Ostorlab / oxo

OXO is a security scanning orchestrator for the modern age.
https://oxo.ostorlab.co
Apache License 2.0
517 stars 52 forks source link

Update Request for APK and IPA Scanning Agents #659

Open MrR10T opened 4 months ago

MrR10T commented 4 months ago

Hello, I have been using Ostorlab for security scanning in general and considering I'm doing even some mobile security testing I noticed that the agents for APK and IPA file scans have been missing from the GitHub repository (at least for what is related to the CLI usage).

I also observed mentions about the potential release of these agents, including for the command line interface, around two years ago. Could you provide an update on the status of the scanning agents for APK and IPA files? Are there any plans to update these components in the near future?

Thank you for your efforts on this essential tool, and I look forward to any updates you might have.

Best regards, Alberto

3asm commented 1 month ago

The mobile agents require some major additions to ease exposing access to mobile devices (actual phones connected using USB).

We are working on adding these capabilities but it will take some time to make sure all the setup is automated and pain-free.