deardaniel/secdata-raw huggingface dataset:
Mobile Security Framework: config

[MobSF]
dir = \MobSF\
downloads = \Downloads\
tools = \Tools\
samples = \Samples\
key_path = \Keys\
priv_key = windows_vm_priv_key.asc
pub_key = windows_vm_pub_key.asc

[nuget]
url = https://dist.nuget.org/win-x86-commandline/latest/nuget.exe
file = nuget.exe

[binskim]
nuget = Microsoft.CodeAnalysis.BinSkim

[binscope]
url_x64 = https://download.microsoft.com/download/5/6/0/56027BE0-3A1F-4326-B966-BC99A15856AA/BinScope_x64.msi
url_x86 = https://download.microsoft.com/download/5/6/0/56027BE0-3A1F-4326-B966-BC99A15856AA/BinScope_x86.msi

[rpc]
url = https://raw.githubusercontent.com/MobSF/Mobile-Security-Framework-MobSF/master/mobsf/install/windows/rpc_client.py
file = rpc_client.py

[autostart]
file = mobsf_rpc.bat
Mobile Security Framework: ios binary analysis rules

#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are met:
#
# * Redistributions of source code must retain the above copyright notice, this
# list of conditions and the following disclaimer.
# * Redistributions in binary form must reproduce the above copyright notice,
# this list of conditions and the following disclaimer in the documentation
# and/or other materials provided with the distribution.
# * Neither the name of the Nth Dimension nor the names of its contributors may
# be used to endorse or promote products derived from this software without
# specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
# AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
# LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
# INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
# CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
# ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
# POSSIBILITY OF SUCH DAMAGE.
#
# (c) Tim Brown, 2014
# <mailto:timb@nth-dimension.org.uk>
# <http://www.nth-dimension.org.uk/> / <http://www.machine.org.uk/>
Mobile Security Framework: maltrail blacklist

The MIT License (MIT)

Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
Mobile Security Framework: apksigner

# Copyright (C) 2016 The Android Open Source Project
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# Set up prog to be the path of this script, including following symlinks,
# and set up progdir to be the fully-qualified pathname of its directory.
Mobile Security Framework: frida

              wxWindows Library Licence, Version 3.1
              ======================================

Copyright (c) 1998-2005 Julian Smart, Robert Roebling et al

Everyone is permitted to copy and distribute verbatim copies
of this licence document, but changing it is not allowed.

                     WXWINDOWS LIBRARY LICENCE
   TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION

This library is free software; you can redistribute it and/or modify it
under the terms of the GNU Library General Public Licence as published by
the Free Software Foundation; either version 2 of the Licence, or (at your
option) any later version.

This library is distributed in the hope that it will be useful, but WITHOUT
ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Library General Public
Licence for more details.

You should have received a copy of the GNU Library General Public Licence
along with this software, usually in a file named COPYING.LIB.  If not,
write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth
Floor, Boston, MA 02110-1301 USA.

EXCEPTION NOTICE

1. As a special exception, the copyright holders of this library give
permission for additional uses of the text contained in this release of the
library as licenced under the wxWindows Library Licence, applying either
version 3.1 of the Licence, or (at your option) any later version of the
Licence as published by the copyright holders of version 3.1 of the Licence
document.

2. The exception is that you may use, copy, link, modify and distribute
under your own terms, binary object code versions of works based on the
Library.

3. If you copy code from files distributed under the terms of the GNU
General Public Licence or the GNU Library General Public Licence into a
copy of this library, as this licence permits, the exception does not apply
to the code that you add in this way.  To avoid misleading anyone as to the
status of such modified files, you must delete this exception notice from
such code and/or adjust the licensing conditions notice accordingly.

4. If you write modifications of your own for this library, it is your
choice whether to permit this exception to apply to your modifications.  If
you do not wish that, you must delete the exception notice from such code
and/or adjust the licensing conditions notice accordingly.
Mobile Security Framework: AdminLTE theme

The MIT License (MIT)
Copyright © 2014-2015 Almsaeed Studio

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Mobile Security Framework: Rootcloak

Copyright 2013 Matt Joseph (devadvance)

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
Mobile Security Framework: IP2LOCATION LITE DATA

IP2LOCATION LITE DATA LICENSE

TERMS OF USE

Copyright (c) 2017 IP2Location.com. All Rights Reserved.

This download is provided free of charge by IP2Location.com with the following conditions:

1. You have agreed with our "Terms of Use" published online http://lite.ip2location.com/terms-of-use at all time

2. You have no rights to redistribute or resell this products.

3. "IP2Location.com" may not be used to endorse or promote products derived from this database without specific prior written permission.

4. Licensees may copy, distribute, display and perform the work and make derivative works based on IP2Location LITE only if they give the IP2LOCATION.COM credits in the manner specified below.

All sites, advertising materials and documentation mentioning features or use of this database must display the following acknowledgment:

"This site or product includes IP2Location LITE data available from http://www.ip2location.com."

IP2Location is a registered trademark of Hexasoft Development Sdn Bhd. All other trademarks are the property of their respective owners.
Mobile Security Framework: FSecureLabs frida scripts

Note: This license has also been called the "New BSD License" or "Modified BSD License". See also the 2-clause BSD License.

Copyright 2021 F-Secure

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Mobile Security Framework: class dump z

The BSD 3-Clause License
Copyright (c) 2009, KennyTM
All rights reserved.

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Objection mobile runtime exploration: README

# 📱objection - Runtime Mobile Exploration

`objection` is a runtime mobile exploration toolkit, powered by [Frida](https://www.frida.re/), built to help you assess the security posture of your mobile applications, without needing a jailbreak.

[![Twitter](https://img.shields.io/badge/twitter-%40leonjza-blue.svg)](https://twitter.com/leonjza)
[![PyPi](https://badge.fury.io/py/objection.svg)](https://pypi.python.org/pypi/objection)
[![Black Hat Arsenal](https://raw.githubusercontent.com/toolswatch/badges/master/arsenal/europe/2017.svg?sanitize=true)](https://www.blackhat.com/eu-17/arsenal-overview.html)
[![Black Hat Arsenal](https://raw.githubusercontent.com/toolswatch/badges/master/arsenal/usa/2019.svg?sanitize=true)](https://www.blackhat.com/us-19/arsenal-overview.html)

<img align="right" src="./images/objection.png" height="220" alt="objection">

- Supports both iOS and Android.
- Inspect and interact with container file systems.
- Bypass SSL pinning.
- Dump keychains.
- Perform memory related tasks, such as dumping & patching.
- Explore and manipulate objects on the heap.
- And much, much [more](https://github.com/sensepost/objection/wiki/Features)...

Screenshots are available in the [wiki](https://github.com/sensepost/objection/wiki/Screenshots).

## installation

Installation is simply a matter of `pip3 install objection`. This will give you the `objection` command. You can update an existing `objection` installation with `pip3 install --upgrade objection`.

For more detailed update and installation instructions, please refer to the wiki page [here](https://github.com/sensepost/objection/wiki/Installation).

## license

`objection` is licensed under a [GNU General Public v3 License](https://www.gnu.org/licenses/gpl-3.0.en.html). Permissions beyond the scope of this license may be available at [http://sensepost.com/contact/](http://sensepost.com/contact/).
Objection mobile runtime exploration: android.hooking.notify

Command: android hooking notify

Usage: android hooking notify <class name> [--dump-args] [--dump-return] [--dump-backtrace] [--watch]

Notifies when a class becomes available in the application. This is useful
for hooking classes that may be loaded dynamically at runtime. Additional
flags can be used to dump arguments, return values, and backtraces.

Flags:
   --dump-args         Dump method arguments
   --dump-return       Dump method return values
   --dump-backtrace    Dump call stack backtrace
   --watch             Continue watching for invocations after class is found

Examples:
   android hooking notify com.example.MyClass
   android hooking notify com.example.MyClass --dump-args --watch
Objection mobile runtime exploration: android.hooking.generate

Command: android hooking generate

Usage: android hooking generate <subcommand>

Contains subcommands to generate Frida hooks for Android classes.

Examples:
   android hooking generate class <class name>
   android hooking generate simple <class name>
Objection mobile runtime exploration: android.hooking.search

Command: android hooking search

Usage: android hooking search <pattern> [--json <filename>] [--only-classes]

Searches for classes and methods in the current Android application matching
the specified pattern. The pattern should be in the form <class>!<method>.

Flags:
   --json <filename>  Output results as JSON to the specified file
   --only-classes     Only show classes in search results, not methods

Examples:
   android hooking search com.example.test
   android hooking search *com.example*!*
   android hooking search com.example --only-classes
   android hooking search com.example --json search_results.json
Objection mobile runtime exploration: ios.hooking.search

Command: ios hooking search

Usage: ios hooking search <pattern> [--json <filename>] [--only-classes]

Searches for Objective-C classes and methods in the current iOS application
matching the specified pattern.

Flags:
   --json <filename>  Output results as JSON to the specified file
   --only-classes     Only show classes in search results, not methods

Examples:
   ios hooking search KeychainDataManager
   ios hooking search "+[KeychainDataManager update:forKey:]"
   ios hooking search *Manager* --only-classes
   ios hooking search *Manager* --json search_results.json
Objection mobile runtime exploration: ios.hooking.generate.class

Command: ios hooking generate class

Usage: ios hooking generate class <class name>

Generates a generic Frida hook manager for the specified iOS Objective-C class.
This creates a template hook that can be customized for various hooking operations.

Examples:
   ios hooking generate class NSString
   ios hooking generate class UIViewController
Objection mobile runtime exploration: ios.hooking.list.classes

Command: ios hooking list classes

Usage: ios hooking list classes (optional: --ignore-native)

Lists all of the classes in the current Objective-C runtime. Specifying
the --ignore-native flag, filters out classes with common prefixes such as
'NS' and 'CF'.

Examples:
   ios hooking list classes --ignore-native
Objection mobile runtime exploration: cd

Usage: cd <directory on remote device>

Changes the current working directory on the device.
Many commands within objection are mindful and aware of the current
working directory. An example of this includes the sqlite command, that
allows you to connect to a file in the current path, or to a file specified
with a full path relative to root (/).
For more directories that are applicable to the current app, inspect the
output of the `env` command.

Examples:
   cd Library/Caches
   cd Preferences
   cd /
Objection mobile runtime exploration: android.hooking.get

Command: android hooking get

Usage: android hooking get <subcommand>

Contains subcommands to get various values from the Android application.

Examples:
   android hooking get current_activity
Objection mobile runtime exploration: ios.keychain.dump

Command: ios keychain dump

Usage: ios keychain dump [--json <filename>] [--smart]

Extracts the keychain items for the current application. This is achieved by iterating
over the keychain type classes available in iOS and populating a search dictionary
with them. This dictionary is then used as a query to SecItemCopyMatching() and the
results parsed.

Flags:
   --json <filename>   Output results as JSON to the specified file, includes a 'dataHex' key
   --smart             Attempt smart decoding of items in the keychain

By default, only a small subset of each entry is displayed. For a more complete dump,
use the --json flag.

Items that will be accessible include everything stored with the entitlement group used
during the patching/signing process.

Examples:
   ios keychain dump
   ios keychain dump --json keychain.json
   ios keychain dump --json keychain.json --smart
Objection mobile runtime exploration: ios.info.binary

Command: ios info binary

Usage: ios info binary

Gets information about application binaries and dylibs, including their paths,
architectures, and other relevant details.

Examples:
   ios info binary
Objection mobile runtime exploration: memory.write

Command: memory write

Usage: memory write "<address>" "<pattern>" (optional: --string)

Write an arbitrary set of bytes to an address in memory. Using this command has a high
chance of crashing the applications process if you attempt to write to addresses outside
of the applications heap, or your bytes specified cause to go outside of some memory
boundary.

Examples:
   memory write 0x117a2e347 "ff 41 41 42"
Objection mobile runtime exploration: memory.dump.all

Command: memory dump all

Usage: memory dump all <local destination>

Dumps all of the current processes' memory that is marked as readable and
writable (rw-) to a file specified by local destination.

Examples:
   memory dump all process_memory.dmp
Objection mobile runtime exploration: ios.jailbreak.simulate

Command: ios jailbreak simulate

Usage: ios jailbreak simulate

Attempts to simulate a Jailbroken iOS environment. This is achieved by returning
positive results for file existence checks from NSFileManager fileExistsAtPath
as well as indicating that a fork() was successful if that is called.

Examples:
   ios jailbreak simulate
Objection mobile runtime exploration: filesystem.download

Command: filesystem download

Usage: filesystem download <remote path> <local path> [--folder]

Downloads a file or folder from the remote device to the local machine. The
remote path can be relative to the current working directory or an absolute path.

Flags:
   --folder   Download a folder instead of a single file

Examples:
   filesystem download test.txt
   filesystem download /var/mobile/Preferences/config.plist
   filesystem download /var/mobile/Documents Documents --folder
Objection mobile runtime exploration: ios.nsurlcredentialstorage

Command: ios nsurlcredentialstorage

Usage: ios nsurlcredentialstorage <subcommand>

Contains subcommands to work with the shared NSURLCredentialStorage.

Examples:
   ios nsurlcredentialstorage dump
Objection mobile runtime exploration: android.heap.execute

Command: android heap execute

Usage: android heap execute <object handle> <method name> [--return-string]

Executes a method on a Java object handle on the heap. This allows dynamic
invocation of object methods for testing and exploration.

Flags:
   --return-string   Convert the return value to a string

Examples:
   android heap execute 0x12345678 toString
   android heap execute 0x12345678 toString --return-string
Objection mobile runtime exploration: ios.heap.print.ivars

Command: ios heap print ivars

Usage: ios heap print ivars <object address> [--to-utf8]

Prints instance variables (ivars) for an Objective-C object. This displays all
instance variable names and their current values.

Flags:
   --to-utf8   Attempt to decode output as UTF-8

Examples:
   ios heap print ivars 0x12345678
   ios heap print ivars 0x12345678 --to-utf8
Objection mobile runtime exploration: ios.nsuserdefaults.get

Command: ios nsuserdefaults get

Usage: ios nsuserdefaults get

Queries the applications NSUserDefaults class for all of the entries in
the current application bundle and echoes the entries to screen.

Examples:
   ios nsuserdefaults get
Objection mobile runtime exploration: sqlite

Contains subcommands to work with SQLite databases on the remote device.
Connecting to a SQLite database will result in a copy of the database from
the remote device being downloaded locally. All queries that are run will
be run on the locally cached database. If the changes need to be available
on the remote device, the database should be `sync`'ed back.
Objection mobile runtime exploration: memory.list.exports

Command: memory list exports

Usage: memory list exports <module name> (optional: --json <filename>)

List exports in a specific loaded module. Exports found using this command
could be used in Fridascripts to hook with module.findExportByName().
For a list of modules to list exports from the `memory list modules` command
may be used.

Examples:
   memory list exports libsystem_configuration.dylib
   memory list exports UserManagement
   memory list exports UserManagement --json UserManagementExports.json
Objection mobile runtime exploration: android.root.simulate

Command: android root simulate

Usage: android root simulate

Attempts to simulate a rooted Android environment. This is achieved by
responding positively to common checks that are performed within Android
applications.

Examples:
   android root simulate