Mobsf

- Features or Enhancements
- Android Hardcoded Secrets False Positive Improvement
- New Android Crypto Rule
- Rescan Fail-Safe and Code QA
- Auto Comment for PR and Issues
- USE_HOME by default
- Dynamically Display Config Location


- Bug Fixes
- Fixed a bug in iOS ATS plist analysis

- Bug Fixes
- Removed Android Shared Library PIE Check
- Improved Frida Instrumentation Logic to prevent Frida bypass
- Fixed a False positive in Android Java Random rule
- Fixed a bug that caused multiple first time saves of the same scan
- Fixed Dynamic Analyzer JSON Report REST API bug

- Features or Enhancements
- Android Hardcoded Secrets Improvement
- iOS IPA binary analysis improvements
- Improved Android Manifest Analysis
- Improved Setup
- Updated to APKiD that is maintained by MobSF Team
- Static Analysis Rule QA
- macOS BigSur support
- Update libsast to skip large files.
- Improved iOS plist analysis
- Relaxed Android Source code zip requirements


- Bug Fixes
- Fixed a bug in Android Shared Library RELRO check
- Fixed a bug in Windows setup that prevents detection of python version on the first run
- Fixed a bug in Recent Scan
- Fixed a bug in root CA naming that prevented traffic interception

- Bug Fixes
- MobSF python package fix

- Features or Enhancements
- OWASP MSTG Mapping to Rules
- Python 3.9 support
- Prebuilt DEX enabled yara-python wheels
- Dynamic Downloading of frida-server binary
- Code QA

- Bug Fixes
- Windows APPX bug fix

- Features or Enhancements
- Added Support for Android 10 Dynamic Analysis
- Published new REST APIs for Dynamic Analysis
- New Source Tree Browser for Android Static Analysis
- Improved Binary and Shared Object Analysis with LIEF
- Added Support for NIAP v1.3
- Added a world map UI plotting server locations
- Added Maltrail Domain Check
- Improved Android Permission Analysis
- iOS Objective C Rule improvements
- Android Kotlin Rule improvements
- MobSF now available as a python package and published to pypi
- Migrated CI from Travis to Github Action
- Improved File Magic Check on Uploads
- Post Install Check script
- Static Analysis Hardcoded Secrets Section from strings.xml
- Updated Dependencies
- Custom Header for REST API Key

- Bug Fixes
- Fixed Install Verification bug on older Android versions
- Fix a Regex DoS in rule
- Fixed IPA Static Analysis Bug
- Minor PDF template fix