npm - supplier-meesho.webflow - Versions diffs - 1.0.0 - Mend

supplier-meesho.webflow 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of supplier-meesho.webflow might be problematic. Click here for more details.

Files changed (1074) hide show

package/MobSF/mobsf/templates/general/error.html ADDED Viewed

@@ -0,0 +1,23 @@
+{% extends "base/base_layout.html" %}
+ {% block sidebar_option %}
+      sidebar-collapse
+{% endblock %}
+{% block content %}
+<div class="content-wrapper">
+  <div class="content-header">
+  </div>
+   <div class="container-fluid">
+        <div class="row">
+            <div class="col-lg-12">
+            <div class="card">
+              <div class="card-body">
+                <h2>Error</h2>
+                  <p class="lead">{{ exp }}</p>
+                  <p>{{ doc }}</p>
+          </div>
+        </div>
+       </div>
+     </div>
+    </div>
+</div>
+{% endblock %}

package/MobSF/mobsf/templates/general/home.html ADDED Viewed

@@ -0,0 +1,298 @@
+{% load static %}
+<!DOCTYPE html>
+<html lang="en">
+   <head>
+      <meta charset="utf-8">
+      <meta http-equiv="X-UA-Compatible" content="IE=edge">
+      <meta name="viewport" content="width=device-width, initial-scale=1">
+      <meta name="description" content="Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.">
+      <meta name="author" content="Ajin Abraham">
+      <link rel="icon" href="{% static "img/favicon.ico" %}">
+      <title>Mobile Security Framework - MobSF</title>
+      <link rel="stylesheet" href="{% static "adminlte/dashboard/css/adminlte.min.css" %}">
+      <link rel="stylesheet" href="{% static "adminlte/plugins/fontawesome-free/css/all.min.css" %}">
+      <link rel="stylesheet" href="{% static "others/css/spinner.css" %}">
+      <link rel="stylesheet" href="{% static "landing/css/home.css" %}">
+      <!-- Google Font: Source Sans Pro -->
+      <link href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,400i,700" rel="stylesheet">
+   </head>
+   <body>
+   <div class="topnav">
+        <!-- Centered link -->
+        <div class="topnav-centered">
+            <a>
+               <img src="{% static "img/mobsf_logo.png" %}" width="20%" height="20%"/>
+           </a>
+           </div>
+           <!-- Left-aligned links (default) -->
+           <a href="{% url 'recent' %}">RECENT SCANS</a>
+           <a href="{% url 'dynamic' %}">DYNAMIC ANALYZER</a>
+           <!-- Right-aligned links -->
+           <div class="topnav-right">
+               <a href="{% url 'api_docs' %}">API DOCS</a>
+               <a href="{% url 'about' %}">ABOUT</a>
+               <a>
+                <form action="/search" method="GET">
+                    <input name="md5" type="text" class="form-control" placeholder="Search MD5">
+                 </form>
+                </a>
+           </div>
+        </div>
+      <div class="site-wrapper">
+         <div class="site-wrapper-inner">
+            <div class="cover-container">
+               <div class="masthead clearfix">
+                  <div align="center" class="inner">
+                  </div>
+               </div>
+               <div class="inner cover">
+                  <div style="visibility:hidden; opacity:0" id="drop">
+                     <div id="textnode">Drop anywhere!</div>
+                  </div>
+                  </br>
+                  <form id="upload_form" enctype="multipart/form-data" method="post">
+                     {% csrf_token %}
+                     <div class="fileUpload btn btn-default btn-lg" id="but">
+                        <input type="file" name="file" id="uploadFile" placeholder="Choose File" multiple>
+                        <span class="fas fa-cloud-upload-alt"></span>
+                        Upload &amp; Analyze
+                     </div>
+                     <br />
+                     <small><i>Drag &amp; Drop anywhere!</i></small>
+                     <h5 id="status"></h5>
+                     <progress id="progressBar" value="0" max="100" style="width:300px;visibility:hidden;" ></progress>
+                  </form>
+               </div>
+               <div class="mastfoot">
+                  <input type="download" id="package" class="form-control" placeholder="Download & Scan by package name"/>
+                  <div class="inner">
+                     <h6> <a href="{% url 'recent' %}">RECENT SCANS</a>  |  <a href="{% url 'dynamic' %}">DYNAMIC ANALYZER</a>  |  <a href="{% url 'api_docs' %}">API DOCS</a>   |  <a href="https://opensecurity.in/donate">DONATE ♥</a> | <a href="{% url 'about' %}">ABOUT</a></h6>
+                     </br>
+                     <p>&copy; {% now "Y" %}  Mobile Security Framework - MobSF {{ version }}</p>
+                  </div>
+               </div>
+            </div>
+         </div>
+      </div>
+      <div class="hidden loading">
+        <div class='uil-ring-css' style='transform:scale(0.79);'>
+          <div></div>
+        </div>
+        </div>
+        <script src="{% static "adminlte/plugins/jquery.min.js" %}"></script>
+      <script>
+            //Download and scan APK
+            $('#package').keypress(function(event){
+                var keycode = (event.keyCode ? event.keyCode : event.which);
+                if(keycode == '13'){
+                    show_loader();
+                    $.ajax({
+                        url : '../download_scan/',
+                        type : "POST",
+                        dataType: "json",
+                        data : {
+                            package: $('#package').val(),
+                            csrfmiddlewaretoken: '{{ csrf_token }}',
+                        },
+                        success : function(json){
+                            if (json.status === 'ok'){
+                                i = 1;
+                                setInterval(function() {
+                                    dot = '';
+                                    for (x = 1; x <= i; x++) {
+                                        dot += '.';
+                                    }
+                                    _("status").innerText = "Analyzing" + dot;
+                                    i += 1;
+                                    if (i == 5) {
+                                        i = 1;
+                                    }
+                                }, 2000);
+                                url = json.analyzer + '/?name=' + encodeURIComponent(json.file_name) + '&checksum=' + json.hash + '&type=' + json.scan_type
+                                window.location.href = window.location.href + url;
+                            } else {
+                                hide_loader();
+                                _("status").innerText = json.description;
+                            }
+                        },
+                        error : function(xhr, ajaxOptions, thrownError) {
+                            hide_loader();
+                        }
+                    });
+                }
+            });
+            function show_loader(){
+                var loadingOverlay = document.querySelector('.loading');
+                loadingOverlay.classList.remove('hidden');
+            }
+            function hide_loader(){
+                var loadingOverlay = document.querySelector('.loading');
+                loadingOverlay.classList.add('hidden');
+            }
+            // Existing
+            function _(el){
+                return document.getElementById(el);
+            }
+            // Response Handler
+            function responseHandler(json, isbutton) {
+                if (json.status === 'error') {
+                    _("status").innerText = json.description;
+                } else {
+                    i = 1;
+                    setInterval(function() {
+                        dot = '';
+                        for (x = 1; x <= i; x++) {
+                            dot += '.';
+                        }
+                        _("status").innerText = "Analyzing" + dot;
+                        i += 1;
+                        if (i == 5) {
+                            i = 1;
+                        }
+                    }, 2000);
+                    var url = json.analyzer + '/';
+                    if (json.hash){
+                        url += '?name=' + encodeURIComponent(json.file_name) + '&checksum=' + json.hash + '&type=' + json.scan_type
+                    }
+                    window.location.href = window.location.href + url;
+                }
+            }
+            function progressHandler(event) {
+                var percent = (event.loaded / event.total) * 100;
+                console.log("Uploaded..." + Math.round(percent));
+                _("progressBar").value = Math.round(percent);
+                _("status").innerText = Math.round(percent) + "% Uploaded...";
+            }
+            function completeHandler(event) {
+                var json = JSON.parse(event.target.responseText);
+                responseHandler(json);
+            }
+            function errorHandler(event) {
+                _("status").innerText = "Upload Failed!";
+            }
+            function abortHandler(event) {
+                _("status").innerText = "Upload Aborted!";
+            }
+          // Is valid file extensions
+          function isValidExt(file_name){
+                var val = file_name.toLowerCase();
+                var regex = new RegExp("(.*?)\.(ipa|apk|apks|xapk|zip|appx)$");
+                val = val.replace(/^.*[\\\/]/, '');
+                if (!(regex.test(val))) {
+                    _('status').innerText = "Please upload APK/APKS/XAPK/IPA/ZIP/APPX only!";
+                    return false;
+                }
+                return true;
+          }
+          // Is allowed mimetype
+          function isValidMime(file_mime){
+                if (file_mime.length < 1)
+                    // bypass if mime is not available
+                    return true;
+                var supported = [{% for mime in mimes %}'{{mime}}',{% endfor %}];
+                if(supported.indexOf(file_mime) >-1)
+                    return true;
+                 _('status').innerText = "MIME type (" + file_mime + ") is not supported!";
+                return false;
+          }
+         // File Upload
+         function uploadFile(file, i) {
+           try {
+                if (!isValidExt(file.name) || !isValidMime(file.type)){
+                    return;
+                }
+                _("progressBar").style.visibility = "visible";
+                var url = '/upload/'
+                var xhr = new XMLHttpRequest()
+                xhr.open('POST', url, true)
+                xhr.setRequestHeader('X-Requested-With', 'XMLHttpRequest')
+                xhr.setRequestHeader("X-CSRFToken", '{{ csrf_token }}');
+                xhr.upload.addEventListener("progress", progressHandler, false);
+                xhr.addEventListener("load", completeHandler, false);
+                xhr.addEventListener("error", errorHandler, false);
+                xhr.addEventListener("abort", abortHandler, false);
+                var formdata = new FormData();
+                formdata.append("file", file);
+                xhr.send(formdata)
+            } catch (e) {
+                alert("Error:" + e);
+            }
+           }
+           function handleFiles(files) {
+               files = [...files]
+               files.forEach(uploadFile)
+           }
+           // Full Screen Drag & Drop File Upload
+           var lastTarget = null;
+           function isFile(evt) {
+               var dt = evt.dataTransfer;
+               for (var i = 0; i < dt.types.length; i++) {
+                   if (dt.types[i] === "Files") {
+                       return true;
+                   }
+               }
+               return false;
+           }
+           window.addEventListener("dragenter", function (e) {
+               if (isFile(e)) {
+                   lastTarget = e.target;
+                   document.querySelector("#drop").style.visibility = "";
+                   document.querySelector("#drop").style.opacity = 1;
+                   document.querySelector("#textnode").style.fontSize = "48px";
+               }
+           });
+           window.addEventListener("dragleave", function (e) {
+               e.preventDefault();
+               if (e.target === document || e.target === lastTarget) {
+                   document.querySelector("#drop").style.visibility = "hidden";
+                   document.querySelector("#drop").style.opacity = 0;
+                   document.querySelector("#textnode").style.fontSize = "42px";
+               }
+           });
+           window.addEventListener("dragover", function (e) {
+               e.preventDefault();
+           });
+           window.addEventListener("drop", function (e) {
+               e.preventDefault();
+               document.querySelector("#drop").style.visibility = "hidden";
+               document.querySelector("#drop").style.opacity = 0;
+               document.querySelector("#textnode").style.fontSize = "42px";
+               if(e.dataTransfer.files.length > 0)
+               {
+               handleFiles(e.dataTransfer.files);
+               }
+           });
+            $(document).ready(function() {
+                // Button File Upload
+                $('input[type=file]').change(function() {
+                    _('status').innerText = "";
+                    if (_("uploadFile").files.length === 0) {
+                        return;
+                    }
+                    _("uploadFile").style.display = "none";
+                    var files = _("uploadFile").files;
+                    handleFiles(files);
+                });
+            });
+      </script>
+   </body>
+</html>

package/MobSF/mobsf/templates/general/not_found.html ADDED Viewed

@@ -0,0 +1,22 @@
+{% extends "base/base_layout.html" %}
+ {% block sidebar_option %}
+      sidebar-collapse
+{% endblock %}
+{% block content %}
+<div class="content-wrapper">
+  <div class="content-header">
+  </div>
+   <div class="container-fluid">
+        <div class="row">
+            <div class="col-lg-12">
+            <div class="card">
+              <div class="card-body">
+                 <h3>Scan hash not found!</h3>
+                    <p class="lead">We couldn't find a scan matching that MD5 hash.</p>
+          </div>
+        </div>
+       </div>
+     </div>
+    </div>
+</div>
+{% endblock %}

package/MobSF/mobsf/templates/general/recent.html ADDED Viewed

@@ -0,0 +1,254 @@
+{% extends "base/base_layout.html" %}
+{% load static %}
+ {% block sidebar_option %}
+      sidebar-collapse
+{% endblock %}
+ {% block extra_css %}
+<link href="{% static "adminlte/plugins/sweetalert2/sweetalert2.min.css" %}" rel="stylesheet">
+<style>
+#app_icon{
+        width: 64px;
+        height: 64px;
+    }
+.selected {
+    background-color: lightgreen !important;
+}
+.selectable_table tr:hover {
+    background-color: lightgreen !important;
+}
+</style>
+{% endblock %}
+{% block content %}
+<div class="content-wrapper">
+  <div class="content-header">
+  </div>
+   <div class="container-fluid">
+        <div class="row">
+            <div class="col-lg-12">
+            <div class="card">
+              <div class="card-body">
+                 <div class="box">
+        <div class="box-header with-border">
+            <h3 class="box-title"><i class="fa fa-rocket"></i> Recent Scans</h3>
+        </div>
+        <div class="box-body">
+            <div class="table-responsive">
+                <table class="table table-bordered table-hover table-striped">
+                    <thead>
+                    <tr>
+                        <th>APP</th>
+                        <th>FILE</th>
+                        <th>TYPE</th>
+                        <th>HASH</th>
+                        <th>SCAN DATE</th>
+                        <th>ACTIONS</th>
+                    </tr>
+                    </thead>
+                    <tbody>
+                    {% for e in entries %}
+                        <tr>
+                            <td align="center">
+                                <img id="app_icon" src="/download/{{ e.MD5 }}-icon.png" onerror="this.src='{% static 'img/no_icon.png' %}'">
+                                {% if e.PACKAGE_NAME %}
+                                  <br/><strong>{{ e.APP_NAME }} {% if e.VERSION_NAME %} - {{ e.VERSION_NAME }} {% endif %}</strong>
+                                  </br>{{ e.PACKAGE_NAME }}
+                                {% else %}
+                                </br><span class="badge bg-warning">scan not completed</span>
+                                {% endif %}
+                            </td>
+                            <td>{{ e.FILE_NAME }}
+                            </td>
+                            <td align="center">
+                                {% if '.apk' == e.FILE_NAME|slice:"-4:"%}<i class="fab fa-android fa-3x"></i>
+                                {% elif '.xapk' == e.FILE_NAME|slice:"-5:"%}<i class="fab fa-android fa-3x"></i>
+                                {% elif '.apks' == e.FILE_NAME|slice:"-5:"%}<i class="fab fa-android fa-3x"></i>
+                                {% elif '.ipa' == e.FILE_NAME|slice:"-4:"%}<i class="fab fa-apple fa-3x"></i>
+                                {% elif '.zip' == e.FILE_NAME|slice:"-4:"%}<i class="fas fa-file-archive fa-3x"></i>
+                                {% elif '.appx' == e.FILE_NAME|slice:"-5:"%}<i class="fab fa-windows fa-3x"></i>
+                                {% endif %}
+                            </td>
+                            <td>{{ e.MD5 }}</td>
+                            <td>{{ e.TIMESTAMP }}</td>
+                            <td><p><a class="btn btn-primary" href="../{{ e.ANALYZER }}/?name={{e.FILE_NAME}}&amp;checksum={{e.MD5}}&amp;type={{e.SCAN_TYPE}}"><i class="fas fa-eye"></i> Static Report</a>
+                                   <a class="btn btn-primary" href="../pdf/?md5={{ e.MD5 }}"><i class="fas fa-file-pdf"></i></a>
+                                   <a class="btn btn-info" href="../{{ e.ANALYZER }}/?name={{e.FILE_NAME}}&amp;checksum={{e.MD5}}&amp;type={{e.SCAN_TYPE}}&amp;rescan=1"><i class="fas fa-sync-alt"></i></a>
+                                </p>
+                            {% if '.apk' == e.FILE_NAME|slice:"-4:" or '.xapk' == e.FILE_NAME|slice:"-5:" or '.apks' == e.FILE_NAME|slice:"-5:"%}
+                                <p><a class="btn btn-success" href="../dynamic_report/{{ e.MD5  }}"><i class="fa fa-mobile"></i> Dynamic Report</a>
+                                </p><p><a class="diffButton btn btn-warning" id="{{ e.MD5 }}_{{ e.FILE_NAME }}"><i class="fas fa-not-equal"></i> Diff or Compare</a>
+                                </p>
+                            {% endif %}
+                            <p> <a class="btn btn-danger" id="{{ e.MD5 }}" onclick="delete_scan(this)" href="#"><i class="fa fa-trash"></i> Delete Scan</a> </p>
+                            </td>
+                        </tr>
+                    {% endfor %}
+                    </tbody>
+                </table>
+            </div>
+        </div>
+        <!-- /.box-body -->
+    </div>
+          </div>
+        </div>
+       </div>
+     </div>
+    </div>
+</div>
+{% endblock %}
+{% block extra_scripts %}
+<script src="{% static "adminlte/plugins/sweetalert2/sweetalert2.min.js" %}"></script>
+<script>
+    // Diff functions
+    var diff_first_md5 = '';
+    var diff_first_name = '';
+    // When a row is clicked, we check if we already have first scan, if so, ask for confirmation
+    function enable_partner_select() {
+        $('table tr').on('click', function (e) {
+            e.preventDefault();
+            if (diff_first_md5 == '') {
+                return;
+            }
+            diff_confirmation($(this));
+        })
+    }
+    function enable_diff_button(){
+        $(".diffButton").on('click', function(e){
+            e.stopPropagation();
+            diff_select($(this));
+        });
+    }
+    function disable_diff_button() {
+        $('.diffButton').off('click');
+    }
+    // First pop up only saves the first scan to diff and tells the user to select a partner
+    function diff_select(item) {
+        Swal.fire({
+            title: '<strong>Select App to Compare</strong>',
+            type: 'info',
+            text: 'Please select the second scan result for comparison',
+            timer: 10000
+        });
+        diff_first_md5 = item.attr('id').slice(0, 32);
+        diff_first_name = item.attr('id').slice(33);
+        item.closest("tr").addClass("selected");
+        item.closest("tbody").addClass("selectable_table");
+        // Enable the second partner selection
+        enable_partner_select();
+        disable_diff_button();
+    }
+    function diff_cleanup() {
+        first_td_id = diff_first_md5 + '_' + diff_first_name;
+        $('[id="' + first_td_id + '"]').closest("tr").removeClass("selected");
+        $('[id="' + first_td_id + '"]').closest("tbody").removeClass("selectable_table");
+        diff_first_md5 = "";
+        diff_first_name = "";
+        enable_diff_button();
+    }
+    // Here we get jquery row
+    function diff_confirmation(item) {
+        // First we need the id which has the md5 and name
+        rows_tds = item.find('td');
+        selected_md5 = rows_tds[3].innerText;
+        if (diff_first_md5 == selected_md5) {
+            return;
+        }
+        diff_second_md5 = selected_md5;
+        diff_second_name = rows_tds[1].innerText;
+        Swal.fire({
+            title: '<strong>Diff confirmation</strong>',
+            type: 'info',
+            html:
+                '<strong>Do you want to diff - </strong><br />' + diff_first_name +
+                '<br /> <strong>with - <br /> </strong>' + diff_second_name + ' <br /> <strong>?</strong>',
+            showCancelButton: true,
+            cancelButtonText: 'Cancel',
+            confirmButtonText: 'Start Diffing!',
+        }).then((result) => {
+            if (result.value) {
+                window.location = '/compare/' + diff_first_md5 + '/' + diff_second_md5 + '/';
+            } else {
+                 diff_cleanup();
+            }
+        })
+    }
+    function delete_scan(item){
+      Swal.fire({
+      title: 'Are you sure?',
+      text: "This will permanently remove the scan results from MobSF",
+      type: 'warning',
+      showCancelButton: true,
+      confirmButtonText: 'Yes',
+      cancelButtonText: 'No',
+      confirmButtonColor: '#d33',
+      cancelButtonColor: '#2da532',
+    }).then((result) => {
+        if (result.value) {
+            var md5_hash = item.id;
+            $.ajax({
+                    url: '../delete_scan/',
+                        type : 'POST',
+                    dataType: 'json',
+                        data : {
+                                csrfmiddlewaretoken: '{{ csrf_token }}',
+                                md5: md5_hash,
+                                },
+                            success : function(json) {
+                                if (json.deleted==='yes'){
+                                    Swal.fire(
+                                        'Deleted!',
+                                        'The scan result is deleted!',
+                                        'success'
+                                    ).then(function () {
+                                        location.reload();
+                                    })
+                                }
+                                else {
+                                    Swal.fire(
+                                    'Delete Failed',
+                                    'Cannot delete the scan result!',
+                                    'error'
+                                    )
+                                }
+                            },
+                            error : function(xhr,errmsg,err) {
+                                Swal.fire(
+                                    'Delete Failed',
+                                    errmsg,
+                                    'error'
+                                    )
+                            }
+                });
+        } else {
+                diff_cleanup();
+        }
+        });
+}
+enable_diff_button();
+</script>
+{% endblock %}

package/MobSF/mobsf/templates/general/search.html ADDED Viewed

@@ -0,0 +1,35 @@
+{% extends "base/base_layout.html" %}
+ {% block sidebar_option %}
+      sidebar-collapse
+{% endblock %}
+{% block content %}
+<div class="content-wrapper">
+  <div class="content-header">
+  </div>
+   <div class="container-fluid">
+        <div class="row">
+            <div class="col-lg-12">
+            <div class="card">
+              <div class="card-body">
+                <h3 class="box-title"><i class="fa fa-search"></i> You 've searched for: <strong>{{ term }}</strong>. Found in {{ found }} files.</h3>
+                    <div class="table-responsive">
+                  <table class="table table-bordered table-hover table-striped">
+                {% for m in matches %}
+                    <tr><td>
+                     <a href ="../ViewSource/?file={{ m }}&amp;md5={{ md5 }}&amp;type={{ typ }}">{{ m }}</a>
+                     </td></tr>
+                    {% endfor %}
+              </table>
+               </div>
+          </div>
+        </div>
+       </div>
+     </div>
+    </div>
+</div>
+{% endblock %}