search

TrackerControl / xray-archiver-android-ios

Project for the archiving of mobile applications from the Google Play Store and the Apple App Store.
BSD 3-Clause "New" or "Revised" License
3 stars 3 forks source link

Analysis of native `*.so` libraries missing #4

Open kasnder opened 2 years ago

kasnder commented 2 years ago

MobFS shows that native libraries also often contain API endpoints. This isn't currently considered in the analysis.

Example: https://mobsf.live/static_analyzer/?name=com.spotify.music.apk&checksum=ddca27c4795e7247f0e7a1ff6ee8b32a&type=apks

kasnder commented 2 years ago

Not sure how widely this is a concern.

kasnder commented 2 years ago

I could imagine that endpoints are often both in *.dex and *.so files.