super icon indicating copy to clipboard operation
super copied to clipboard

Secure, Unified, Powerful and Extensible Rust Android Analyzer

Results 32 super issues
Sort by recently updated
recently updated
newest added

We are detecting false positives in SQL injections where the parameter is an integer (for example #150). We should improve the regular expression so that it specifically finds a `paramString`...

Bug
D-Easy
T-Rules

Hi, I've read the documentation about your tool and I have a question: If I have an APK that has some of its code obfuscated by ProGuard, can your tool...

Question
T-Core
T-Results

We should be able to extract classes from _.dex_ files without requiring dex2jar, and that way depending on less Java code.

Enhancement
D-Moderate
T-Java-deps

There are issues when decompressing some APKs on the dex2jar phase. `com.alibaba.aliexpresshd` and `com.google.android.apps.fireball` are known to fail due to this issue. Super fails with the following error: ``` Starting...

Bug
T-Java-deps

We should not require Java dependencies for our software, here is the current status of Java dependencies: - [x] APKTool - #20 - [ ] jd-cmd - #23 - [...

Enhancement
Help wanted
New feature
D-Hard
T-Java-deps

It would be nice to analyze binary libraries and apply the current rules there. This way, super would be able to extract URLs, IPs and some more data that resides...

New feature
T-Rules
T-Core

We should create a downloader that downloads the application from the market given only the application package id.

New feature
D-Moderate
D-Hard

We need to create a complete rule specification, and publish it as an RFC. We have to include current rule specification and decide if we require more fields, or if...

Enhancement
Help wanted
D-Hard
T-Rules
T-Core
T-Docs

It would be great to have a search option in the source viewer, so that we can search strings etc. manually.

Help wanted
New feature
D-Moderate
T-Results

Currently we use _jd-cmd_ as a dependency for our project, which is a java decompiler. We should use our own so that we don't depend on Java.

Enhancement
D-Hard
T-Java-deps