mirror of
https://github.com/MobSF/Mobile-Security-Framework-MobSF.git
synced 2026-10-12 02:06:59 +00:00
Ajin Abraham
b5da756615
- Added malware lookup using SHA2 with VirusTotal, Triage, Hybrid Analysis, and MetaDefender. - Fixed permissions of extracted files to counter anti-analysis techniques. - Resolved APK parsing errors in `androguard`. - Handled exceptions in `string_on_binary`. - Optimized APK ZIP analysis for improved performance. - Fixed untar permission errors in dynamic analysis. - Added bypass for SSL pinning in Boye's `AbstractVerifier`. - Updated bypass for SSL pinning in Appmattus's `CertificateTransparencyInterceptor`. - Introduced SSL pinning detector script. - Improved Frida intent dumper script. - Added Frida intent tracer script. - Introduced timeouts for all HTTP calls. - Added `django-q2`-based asynchronous scans for Android and iOS binaries and source code. - Fixed bug in certificate analysis. - Enabled asynchronous scans in Docker Compose setup. - Performed QA for Android and iOS SAST modules. - Added Frida script for `audit-webview`. - Introduced Frida script for `trace-javascript-interface`. - Upgraded `libsast` for improved file reading, multiprocessing, and multithreading. - Fixed PNG crush issues on Darwin systems. - Performed QA on the home screen UI. - Updated `httptools` and `libsast` dependencies.
21 lines
1.0 KiB
JavaScript
21 lines
1.0 KiB
JavaScript
try {
|
|
var UnverifiedCertError = Java.use('javax.net.ssl.SSLPeerUnverifiedException');
|
|
UnverifiedCertError.$init.implementation = function(str) {
|
|
send('Unexpected SSLPeerUnverifiedException occurred');
|
|
try {
|
|
var stackTrace = Java.use('java.lang.Thread').currentThread().getStackTrace();
|
|
var exceptionStackIndex = stackTrace.findIndex(stack => stack.getClassName() === "javax.net.ssl.SSLPeerUnverifiedException");
|
|
var callingFunctionStack = stackTrace[exceptionStackIndex + 1];
|
|
var className = callingFunctionStack.getClassName();
|
|
var methodName = callingFunctionStack.getMethodName();
|
|
var callingClass = Java.use(className);
|
|
var callingMethod = callingClass[methodName];
|
|
send('SSL exception caused: ' + className + '.' + methodName + '. Patch this method to bypass pinning.');
|
|
if (callingMethod.implementation) {
|
|
return;
|
|
}
|
|
} catch (e) {}
|
|
return this.$init(str);
|
|
};
|
|
} catch (err) {}
|