Mobile-Security-Framework-MobSF

v4.4.5

Security

• Fixed stored XSS vulnerability in Manifest Analysis

Features

• URL extraction now preserves case sensitivity
• Socket supply chain scanning added
• Improved IP address detection

Fixes

• Better error handling and logging in MalwareDomainCheck

Dependencies

• Django 5.2.6 → 5.2.7

v4.4.2 Changelog

• Features or Enhancements
  • Python 3.13 support
  • Remove pinned dependencies like xmlsec, lxml
  • Bump mitmproxy, httptools, apkid
  • Address older vulnerable packages in docker image
  • Android Permission list update
  • Updated Signatures

What's Changed

• Python 3.13 Support by @ajinabraham in https://github.com/MobSF/Mobile-Security-Framewor...

v4.4.1 Changelog

• Features or Enhancements
  • Frida 17+ support and script updates
  • Breaking change: Corellium iOS device must install Frida server version >=17
  • Updated Frida scripts for logging, ssl/cert pinning bypass
  • Added bridges support to frida
  • Dependency updates
  • Apply MobSF proxy settings to standalone tools_download.py
  • Strict user email val...

v4.3.2 Changelog

• Features or Enhancements

  • Added support for user defined SSO Maintainer or Viewer role mapping
  • Dependency updates

• Security

  • Fixed Partial Denial of Service due to strict regex check in iOS report view URL
  • Fixed Local Privilege escalation due to leaked REST API key in web UI
  • Fixed Stored Cross-Site Scripting in iOS dynamic_analysis view vi...

v4.3.0 Changelog

• Features or Enhancements
  • Added django-q2-based asynchronous scans for Android and iOS binaries and source code
  • Async analysis REST API support & Docs
  • Unified async scan timeout
  • Allow incomplete scan delete after async scan timeout duration
  • Added support for Android SBOM analysis
  • Added Anti-analysis bypasses
  • Handle packed APKs, ref...

v4.1.3 Changelog

• Features or Enhancements
  • Improvement in SAST performance with libsast upgrade.
  • Address a bug that cause SAST scans to timeout.
  • Added Firebase Remote Config Check
  • Add support for searching scans by package name, app name and file name
  • Exposed a REST API for search
  • Add timeouts for each scan steps
  • Added Autopep8 for code linting...

v4.0.7 Changelog

• Features or Enhancements
  • Support Authentication & Authorization in MobSF
  • Added support for SSO + Okta SSO Documentation
  • Promoted from Beta to Stable since v4.0.0
  • Added Pagination support for recent scans
  • Added support for scanning AAB with MobSF
  • Convert AAB to APK for scanning
  • Dockerfile QA
  • Prevent docker container exits on...

v3.9.7 Beta Changelog

• Features or Enhancements
  • iOS Dynamic Analyzer with Corellium
  • Dynamic Analysis refactoring for Android and iOS
  • Exposed iOS Dynamic Analysis REST APIs
  • Added more helper Frida Scripts for Android and iOS Dynamic Analyzer
  • Frida support improvements Injected Frida Code View, Injection, Spawn, Attach and Session
  • Corellium Reverse SSH con...

v3.7.6 Beta Changelog

• Features or Enhancements
  • Docker base image update to Ubuntu 22.04
  • Dockerfile QA
  • Migrated from Pip to Poetry for dependency management
  • Migrate from setup.py to use poetry for build and publish
  • Python 3.11 support
  • Docker ADB connection improvements (host.docker.internal translation for localhost)
  • IOS Swift RulesUpdates `ios_bi...

v3.6.9 Beta Changelog

• Features or Enhancements
  • New Simplified and Updated Documentation https://mobsf.github.io/docs/#/
  • MobSF Dynamic Analysis support for Docker image
  • Updated Documentation to include support for Corellium ARM64 Android VMs
  • Add support for environment variables to configure MobSF
  • Android SCA extract icon from SVG
  • OFAC Sanctioned Country...