MobSF / Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
https://opensecurity.in
GNU General Public License v3.0
16.66k stars 3.16k forks source link

[EFR] AuthZ and AuthN for MobSF + Bug Fixes #2366

Closed ajinabraham closed 1 month ago

ajinabraham commented 3 months ago

Describe the Pull Request

* Authentication and Authorization (`Maintainer` , Viewer`) support in MobSF
* Basic User Management
* Bug Fixes in Runtime Executable Tampering
* Ratelimiting support for login endpoint
* Disable AuthZ/AuthN for REST API and also via ENV VAR `MOBSF_DISABLE_AUTHENTICATION=1`
* Bug Fix #2285 
* Bug Fix Icon Analysis Nonetype
* Update SSRF Filter
* Dependency Bump
* Beta to Stable release from V4
* Runs with DEBUG=False
* New home screen UI

Checklist for PR

Additional Comments (if any)

DESCRIBE HERE
github-actions[bot] commented 3 months ago

👋 @ajinabraham Thank you for sending this pull request ❤️. Please make sure you have followed our contribution guidelines. We will review it as soon as possible

ohyeah521 commented 3 months ago

Many security issues can be avoided using the django-allauth module.

ajinabraham commented 3 months ago

For basic username/password authentication and account management, Django has decent inbuilt authentication APIs. Will consider django-allauth or others if we plan to support other authentication strategies.

matandobr commented 1 month ago

@ajinabraham Great stuff, let me test 😊

ajinabraham commented 1 month ago

@matandobr I guess, I have addressed the review comments.