Narayan Gowraj

Hi @theankurkedia I tired setting the app using the instructions from the README file. After setting up Firebase project and copying the GoogleService-Info.plist file, I get the following error, The...

Adding more regex to find sensitive data

2

Consider adding these regular expressions which are not part of the list, 1. .*([a-zA-Z0-9]*-[a-zA-Z0-9]*){3,10}.* => To find salts, nonce used in code. 2. ([-]+(BEGIN\\sRSA\\sPRIVATE\\sKEY)[-]+[A-Za-z\\s0-9+/.=]{400}) => RSA Private keys 3. (?...

Android - Security SSL

1

We can try to incorporate test cases that can be used to identify issues with SSL/TLS in Android apps. Reference Doc: https://developer.android.com/training/articles/security-ssl 1. Loading custom certificates into the Android KeyStore....

A new zero-day vulnerability has been release by Pangu Lab: https://zipperdown.org/. We can check for the following package to report this vulnerability, https://developer.android.com/reference/java/util/zip/package-summary Regex: .*java.util.zip\..*