45 lines
1.2 KiB
YAML
45 lines
1.2 KiB
YAML
|
Categories:
|
||
|
|
- Security
|
||
|
|
License: MIT
|
||
|
|
SourceCode: https://github.com/nowsecure/android-vts
|
||
|
|
IssueTracker: https://github.com/nowsecure/android-vts/issues
|
||
|
|
|
||
|
|
AutoName: VTS for Android
|
||
|
|
Description: |-
|
||
|
|
This tool was meant to show the end user the attack surface that a given device
|
||
|
|
is susceptible to. In implementing these checks we attempt to minimize or
|
||
|
|
eliminate both false positives/false negatives without negatively affecting
|
||
|
|
system stability. List of current bug checks:
|
||
|
|
|
||
|
|
* ZipBug9950697
|
||
|
|
* Zip Bug 8219321 / Master keys
|
||
|
|
* Zip Bug 9695860
|
||
|
|
* Jar Bug 13678484 / Android FakeID
|
||
|
|
* CVE 2013-6282 / put/get_user
|
||
|
|
* CVE_2011_1149 / PSNueter / Ashmem Exploit
|
||
|
|
* CVE_2014_3153 / Futex bug / Towelroot
|
||
|
|
* CVE 2014-3847 / WeakSauce * StumpRoot
|
||
|
|
* Stagefright bugs
|
||
|
|
* x509 Serialization bug
|
||
|
|
* PingPong root - CVE-2015-3636
|
||
|
|
* Stagefright - CVE-2015-6602
|
||
|
|
* Samsung Remote Code Execution as System
|
||
|
|
* CVE-2015-6608
|
||
|
|
|
||
|
|
RepoType: git
|
||
|
|
Repo: https://github.com/nowsecure/android-vts.git
|
||
|
|
|
||
|
|
Builds:
|
||
|
|
- versionName: v.13
|
||
|
|
versionCode: 13
|
||
|
|
disable: binaries
|
||
|
|
commit: v.13
|
||
|
|
subdir: app
|
||
|
|
gradle:
|
||
|
|
- yes
|
||
|
|
|
||
|
|
AutoUpdateMode: None
|
||
|
|
UpdateCheckMode: Tags
|
||
|
|
CurrentVersion: v.13
|
||
|
|
CurrentVersionCode: 13
|