v4.0.7

v4.0.7 Changelog

• Features or Enhancements

  • Support Authentication & Authorization in MobSF
  • Added support for SSO + Okta SSO Documentation
  • Promoted from Beta to Stable since v4.0.0
  • Added Pagination support for recent scans
  • Added support for scanning AAB with MobSF
  • Convert AAB to APK for scanning
  • Dockerfile QA
  • Prevent docker container exits on volume mount
  • Android Frida root bypass and debugger bypass scripts improvements
  • Added a new Android SAST Rule android_webview_allow_file_from_url
  • Deeplink Trigger Support for Android Dynamic Analyzer
  • Added support for real time scan status and scan logs in scan report, REST API exposed
  • Add support for numeric iOS Bundle ID
  • General Code QA
  • Dependency Bump

• Security

  • Fixed an SSRF in firebase db check in MobSF <=3.9.7
  • Fixes a zip slip vulnerability in MobSF <= 4.0.6 affecting AR archive extraction

What's Changed

• [SECURITY] Fixes an SSRF vulnerability report from positive technologies by @ajinabraham in #2373
• Update README.md by @ajinabraham in #2383
• fix IP2Location error by @ohyeah521 in #2372
• Update SUPPORT.md by @ajinabraham in #2384
• [EFR] AuthZ and AuthN for MobSF + Bug Fixes by @ajinabraham in #2366
• [EFR] SSO Support + Okta SSO Documentation by @ajinabraham in #2389
• [HOTFIX] SSO Support hosts behind proxy by @ajinabraham in #2390
• feat(page): recent scans add page jumper by @miaoyc666 in #2348
• [HOTFIX] Support AAB with MobSF, Convert AAB to APK, Fixes #2387 by @ajinabraham in #2391
• [HOTFIX] Code QA by @ajinabraham in #2393
• [HOTFIX] AppSec PNW 2024, Deeplink Trigger Support for Android Dynamic Analyzer by @ajinabraham in #2402
• [HOTFIX] SECURITY.md by @ajinabraham in #2418
• [EFR] Realtime Scan status and logs by @ajinabraham in #2416
• [SECURITY][HOTFIX] Fixes GHSA-4hh3-vj32-gr6j by @ajinabraham in #2421
• [HOTFIX] Bump deps by @ajinabraham in #2426
• Check for internet before attempting to download APK by @ayushmanchhabra in #2422
• [HOTFIX] dep bups + Fix #2424 by @ajinabraham in #2431

New Contributors

• @miaoyc666 made their first contribution in #2348
• @ayushmanchhabra made their first contribution in #2422

Full Changelog: v3.9.7...v4.0.7