usebruno
Hybrid analysis of Bruno is flagged as malicious. need confirmation if this is false positive.
I have checked the following:
- [X] I use the newest version of bruno.
- [X] I've searched existing issues and found nothing related to my issue.
Describe the bug
Hybrid analysis tool flagged the v1.30 as malicious. can you please confirm if this is a false positive?
.bru file to reproduce the bug
No response
Screenshots/Live demo link
Dynamic Analysis.pdf MITRE ATT&CK.pdf Static Analsyis.pdf
We are currently investigating this issue and will provide an update within the next week.
Hi,
Do you have any update on this?
On Sun, 27 Oct, 2024, 4:46 pm Anoop M D, @.***> wrote:
We are currently investigating this issue and will provide an update within the next week.
— Reply to this email directly, view it on GitHub https://github.com/usebruno/bruno/issues/3259#issuecomment-2439971884, or unsubscribe https://github.com/notifications/unsubscribe-auth/AOLVTDFT6BUJZTQ7XKIZVODZ5TDPBAVCNFSM6AAAAABPPQ7NAOVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDIMZZHE3TCOBYGQ . You are receiving this because you commented.Message ID: @.***>
Hello Team, Do you have any update still I can see this issue under 2.x version
This is a false positive.
Bruno is a filesystem-based API client designed to operate directly on the filesystem. Reading and writing files, scripting, and spawning subprocesses are essential functionalities inherent to the application's normal operation.
Bump. What could be more pertinent than this issue? It makes the app very if difficult if not impossible to use for myself, let alone others on my team who might consider adopting it for testing.
As @helloanoop mentioned earlier this is a false positive. Closing this issue.
