Skip to content

Commit b10bb81

Browse files
committed
Add TLSAssistant v3.1 changes
1 parent bfa6af4 commit b10bb81

File tree

2 files changed

+40
-11
lines changed

2 files changed

+40
-11
lines changed

_tools/TLSAssistant/TLSAssistant.md

+40-11
Original file line numberDiff line numberDiff line change
@@ -48,12 +48,15 @@ The tool has been developed within [Digimat](https://ict.fbk.eu/partnerships/co-
4848
<img class="image-centered" src="/assets/areas/tools/TLSAssistant/current_architecture.png" alt="current_architecture" />
4949

5050
**TLSAssistant v3** is the latest release of our state-of-the-art analyzer able to help system administrators and Android app developers in correctly configuring their TLS deployments. This version expands the software's capabilities by adding a new analysis module able to assess the compliance level of TLS deployments, comparing them to national agencies-issued guidelines. The new update also comes with an improved output module, which is now able to generate structured PDF reports.
51+
Lastly, the new update integrates a new state-of-the-art static and extensible app security testing tool called SEBASTiAn. Its presence enhanced existing Android analyses and introduces the possiblity to analyze iOS applications.
5152

5253
It currently integrates five tools:
5354

5455
* Android analysis
55-
* [mallodroid](https://github.com/stfbk/mallodroid)
56+
* [SEBASTiAn](https://github.com/talos-security/SEBASTiAn)
5657
* [SUPERAnalyzer](https://github.com/SUPERAndroidAnalyzer/super)
58+
* iOS analysis
59+
* [SEBASTiAn](https://github.com/talos-security/SEBASTiAn)
5760
* Server analysis
5861
* [testssl.sh](https://github.com/drwetter/testssl.sh)
5962
* [tlsfuzzer](https://github.com/tomato42/tlsfuzzer)
@@ -126,24 +129,50 @@ In order to contribute to the project, allowing the Core module to automatically
126129

127130
#### Wrapper Modules
128131

129-
| Module Name | Wraps |
130-
| ------------- | ----------------------------------- |
131-
| mallodroid | Mallodroid python3 import and call. |
132-
| SUPERAnalyzer | SUPERAnalyzer subprocess call. |
132+
| Module Name | Wraps |
133+
| ------------- | ---------------------------------- |
134+
| SEBASTiAn | SEBASTiAn python3 import and call. |
135+
| SUPERAnalyzer | SUPERAnalyzer subprocess call. |
133136

134137
#### Analysis Modules
135138

136139
| Module Name | Wrapper Used |
137140
| ---------------------------------- | ------------- |
138-
| Accepting all SSL Certificates | SUPERAnalyzer |
139-
| Certificate or KeyStore Disclosure | SUPERAnalyzer |
140-
| Weak HostnameVerifier | mallodroid |
141+
| Accepting all SSL certificates | SEBASTiAn |
142+
| Allow all hostname | SUPERAnalyzer |
143+
| Certificate or keyStore disclosure | SUPERAnalyzer |
144+
| Crypto ECB ciphers | SEBASTiAn |
145+
| Debuggable application | SEBASTiAn |
146+
| Default HTTP scheme | SEBASTiAn |
147+
| Insecure connection | SEBASTiAn |
148+
| Insecure HostnameVerifier | SEBASTiAn |
149+
| Insecure Socket | SEBASTiAn |
150+
| Insecure SocketFactory | SEBASTiAn |
151+
| Invalid server certificate | SEBASTiAn |
141152
| Obfuscated Code | SUPERAnalyzer |
142153
| SSL GetInsecure Method | SUPERAnalyzer |
143-
| SSL Error | mallodroid |
144-
| Weak TrustManager | mallodroid |
145154
| Weak Algorithms | SUPERAnalyzer |
146-
| WebView has SSL Errors | SUPERAnalyzer |
155+
| WebView SSL Errors | SUPERAnalyzer |
156+
157+
158+
### iOS-Related
159+
160+
#### Wrapper Modules
161+
162+
| Module Name | Wraps |
163+
| ----------- | ---------------------------------- |
164+
| SEBASTiAn | SEBASTiAn python3 import and call. |
165+
166+
#### Analysis Modules
167+
168+
| Module Name | Wrapper Used |
169+
| -------------------------- | ------------ |
170+
| Allow HTTP Plist | SEBASTiAn |
171+
| Insecure connection Plist | SEBASTiAn |
172+
| Insecure TLS version Plist | SEBASTiAn |
173+
| No forward secrecy Plist | SEBASTiAn |
174+
| Weak crypto | SEBASTiAn |
175+
147176

148177
### Core and Output related
149178

Loading

0 commit comments

Comments
 (0)