chiark / gitweb /
dscanner - Drozer based post-build dynamic vulnerability scanner command
authorKevin C. Krinke <kevin@krinke.ca>
Tue, 6 Dec 2016 12:57:04 +0000 (13:57 +0100)
committerHans-Christoph Steiner <hans@eds.org>
Tue, 6 Dec 2016 13:00:44 +0000 (14:00 +0100)
commitdf27bae6a0975a594f2b3573707a015e3cb21870
treeca5b3dd02015719c08c7dc41128deaa1648340c7
parentf4392663033508a3b0cdc9b5c18174ad76bf45c8
dscanner - Drozer based post-build dynamic vulnerability scanner command

 * New command `dscanner`, enables one to scan signed APKs with Drozer
 * Drozer is a dynamic vulnerability scanner for Android
 * Drozer runs in a emulator or on-device, this new `dscanner` command...
  * starts a docker image with Drozer and the Android Emulator pre-installed,
  * loads the signed APK into the emulator
  * activates Drozer automated tests for the APK
  * gathers the report output and places it next to the original APK
 * The Drozer docker image can be:
  * cached locally for re-use (just don't run --clean*)
  * retrieved from dockerhub.com for more efficient runtime
  * or be built from scratch (in the new "./docker" directory)
 * New "Vulnerability Scanning" documentation section (run gendocs.sh)
13 files changed:
README.md
docker/Dockerfile [new file with mode: 0644]
docker/Makefile [new file with mode: 0644]
docker/README.md [new file with mode: 0644]
docker/drozer.py [new file with mode: 0644]
docker/enable_service.py [new file with mode: 0755]
docker/entrypoint.sh [new file with mode: 0755]
docker/install_agent.py [new file with mode: 0755]
docs/fdroid.texi
fdroid
fdroidserver/build.py
fdroidserver/dscanner.py [new file with mode: 0644]
setup.py