FILE INFORMATION
File Name:
{{ file_name }}
Size:
{{ size }}
MD5:
{{ md5 }}
SHA1:
{{ sha1 }}
SHA256:
{{ sha256 }}
APP INFORMATION
App Name:
{{ app_name }}
App Type:
{{ app_type }}
Identifier:
{{ bundle_id }}
SDK Name:
{{ sdk_name }}
Version:
{{ app_version }}
Build:
{{ build }}
Platform Version:
{{ platform }}
Min OS Version:
{{ min_os_version }}
Supported Platforms:
{% for pl in bundle_supported_platforms %} {{pl}}, {% endfor %}
{% if binary_analysis %}
BINARY INFORMATION
Arch:
{{ binary_info.arch }}
Sub Arch:
{{ binary_info.subarch }}
Bit:
{{ binary_info.bit }}
Endian:
{{ binary_info.endian }}
{% endif %}
{% if bundle_url_types|length > 0 %}
CUSTOM URL SCHEMES
URL NAME |
SCHEMES |
{% for scheme in bundle_url_types %}
{{scheme | key:"CFBundleURLName" }}
{% if scheme|key:"CFBundleTypeRole" %}
{{scheme | key:"CFBundleTypeRole" }}
{% endif %}
|
{% if scheme|key:"CFBundleURLSchemes" %}
{% for ul in scheme.CFBundleURLSchemes %}
{{ul}}
{% endfor %}
{% endif %}
|
{% endfor %}
{% endif %}
{% if permissions %}
APPLICATION PERMISSIONS
PERMISSIONS |
STATUS |
DESCRIPTION |
REASON IN MANIFEST |
{% for perm,desc in permissions.items %}
{{ perm }}
|
{{ desc.status }}
|
{{ desc.description}}
|
{{ desc.reason }}
|
{% endfor %}
{% endif %}
{% if ats_analysis %}
APP TRANSPORT SECURITY (ATS)
NO |
ISSUE |
SEVERITY |
DESCRIPTION |
{% if ats_analysis|length > 0 %}
{% for findings in ats_analysis %}
{{ forloop.counter }} |
{{findings.issue}}
|
{% if findings.severity == "high" %}
high
{% elif findings.severity == "secure" %}
secure
{% elif findings.severity == "warning" %}
warning
{% elif findings.severity == "info" %}
info
{% endif %}
|
{{findings.description}}
|
{% endfor %}
{% else %}
No ATS exceptions found.
|
secure
|
No insecure connections configured. App Transport Security (ATS) is enabled.
|
{% endif %}
{% endif %}
{% if virus_total and virus_total.items|length > 9 and 'request successfully queued' not in virus_total.verbose_msg %}
VIRUSTOTAL SCAN
{{ virus_total.positives }} / {{ virus_total.total }}
AVs found this file Malicious!
{% if virus_total.positives %}
AV |
DETECTION |
{% for av_name,av_result in virus_total.scans.items %}
{% if av_result.detected == True %}
{{ av_name }}
|
{{ av_result.result }}
|
{% endif %}
{% endfor %}
{% endif %}
{% endif %}
{% if binary_analysis %}
IPA BINARY CODE ANALYSIS
NO |
ISSUE |
SEVERITY |
STANDARDS |
DESCRIPTION |
{% for issue, details in binary_analysis.items %}
{{ forloop.counter }} |
{{ issue }}
|
{% if details|key:"severity" == 'info' %}
info
{% elif details|key:"severity" == 'good' %}
secure
{% elif details|key:"severity" == 'high' %}
high
{% elif details|key:"severity" == 'warning' %}
warning
{% endif %}
|
{% if average_cvss %}
CVSS V2:
{% if details|key:"cvss" > 6 %}
{{ details|key:"cvss" }} (high)
{% elif details|key:"cvss" == 0 %}
{{ details|key:"cvss" }} (info)
{% elif details|key:"cvss" >= 4 %}
{{ details|key:"cvss" }} (medium)
{% elif details|key:"cvss" < 4 %}
{{ details|key:"cvss" }} (low)
{% endif %}
{% endif %}
{% if details|key:"cwe" %}CWE: {{ details|key:"cwe" }}{% endif %}
{% if details|key:"owasp-mobile" %} OWASP Top 10: {{ details|key:"owasp-mobile" }}{% endif %}
{% if details|key:"masvs" %} OWASP MASVS: {{ details|key:"masvs" }}{% endif %}
|
{{ details|key:"detailed_desc" }}
|
{% endfor %}
{% endif %}
{% if macho_analysis %}
IPA BINARY ANALYSIS
PROTECTION |
STATUS |
SEVERITY |
DESCRIPTION |
{% if not macho_analysis %}
Binary Analysis Failed.
{% else %}
NX |
{{macho_analysis.nx.has_nx}} |
{{macho_analysis.nx.severity}} |
{{macho_analysis.nx.description}} |
PIE |
{{macho_analysis.pie.has_pie}} |
{{macho_analysis.pie.severity}} |
{{macho_analysis.pie.description}} |
STACK CANARY |
{{macho_analysis.stack_canary.has_canary}} |
{{macho_analysis.stack_canary.severity}} |
{{macho_analysis.stack_canary.description}} |
ARC |
{{macho_analysis.arc.has_arc}} |
{{macho_analysis.arc.severity}} |
{{macho_analysis.arc.description}} |
RPATH |
{{macho_analysis.rpath.has_rpath}} |
{{macho_analysis.rpath.severity}} |
{{macho_analysis.rpath.description}} |
CODE SIGNATURE |
{{macho_analysis.code_signature.has_code_signature}} |
{{macho_analysis.code_signature.severity}} |
{{macho_analysis.code_signature.description}} |
ENCRYPTED |
{{macho_analysis.encrypted.is_encrypted}} |
{{macho_analysis.encrypted.severity}} |
{{macho_analysis.encrypted.description}} |
SYMBOLS STRIPPED |
{{macho_analysis.symbol.is_stripped}} |
{{macho_analysis.symbol.severity}} |
{{macho_analysis.symbol.description}} |
{% endif %}
{% endif %}
{% if code_analysis %}
CODE ANALYSIS
NO |
ISSUE |
SEVERITY |
STANDARDS |
FILES |
{% for rule, details in code_analysis.items %}
{{ forloop.counter }} |
{% if details.metadata|key:"ref" %}
{{ details.metadata.description }}
{% else %}
{{ details.metadata.description }}
{% endif %}
|
{% if details.metadata.severity == "high" %}
high
{% elif details.metadata.severity == "good" %}
secure
{% elif details.metadata.severity == "warning" %}
warning
{% elif details.metadata.severity == "info" %}
info
{% endif %}
|
{% if average_cvss %}
CVSS V2:
{% if details.metadata.cvss > 6 %}
{{ details.metadata.cvss }} (high)
{% elif details.metadata.cvss == 0 %}
{{ details.metadata.cvss }} (info)
{% elif details.metadata.cvss >= 4 %}
{{ details.metadata.cvss }} (medium)
{% elif details.metadata.cvss < 4 %}
{{ details.metadata.cvss }} (low)
{% endif %}
{% endif %}
{% if details.metadata.cwe %}CWE: {{details.metadata.cwe }}{% endif %}
{% if details.metadata|key:"owasp-mobile" %} OWASP Top 10: {{ details.metadata|key:"owasp-mobile" }}{% endif %}
{% if details.metadata.masvs %} OWASP MASVS: {{ details.metadata.masvs }}{% endif %}
|
{% for file_path in details.files %}
{{ file_path }}
{% endfor %}
|
{% endfor %}
{% endif %}
{% if domains %}
DOMAIN MALWARE CHECK
DOMAIN |
STATUS |
GEOLOCATION |
{% for domain, details in domains.items %}
{{domain}} |
{% if details|key:"bad" == "yes" %}
malware
URL: {{details|key:"domain_or_url"}}
IP: {{details|key:"ip"}}
Description: {{details|key:"desc"}}
{% else %}
ok
{% endif %}
|
{% if details|key:"geolocation" %}
IP: {{details|key:"geolocation"|key:"ip"}}
Country: {{details|key:"geolocation"|key:"country_long"}}
Region: {{details|key:"geolocation"|key:"region"}}
City: {{details|key:"geolocation"|key:"city"}}
Latitude: {{details|key:"geolocation"|key:"latitude"}}
Longitude: {{details|key:"geolocation"|key:"longitude"}}
View: Google Map
{% else %}
No Geolocation information available.
{% endif %}
|
{% endfor %}
{% endif %}
{% if firebase_urls %}
FIREBASE DATABASES
FIREBASE URL |
DETAILS |
{% for item in firebase_urls %}
{{ item.url }}
|
{% if item.open %}
highFirebase DB is exposed publicly.
{% else %}
infoApp talks to a Firebase Database.
{% endif %}
|
{% endfor %}
{% endif %}
{% if emails %}
EMAILS
EMAIL |
FILE |
{% for email_dict in emails %}
{% for em in email_dict|key:"emails" %}
{{ em }}
{% endfor %}
|
{{email_dict|key:"path"}}
|
{% endfor %}
{% endif %}
{% if trackers|key:"trackers" %}
TRACKERS
TRACKER |
CATEGORIES |
URL |
{% for trk in trackers|key:"trackers" %}
{{trk.name}}
|
{{trk.categories}}
|
{{trk.url}}
|
{% endfor %}
{% endif %}
{% if secrets %}
HARDCODED SECRETS
POSSIBLE SECRETS |
{% for sec in secrets %}
{{ sec }}
|
{% endfor %}
{% endif %}
{% if not appstore_details.error %}
APP STORE INFORMATION
Title:
{{ appstore_details.title }}
Score:
{{ appstore_details.score}}
Features:
{% for fea in appstore_details.features %}
{{ fea }},
{% endfor %}
Price:
{{ appstore_details.price }}
Category:
{% for cat in appstore_details.category %}
{{ cat }},
{% endfor %}
App Store URL:
{{ appstore_details.app_id }}
Developer:
{{appstore_details.developer}}
Developer ID:
{{appstore_details.developer_id}}
Developer Website:
{{appstore_details.developer_website }}
Developer URL:
{{appstore_details.developer_url}}
Supported Devices
{% for dev in appstore_details.supported_devices %}
{{ dev }},
{% endfor %}
Description:
{{ appstore_details.description }}
{% endif %}