Skip to content

Commit

Permalink
Add TLSAssistant v3.1 changes
Browse files Browse the repository at this point in the history
  • Loading branch information
NetBender committed Dec 17, 2024
1 parent bfa6af4 commit b10bb81
Show file tree
Hide file tree
Showing 2 changed files with 40 additions and 11 deletions.
51 changes: 40 additions & 11 deletions _tools/TLSAssistant/TLSAssistant.md
Original file line number Diff line number Diff line change
Expand Up @@ -48,12 +48,15 @@ The tool has been developed within [Digimat](https://ict.fbk.eu/partnerships/co-
<img class="image-centered" src="/assets/areas/tools/TLSAssistant/current_architecture.png" alt="current_architecture" />

**TLSAssistant v3** is the latest release of our state-of-the-art analyzer able to help system administrators and Android app developers in correctly configuring their TLS deployments. This version expands the software's capabilities by adding a new analysis module able to assess the compliance level of TLS deployments, comparing them to national agencies-issued guidelines. The new update also comes with an improved output module, which is now able to generate structured PDF reports.
Lastly, the new update integrates a new state-of-the-art static and extensible app security testing tool called SEBASTiAn. Its presence enhanced existing Android analyses and introduces the possiblity to analyze iOS applications.

It currently integrates five tools:

* Android analysis
* [mallodroid](https://github.com/stfbk/mallodroid)
* [SEBASTiAn](https://github.com/talos-security/SEBASTiAn)
* [SUPERAnalyzer](https://github.com/SUPERAndroidAnalyzer/super)
* iOS analysis
* [SEBASTiAn](https://github.com/talos-security/SEBASTiAn)
* Server analysis
* [testssl.sh](https://github.com/drwetter/testssl.sh)
* [tlsfuzzer](https://github.com/tomato42/tlsfuzzer)
Expand Down Expand Up @@ -126,24 +129,50 @@ In order to contribute to the project, allowing the Core module to automatically

#### Wrapper Modules

| Module Name | Wraps |
| ------------- | ----------------------------------- |
| mallodroid | Mallodroid python3 import and call. |
| SUPERAnalyzer | SUPERAnalyzer subprocess call. |
| Module Name | Wraps |
| ------------- | ---------------------------------- |
| SEBASTiAn | SEBASTiAn python3 import and call. |
| SUPERAnalyzer | SUPERAnalyzer subprocess call. |

#### Analysis Modules

| Module Name | Wrapper Used |
| ---------------------------------- | ------------- |
| Accepting all SSL Certificates | SUPERAnalyzer |
| Certificate or KeyStore Disclosure | SUPERAnalyzer |
| Weak HostnameVerifier | mallodroid |
| Accepting all SSL certificates | SEBASTiAn |
| Allow all hostname | SUPERAnalyzer |
| Certificate or keyStore disclosure | SUPERAnalyzer |
| Crypto ECB ciphers | SEBASTiAn |
| Debuggable application | SEBASTiAn |
| Default HTTP scheme | SEBASTiAn |
| Insecure connection | SEBASTiAn |
| Insecure HostnameVerifier | SEBASTiAn |
| Insecure Socket | SEBASTiAn |
| Insecure SocketFactory | SEBASTiAn |
| Invalid server certificate | SEBASTiAn |
| Obfuscated Code | SUPERAnalyzer |
| SSL GetInsecure Method | SUPERAnalyzer |
| SSL Error | mallodroid |
| Weak TrustManager | mallodroid |
| Weak Algorithms | SUPERAnalyzer |
| WebView has SSL Errors | SUPERAnalyzer |
| WebView SSL Errors | SUPERAnalyzer |


### iOS-Related

#### Wrapper Modules

| Module Name | Wraps |
| ----------- | ---------------------------------- |
| SEBASTiAn | SEBASTiAn python3 import and call. |

#### Analysis Modules

| Module Name | Wrapper Used |
| -------------------------- | ------------ |
| Allow HTTP Plist | SEBASTiAn |
| Insecure connection Plist | SEBASTiAn |
| Insecure TLS version Plist | SEBASTiAn |
| No forward secrecy Plist | SEBASTiAn |
| Weak crypto | SEBASTiAn |


### Core and Output related

Expand Down
Binary file modified assets/areas/tools/TLSAssistant/current_architecture.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.

0 comments on commit b10bb81

Please sign in to comment.