trueseeing is a fast, accurate and resillient vulnerabilities scanner for Android apps. It operates on Android Packaging File (APK) and outputs a comprehensive report in HTML. It doesn’t matter if the APK is obfuscated or not.
Capability
Currently trueseeing can detect the following class of vulnerabilities:
Improper Platform Usage (M1)
Debuggable
Inadvent publishing of Activities, Services, ContentProviders, BroadcastReceivers
Insecure Data (M2)
Backupable (i.e. suspectible to the backup attack)
Insecure file permissions
Logging
Insecure Commnications (M3)
Lack of pinning (i.e. suspictible to the TLS interception attack)
Use of cleartext HTTP
Tamperable WebViews
Insufficient Cryptography (M5)
Hardcoded passphrase/secret keys
Vernum ciphers with static keys
Use of the ECB mode
Client Code Quality Issues (M7)
Reflectable WebViews (i.e. XSSs in such views should be escalatable to remote code executions via JS reflection)
Usage of insecure policy on mixed contents
Code Tampering (M8)
Hardcoded certificates
Reverse Engineering (M9)
Lack of obfuscation
Usage
The following command line is sufficient to scan a APK (target.apk):
$ trueseeing /path/to/target.apk > report.html
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distributions
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file trueseeing-2.0.7-py3-none-any.whl.
File metadata
- Download URL: trueseeing-2.0.7-py3-none-any.whl
- Upload date:
- Size: 6.2 MB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
8790f63d1f94aa910018f3aefee0f56bddf4af946727c19e1bdbc8094e511d4d
|
|
| MD5 |
61a425c2353c7e9ad696573a029bc7be
|
|
| BLAKE2b-256 |
05ebbdd416c28e0e8115e6528879af6265182e80157237851fc6eda71e85e28c
|
