Skip to content
This repository has been archived by the owner on Feb 16, 2024. It is now read-only.

SUPER 0.2.0

Pre-release
Pre-release
Compare
Choose a tag to compare
@Razican Razican released this 12 Nov 15:18
· 239 commits to master since this release

Second release of SUPER, with a ton of changes and new contributors!

Changelog

Features

  • SUPER now uses templates for report generation. This is one of the biggest changes of the release, and enables users to create their own report templates.
  • Installation package for Mac OS.
  • Line highlighting is now shown in the vulnerable line of the code in found vulnerabilities, colored depending on the criticity of the vulnerability.
  • Reports now show the version of SUPER used to generate them.
  • SUPER now supports analysis of applications placed anywhere instead of having to place them in a folder.
  • Added the --open option to automatically open reports.
  • Added the --test-all option to the CLI, that will test all .apk files in the downloads folder.
  • Added options to the CLI to modify the properties in the config file. We now have --downloads, --threads, --dist, --results, --apktool, --dex2jar, --jd-cmd, --rules or --template options in the CLI.

Changes in rules

  • SUPER now detects exported attributes in <provider>, <receiver>, <activity>, <activity-alias> and <service> tags in the AndroidManifest.xml, and reports potential vulnerabilities. This still needs work since we still don't have all the required information to show real vulnerabilities.

Bug Fixes

  • Changed paths for better multi-platform support.
  • Regular Expressions:
    • URL Disclosure no longer detects content providers (content://...).
  • Solved some coloring errors when combining styling and color in the same print.

Contributions