Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[TOOL] Frida Codeshare #2824

Closed
TheDauntless opened this issue Jul 14, 2024 · 1 comment
Closed

[TOOL] Frida Codeshare #2824

TheDauntless opened this issue Jul 14, 2024 · 1 comment
Assignees
@TheDauntless
Labels
Android tools

Comments

@TheDauntless
Copy link
Collaborator

Update the page with some good examples of CodeShare scripts. The SSL pinning script should be changed to the multiple-unpinning script which is much better.

https://codeshare.frida.re/@akabe1/frida-multiple-unpinning/
@TheDauntless TheDauntless self-assigned this Jul 14, 2024
@cpholguera
Copy link
Collaborator

And/Or we could create pages for the most interesting scripts so that we can create an overview of how they are used in our guide.

TheDauntless pushed a commit that referenced this issue Aug 12, 2024
Fixes #2824
20fca88
@TheDauntless TheDauntless mentioned this issue Aug 12, 2024
Merged
serek8 pushed a commit to serek8/owasp-mstg that referenced this issue Sep 3, 2024
@TheDauntless @serek8
Fixes OWASP#2824 (OWASP#2873)
7f4ba70 
Co-authored-by: Jeroen Beckers <dauntless@dauntless.be>
cpholguera added a commit that referenced this issue Oct 19, 2024
@serek8 @cpholguera
@TheDauntless @sk3l10x1ng @sushi2k
[MASWE-0004] Sensitive Data Not Excluded From Backup (#2866)
4ffb7e2 
* Add weakness page

* Update MASWE-0040.md with new links (#2867)

* [MASTG-TOOL-0108] Update Corellium tools page with benefits and limitations (#2834)

* Add Corellium tools page with benefits and limitations

* Apply suggestions from code review

Co-authored-by: Jeroen Beckers <info@dauntless.be>

* fix md links

* update corellium content

* update tool id

---------

Co-authored-by: Jeroen Beckers <info@dauntless.be>
Co-authored-by: Jeroen Beckers <me.githbub@dauntless.be>

* [MASTG-TOOL-0109] Add Nope proxy (by @appknox) (#2868)

* added Nope-proxy tool

* fix spaces

* small fixes

* update tool ID

---------

Co-authored-by: Carlos Holguera <perezholguera@gmail.com>

* [MASTG-TOOL-0110] Add semgrep (#2871)

* add semgrep

* update references to @MASTG-TOOL-0110

* updated donators

* Typo fix (#2874)

Co-authored-by: Jeroen Beckers <dauntless@dauntless.be>

* Fixes #2824 (#2873)

Co-authored-by: Jeroen Beckers <dauntless@dauntless.be>

* Change news link (#2876)

Co-authored-by: Jeroen Beckers <dauntless@dauntless.be>

* Fix news not showing (#2877)

* Update MASWE-0100.md (#2878)

add refs

* Update talks.yaml (#2883)

* [MASWE-0009] Add Weak Cryptographic Key Generation (by appknox) (#2849)

* MASWE-0009

* fix spell

* fix markdown-lint

* updated weakness

* change test ID

* add semgrep as tool

* change demo IDs

* change demo id as duplicate

* Update weaknesses/MASVS-CRYPTO/MASWE-0009.md

* Apply suggestions from code review

* updated changes

* renamed TOOL-0105 -> TOOL-0109

* fix changes

* rm semgrep (will be added separately) and update refs to the tool

* update ios demo to use r2 and the MASTestApp for iOS

* update spell checker ignore words list

* rm ios folder

* add ios folder to correct name and demo based on r2

* update MASTG-TEST-0209 with libraries and references. Extended to consider also dynamic analysis.

* change to modes of introduction

* update DEMO-0011 to be about RSA key size

* Apply suggestions from code review

* add binary for demo 11

* update r2 script and output

* Update weaknesses/MASVS-CRYPTO/MASWE-0009.md

* Update tests-beta/ios/MASVS-CRYPTO/MASTG-TEST-0209.md

Co-authored-by: Carlos Holguera <perezholguera@gmail.com>

* Apply suggestions from code review

Co-authored-by: Carlos Holguera <perezholguera@gmail.com>

* Apply suggestions from code review

Co-authored-by: Sven <sven@bsddaemon.org>

* updated android demo

* changed semgrep rule to standard form

* Apply suggestions from code review

* remove extra line

* fix link

---------

Co-authored-by: Sven <sven@bsddaemon.org>
Co-authored-by: Carlos Holguera <perezholguera@gmail.com>

* fix rule filename (#2885)

* Update MASTG-DEMO-0012.md rule name (#2886)

* Fix title for MASTG-DEMO-0011.md (#2888)

* Update Sensitive Data Not Excluded From Backup

* Add a test and a demo for Android

* Add a test for iOS

* Add a demo for iOS

* Fix markdown files according to the linter

* Fix conflicts in IDs

* Apply suggestions from code review

Co-authored-by: Carlos Holguera <perezholguera@gmail.com>

* Update weaknesses/MASVS-STORAGE/MASWE-0004.md

* Apply suggestions from code review

Co-authored-by: Carlos Holguera <perezholguera@gmail.com>

* Update IDs and rephrase the evaluation sections

* Use r2 script for demo

* Fix the Observations section

* Apply suggestions from code review

* Add AndroidManifest.xml for MASTG-DEMO-0020

* rename demo folder

* Apply suggestions from code review

* Update MASWE-0004.md status to "new"

* Refactor Android backup instructions for MASTG-TEST-0216

* fix typo

---------

Co-authored-by: Carlos Holguera <perezholguera@gmail.com>
Co-authored-by: Jeroen Beckers <info@dauntless.be>
Co-authored-by: Jeroen Beckers <me.githbub@dauntless.be>
Co-authored-by: Prudhv! <58649792+sk3l10x1ng@users.noreply.github.com>
Co-authored-by: Sven <sven@bsddaemon.org>
Co-authored-by: Jeroen Beckers <dauntless@dauntless.be>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@TheDauntless TheDauntless

Labels
Android tools
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@TheDauntless @cpholguera