Deps
* Docs Updated
* Bump MobSF version
 2024-05-22 21:27:49 -07:00
Ajin Abraham 76187b805f [EFR] AuthZ and AuthN for MobSF + Bug Fixes (#2366) 
Authentication and Authorization (`Maintainer` , Viewer`) support in MobSF
* Basic User Management
* Bug Fixes in Runtime Executable Tampering
* Ratelimiting support for login endpoint
* Disable AuthZ/AuthN for REST API and also via ENV VAR `MOBSF_DISABLE_AUTHENTICATION=1`
* Bug Fix #2285 
* Bug Fix Icon Analysis Nonetype
* Update SSRF Filter
* Dependency Bump
* Beta to Stable release from V4
* Runs with DEBUG=False
* New home screen UI
 2024-05-21 10:08:01 -07:00
Ajin Abraham 4549ebd9d7 Update home.py 2024-05-20 10:30:07 -07:00
Ajin Abraham 7ee126639e Lint fixes 2024-05-20 10:20:53 -07:00
miaoyc 7d5553bcdc Merge branch 'master' into master 2024-05-09 16:14:16 +08:00
Ajin Abraham 31026cbacd Update auto-comment.yml 2024-05-03 20:08:42 -07:00
Ajin Abraham 126eb78c3a Update CONTRIBUTING.md 2024-05-03 20:08:06 -07:00
Ajin Abraham 84d52a999a Update SUPPORT.md (#2384) 2024-05-03 20:07:25 -07:00
Ajin Abraham fb853e8865 Update bug_report.md 2024-05-03 20:06:20 -07:00
Ajin Abraham 485d31f1ac Update README.md (#2383) 2024-05-03 20:02:09 -07:00
miaoyc 63ca7dca78 feat(page): recent records add page jump 2024-04-05 11:37:06 +08:00
miaoyc 86c48ae99a feat(page): recent records add page jump 2024-04-04 23:44:32 +08:00
miaoyc 0dac1eb163 Merge branch 'MobSF:master' into master 2024-04-04 20:31:50 +08:00
Ajin Abraham 99977da400 Update SECURITY.md 2024-04-03 21:50:07 -07:00
Ajin Abraham 43bb71d115 [HOTFIX][SECURITY] Fixes an SSRF vulnerability report from positive technologies (#2373) 
Address: https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-wpff-wm84-x5cx
 2024-04-03 21:47:14 -07:00
miaoyc 912c407d84 Merge branch 'MobSF:master' into master 2024-04-03 16:43:51 +08:00
ohyeah521andAjin Abraham 6bce5a25b4 Resolve the situation where the function name is bytes (#2367) 
fix error:
 if function.name.endswith('_chk'):
       ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
TypeError: endswith first arg must be bytes or a tuple of bytes, not str

Co-authored-by: Ajin Abraham <[email protected]>
v3.9.7 		2024-03-24 14:56:26 -07:00
Ajin Abraham ccfedc0e45 HOTFIX: Possible SSRF 2024-03-23 19:15:30 -07:00
Ajin.Abraham 8a59d6833d HOTFIX: Build and push docker arm64 and amd64 together 2024-03-22 18:19:17 -07:00
Ajin Abraham 482bda913f Update SECURITY.md 2024-03-22 17:11:10 -07:00
Ajin Abraham 356895c611 Update SECURITY.md (#2365) 2024-03-22 17:10:34 -07:00
Ajin Abraham 3a7d12488c Update SECURITY.md (#2364) 2024-03-22 17:03:04 -07:00
Ajin.Abraham f22c584aa7 Fixes GHSA-m435-9v6r-v5f6 2024-03-22 16:43:43 -07:00
JPSxzy8 7645cee99e Optimize rendering of big lists (#2351) 
* Optimize rendering of big lists
* Dynamic rendering in browser to improve ux
Co-authored-by: Ajin Abraham <[email protected]>
 2024-03-22 16:37:55 -07:00
Ajin Abraham 5056a7d660 HOTFIX: Remove Androguard dependency use only features required by MobSF (#2363) 
This PR strips out androguard and it's dependencies from MobSF.
Extract androguard related functions used by MobSF.
Some dependencies such as pyQt5 from apkinspector is breaking the ARM64 docker image.
This should address that issue.
In future, we will have to copy over any fixes to axml, apk, public, types from androguard and ZipEntry from apkinspector. 
We won't be adding linting to these files. The extracted functions will be considered as an external tool.
 2024-03-22 15:30:05 -07:00
Ajin Abraham 4417da03ba poetry pyqt5 fixes (#2362) 
* poetry pyqt5 fixes

* QA

* fix

* Cert analysis qa

* QA

* pin pyqt5
 2024-03-22 13:52:04 -07:00
Ajin.Abraham 5a8eeee73c HOTFIX:[SECURITY] Fix GHSA-wfgj-wrgh-h3r3, dep bump, docker build qa 2024-03-22 11:49:27 -07:00
Ajin Abraham 34473d3dac HOTFIX: Individual image publish 2024-03-19 17:31:05 -07:00
Ajin Abraham d4e67866e4 Fix #2349 2024-03-18 18:28:11 -07:00
Ajin.Abraham 18931bc799 HOTFIX: androguard bump 2024-03-14 17:36:20 -07:00
Ajin.Abraham a5338ee682 HOTFIX: Bump androguard + remove quark 2024-03-13 00:57:54 -07:00
Ajin.Abraham 641f4430bc HOTFIX: target sdk bug 2024-03-09 13:19:05 -08:00
Ajin.Abraham 5c351b2314 Fix #2343 2024-03-09 12:55:07 -08:00
Ajin.Abraham 1e932050fc HOTFIX: Bump deps + expose Corellium stop app api 2024-03-06 18:55:42 -08:00
Ajin.Abraham bfd8bc2df5 HOTFIX: Frida Logs API response code + Dependency bump 2024-03-05 17:09:17 -08:00
miaoyc 505e86be47 feat(page): recent scans add default page and page_size, list 100 items 2024-03-01 15:08:26 +08:00
Ajin.Abraham f20ee08a68 Add name support in ui 2024-02-29 12:43:53 -08:00
Ajin.Abraham f62f1d0fd1 Add name parameter to create vm 2024-02-29 12:32:38 -08:00