Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Sensitive Data Leaked via Screenshots #2917

Closed
wants to merge 77 commits into from
Closed

Sensitive Data Leaked via Screenshots #2917

wants to merge 77 commits into from

Conversation

serek8
Copy link
Collaborator

@serek8 serek8 commented Oct 25, 2024

This PR closes #2695

cpholguera
cpholguera reviewed Oct 29, 2024
View reviewed changes
weaknesses/MASVS-PLATFORM/MASWE-0055.md
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe we should generalize the title to cover for screenshots and screen recording.

@sushi2k
Copy link
Collaborator

sushi2k commented Nov 1, 2024 •
edited
Loading

@serek8 This might be useful for iOS: https://developer.apple.com/documentation/uikit/uiscreen/2921651-iscaptured

A Boolean value that indicates whether the system is actively cloning the screen to another destination.

It seems this is used in this dependency called ScreenShield that allows to blur the screen in case a screenshot or screen-recording is happening while using the app: https://github.com/JayantBadlani/ScreenShield/blob/b71ea2010d7536d25cbf9bc3a802c114ae4dbf4d/Source/ScreenShield.swift#L28

But it doesn't work for iOS 18 as iscaptured was deprecated and is not available in iOS 18 anymore.

Seems the succcessor is now sceneCaptureState

JJK96 and others added 25 commits January 2, 2025 14:31
@JJK96 @cpholguera @serek8
Add Frida replacing xposed to MASTG-TEST-0023 (OWASP#2918)
3705f4d 
* Add frida option as it is more convenient
* rm xposed, update link and add new references and numbering

---------

Co-authored-by: Carlos Holguera <[email protected]>
@cpholguera @serek8
Update MASTG-DEMO-0008 (Title) (OWASP#2923)
6ae941c
@cpholguera @serek8
Update MASTG-DEMO-0019 (Title) (OWASP#2924)
0fe7310
@cpholguera @serek8
Refactor r2-based demos for consistency and to add AI decompiled code (…
088860c 
…OWASP#2925)

* - Refactored bash scripts in MASTG-DEMO-0013, MASTG-DEMO-0018, and MASTG-DEMO-0019 to use a shebang and redirect output to files.
- Updated MASTG-DEMO-0013, MASTG-DEMO-0014, MASTG-DEMO-0018 and MASTG-DEMO-0019 to include assembly code and swift code decompiled by AI
* fix broken links
@cpholguera @serek8
Update MASTG-DEMO-0019.md (OWASP#2926)
0a80206
@annab-google @cpholguera
@TheDauntless @sushi2k @serek8
Add MASWE-PRIVACY Weaknesses (OWASP#2860)
c494d9e 
* Create MASWE-0109.md

* Update MASWE-0109.md

* Create MASWE-0110.md

* Create MASWE-0111.md

* Create MASWE-0112.md

* Create ASWE-0113.md

* Rename ASWE-0113.md to MASWE-0113.md

* Update MASWE-0111.md

* Update MASWE-0113.md

* Update MASWE-0109.md

* Update MASWE-0110.md

* Update MASWE-0111.md

* Update MASWE-0112.md

* Update MASWE-0113.md

* Update MASWE-0111.md

spelling fix

* Apply grammar fixes from code review

Co-authored-by: Jeroen Beckers <[email protected]>

* Update MASWE-0109.md

* Update MASWE-0109.md

* Update MASWE-0110.md

* Update MASWE-0110.md

* Update MASWE-0111.md

* Update MASWE-0112.md

* Update weaknesses/MASVS-PRIVACY/MASWE-0113.md

Co-authored-by: Jeroen Beckers <[email protected]>

* Update weaknesses/MASVS-PRIVACY/MASWE-0109.md

Co-authored-by: Sven <[email protected]>

* Update weaknesses/MASVS-PRIVACY/MASWE-0111.md

Co-authored-by: Sven <[email protected]>

* Update MASWE-0112.md

* Apply suggestions from code review by @cpholguera

* fix md linter issues

* updated content and created new weaknesses including references

---------

Co-authored-by: Carlos Holguera <[email protected]>
Co-authored-by: Jeroen Beckers <[email protected]>
Co-authored-by: Sven <[email protected]>
@sk3l10x1ng @serek8
added approaches
9c44742
@sk3l10x1ng @serek8
updated the content
83de9cd
@sk3l10x1ng @serek8
fix bold and structure
bcdef02
@sk3l10x1ng @serek8
fix space
60bd7c0
@sk3l10x1ng @serek8
fix punctuation
21b678a
@sk3l10x1ng @serek8
fix
e06a44e
@sk3l10x1ng @serek8
update changes
60761c5
@sk3l10x1ng @serek8
fix puntuation
5c6ec40
@sk3l10x1ng @serek8
fix
2a97d6e
@sk3l10x1ng @serek8
fix spell
942a42c
@sk3l10x1ng @serek8
updated
b5a5956
@sk3l10x1ng @serek8
fix spell
087fa67
@sushi2k @serek8
added ProxyDroid, updated technique and HTTPToolkit description
b598061
@sushi2k @serek8
Update tools/network/MASTG-TOOL-0115.md
31d5489
@sushi2k @serek8
fixed markdown lint errors
c22f34c
@sk3l10x1ng @serek8
remove extra space
5831efa
@cpholguera @serek8
fix android mappings (OWASP#2927)
d6d23f2 
* fix android mappings

* fix broken links
@cpholguera @serek8
fix display of deprecated (OWASP#3022)
462d0db
@TheDauntless @serek8
Update 5_Style_Guide.md (OWASP#3025)
c51d27d 
Remove the $ from commands in the style guide.
titze and others added 27 commits January 2, 2025 14:31
@titze @cpholguera @serek8
Port MASTG test 0087 (by @Guardsquare) (OWASP#3056)
ca779ea 
* Port MASTG test 0087

* Update texts

* Update MASTG-TECH-0082: Enhance shared libraries identification and analysis

* Add MASTG-TECH-0118: Obtaining compiler provided security features in iOS

* Deprecate MASTG-TEST-0087

* Update MASTG-TEST-0x87 tests: Improve documentation on security features and testing steps for PIC, stack canaries, and ARC

* Fix title

* Fix typos and improve clarity on stack canaries and ARC

---------

Co-authored-by: Carlos Holguera <[email protected]>
@cpholguera @serek8
fix IDs (OWASP#3075)
768dd1b
@serek8 @cpholguera
Port MASTG-TEST-0003 (by @Guardsquare) (OWASP#3059)
abef598 
* Port a static test

* Add a deprecation note

* fix IDs and titles

* Refine logging API test content for clarity and accuracy

---------

Co-authored-by: Carlos Holguera <[email protected]>
@cpholguera @Copilot @serek8
Add MASTG-TEST-0231 for weak encryption modes on Android (OWASP#3079)
7f88184 
* Add MASTG-TEST-0231 for weak encryption modes in Android

* fix typo

* fix ID

* Update tests-beta/android/MASVS-CRYPTO/MASTG-TEST-0231.md

* Apply suggestions from code review

Co-authored-by: Copilot <[email protected]>

* Update tests-beta/android/MASVS-CRYPTO/MASTG-TEST-0231.md

---------

Co-authored-by: Copilot <[email protected]>
@cpholguera @serek8
fix ID (OWASP#3080)
0154c87
@cpholguera @serek8
Update MASTG-TEST-0221.md evaluation
fc76830
@cpholguera @serek8
Add MASTG Mitigations support (OWASP#3081)
8147c77 
* Rename and update mitigations using IDs and add index

* Update mitigations to tests metadata

* Add support for mitigations in cross-references and metadata generation

* Add mitigations section to documentation and update navigation

* Remove remediation section from MASTG-TEST-0204.md
@cpholguera @serek8
rename mitigations to best-practices (OWASP#3085)
e0c10e1
@cpholguera @serek8
fix title (OWASP#3086)
01d83c8
@titze @cpholguera @serek8
Port MASTG test 0019 (by @Guardsquare) (OWASP#3030)
6c014cf 
* Port MASTG test 0019

* Fix markdown

* Review feedback

* Add Frida to trace traffic

* Apply suggestions from code review

* Refine MASTG-TEST-0x19-1.md for clarity on hardcoded HTTP URLs and their usage

* Update covered_by references in MASTG-TEST-0019.md to reflect new test cases

* Rename MASTG-TEST-0x19 test cases to MASTG-TEST-0233 through MASTG-TEST-0239

* update IDs

* Update MASTG-TEST-0233 to modify title, improve evaluation and add related test references

* Update MASTG-TEST-0239 note to clarify potential support for multiple weaknesses

* Add --- at end of files for MASTG-TEST-0237, MASTG-TEST-0238, and MASTG-TEST-0239

* rm bare URL

---------

Co-authored-by: Carlos Holguera <[email protected]>
@jeel38 @cpholguera @serek8
Added tool Apkleaks (by @appknox) (OWASP#3052)
8034418 
* Added tool Apkleaks

* fix lint

* updated changes

* updated tool ID

* Update techniques/android/MASTG-TECH-0022.md

* Update tools/android/MASTG-TOOL-0125.md

---------

Co-authored-by: Appknox <[email protected]>
Co-authored-by: Carlos Holguera <[email protected]>
@kmaschke85 @serek8
Update MASTG-TEST-0079.md (OWASP#3083)
de04e7e 
Fixed link to Objective C Runtime documentation
@annab-google @serek8
Update the list of permissions (up to API level 35) (OWASP#3087)
00eab1e 
Added 14 permissions:
android.permission.THREAD_NETWORK_PRIVILEGED
android.permission.RECORD_SENSITIVE_CONTENT
android.permission.RECEIVE_SENSITIVE_NOTIFICATIONS
android.permission.WRITE_VERIFICATION_STATE_E2EE_CONTACT_KEYS
android.permission.READ_DROPBOX_DATA
android.permission.WRITE_FLAGS
android.permission.REPORT_USAGE_STATS
android.permission.MANAGE_DISPLAYS
android.permission.RESTRICT_DISPLAY_MODES
android.permission.ACCESS_HIDDEN_PROFILES_FULL
android.permission.GET_BACKGROUND_INSTALLED_PACKAGES
android.permission.REGISTER_NSD_OFFLOAD_ENGINE
android.permission.ACCESS_LAST_KNOWN_CELL_ID
android.permission.USE_COMPANION_TRANSPORTS
@TheDauntless @serek8
Fix continuity issue (OWASP#3088)
734d66e
@TheDauntless @cpholguera @serek8
Update MASTG-TOOL-0056 with new Keychain-Dumper tool repo (OWASP#3091)
683d229 
* Update MASTG-TOOL-0056.md

Updated keychain_dumper to be usable on rootless jb

* Fix linting and url

* Update tools/ios/MASTG-TOOL-0056.md

---------

Co-authored-by: Carlos Holguera <[email protected]>
@cpholguera @serek8
Add deprecation notes and status for MASTG tests (OWASP#3089)
444d5ae 
* Add deprecation notes for MASTG-TESTs

* Add deprecated status to theme and extra sections in mkdocs.yml

* Add support for 'deprecated' status in tags for markdown pages

* Add status for tests in dynamic tables

* Add draft banner for MASTG v2 tests and deprecated banner for MASTG v1 tests
@cpholguera @serek8
refactor resilience best practices (OWASP#3092)
01adfa9
@cpholguera @serek8
Update MASTG-TEST-0237.md (OWASP#3093)
9324139
@sushi2k @TheDauntless
@cpholguera @serek8
updated patching IPAs (OWASP#2907)
997b7c5 
* updated patching IPAs

* update lint error

* updated ID for fastlane

* Extracted Sideloadly to a separate tool and restructured a bit

* Fix linting

* Reviewed fastlane and moved httptoolkit to different tool nr

* Move files around

* Fix linting

* Fix tool collision

* Fix broken link

* Fix link

* Update MASTG-TECH-0079: Change title and enhance instructions for obtaining a developer provisioning profile

* Update MASTG-TECH-0090 and MASTG-TECH-0091: Revise titles and enhance instructions for injecting Frida Gadget and libraries into IPA files

* Update MASTG-TECH-0092: Revise title and enhance instructions for repackaging and re-signing IPA files using Fastlane

* fix IDs

* Add MASTG-TECH-0119: Launching a repackaged app in debug mode

* Update MASTG-TECH-0055: Replace previous title and redundant content. Fix IDs

* Update MASTG-TECH-0090, MASTG-TECH-0091, and MASTG-TECH-0092: Enhance instructions for injecting Frida Gadget and streamline the installation process

---------

Co-authored-by: Sven Schleier <[email protected]>
Co-authored-by: Jeroen Beckers <[email protected]>
Co-authored-by: Carlos Holguera <[email protected]>
@cpholguera @serek8
Update index and talks (OWASP#3094)
a382f7b 
* Update index.md

* add r2con
@cpholguera @serek8
Update MASTG-TECH-0063.md fix Tool ID (OWASP#3095)
a0931ec
@sushi2k @serek8
Update 0x02a-Frontispiece.md (OWASP#3098)
0493a24
@serek8
Fix title
097c47a
@serek8
Add a test for iOS
ff2064a
@serek8
Add new refs for the weakness
f52c8ea
@serek8
Update test ID
d684a7c
@serek8
Add demo
ae3169d
@serek8 serek8 marked this pull request as ready for review January 2, 2025 13:33
@serek8 serek8 closed this Jan 13, 2025
@serek8
Copy link
Collaborator Author

serek8 commented Jan 13, 2025

Continued in #3112

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@cpholguera cpholguera cpholguera left review comments

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

[MASWE-0055] New MASWE Weakness