Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Describe the issue
Needle doesn't seem to be maintained anymore. The last update was > 1 year and no issues have been answered this year. It also doesnt' seem to work on iOS JB devices with Chimera. FSecureLABS/needle#273
We should review where we use Needle and if other tools are a better alternative (e.g. objection, passionfruit).
The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
Our documentation site is always lagging behind as updating the docs is a non-trivial task that has to be automated. Setting up the Travis job for building wouldn't be trivial (we probably won't fit into the time constraints), but we can use GitHub actions and host a documentation builder on one of our servers. We shall update both bap documentation and Primus Lisp docs.
This is a really amazing project that has some unique features I haven't seen anywhere else and I'm really appreciative of the work I see that has been put into this!
I'm having trouble with specifying custom shellcode on the command line, and I can't find any examples or documentation regarding it.
What I've tried:
Using the "-cp" flag followed by a hex byte string delimi
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
The Dex module presents a leaky API to the user: lots of record cells are mutable, which ends up being problematic when inserting items because there are necessarily implicit invariants. For example, the tries_size field has to be in sync with the length of tries. The API should be carefully redesigned so that this is more intuitive.
To remove the buggy programs used in tests, located in examples folder, we can create another repo and put all of them there.
Then, we include an script that clone the repo, triggers the buggy programs' compilation, etc
Describe the issue
Needle doesn't seem to be maintained anymore. The last update was > 1 year and no issues have been answered this year. It also doesnt' seem to work on iOS JB devices with Chimera. FSecureLABS/needle#273
We should review where we use Needle and if other tools are a better alternative (e.g. objection, passionfruit).