Home / MobSF / Mobile-Security-Framework-MobSF
AI Slop Code RIsk Monitor

MobSF/Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

10.8 Moderate pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for MobSF/Mobile-Security-Framework-MobSF, a JavaScript project with 21,916 GitHub stars. SynthScan examined 146,473 lines of code across 458 source files, recording 1013 pattern matches distributed across 21 syntactic categories. The legacy adjusted pattern signal is 10.8 (Moderate pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

10.8
Adjusted Signal
10.8
Raw Pattern Score
100%
Time Factor
2026-09-30
Last Push
21.9K
Stars
JavaScript
Language
146.5K
Lines of Code
458
Files
1.0K
Pattern Hits
2026-10-12
Scan Date
0.21
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 12.5/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 361 finding(s).

Hallucinated Dependency & Supply Chain Risk 7.2/100 · LOW

Are imports declared and package/API names verified? 36 finding(s).

Agent Over-Engineering Ratio 31.4/100 · MEDIUM

Are wrappers, guards, and repeated structures necessary? 749 finding(s).

PR Review Velocity Impact 42.6/100 · MEDIUM

Which changes need focused human review? 1013 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 8HIGH 87MEDIUM 54LOW 864

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 1013 distinct pattern matches across 21 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Excessive Try-Catch Wrapping420 hits · 438 pts
SeverityFileLineSnippetContext
LOWmobsf/__main__.py36 except Exception:CODE
MEDIUMmobsf/__main__.py32def main():CODE
LOWmobsf/MalwareAnalyzer/views/VirusTotal.py47 except Exception as exp:CODE
LOWmobsf/MalwareAnalyzer/views/VirusTotal.py62 except Exception:CODE
LOWmobsf/MalwareAnalyzer/views/VirusTotal.py80 except Exception as exp:CODE
LOWmobsf/MalwareAnalyzer/views/VirusTotal.py180 except Exception as exp:CODE
LOWmobsf/MalwareAnalyzer/views/VirusTotal.py249 except Exception as exp:CODE
LOWmobsf/MalwareAnalyzer/views/VirusTotal.py345 except Exception as exp:CODE
MEDIUMmobsf/MalwareAnalyzer/views/VirusTotal.py44def _proxies(self):CODE
LOWmobsf/MalwareAnalyzer/views/Trackers.py84 except Exception as exp:CODE
LOWmobsf/MalwareAnalyzer/views/Trackers.py157 except Exception:CODE
LOWmobsf/MalwareAnalyzer/views/MalwareDomainCheck.py55 except Exception:CODE
LOWmobsf/MalwareAnalyzer/views/MalwareDomainCheck.py100 except Exception:CODE
LOWmobsf/MalwareAnalyzer/views/MalwareDomainCheck.py143 except Exception:CODE
LOWmobsf/MalwareAnalyzer/views/MalwareDomainCheck.py155 except Exception:CODE
LOWmobsf/MalwareAnalyzer/views/MalwareDomainCheck.py186 except Exception as exp:CODE
LOWmobsf/MalwareAnalyzer/views/MalwareDomainCheck.py208 except Exception:CODE
LOWmobsf/MalwareAnalyzer/views/MalwareDomainCheck.py225 except Exception:CODE
LOWmobsf/MalwareAnalyzer/views/MalwareDomainCheck.py249 except Exception:CODE
LOWmobsf/MalwareAnalyzer/views/android/apkid.py57 except Exception as e:CODE
LOW…sf/MalwareAnalyzer/views/android/behaviour_analysis.py28 except Exception as exp:CODE
LOWmobsf/StaticAnalyzer/tests.py169 except Exception:CODE
LOWmobsf/StaticAnalyzer/tests.py560 except Exception:CODE
LOWmobsf/StaticAnalyzer/tests.py582 except Exception:CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py666 except Exception as e:CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py758 except Exception as e:CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py1343 except Exception as e:STRING
MEDIUMmobsf/StaticAnalyzer/tools/androguard4/axml.py2578def get_res_id_by_key(self, package_name, resource_type, key):CODE
MEDIUMmobsf/StaticAnalyzer/tools/androguard4/axml.py3167def set_language_and_region(self, language_region):CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py2904 except Exception as e:CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py3645 except Exception as e:CODE
LOW…aticAnalyzer/tools/androguard4/apkinspector/helpers.py35 except Exception as e:CODE
MEDIUM…aticAnalyzer/tools/androguard4/apkinspector/helpers.py36 print(f"Error while saving data to {filename}: {e}")CODE
LOW…aticAnalyzer/tools/androguard4/apkinspector/extract.py153 except Exception as e:CODE
MEDIUM…aticAnalyzer/tools/androguard4/apkinspector/extract.py154 print(f"Error extracting files: {e}")CODE
LOWmobsf/StaticAnalyzer/views/ios/binary_rule_matcher.py63 except Exception as exp:CODE
LOWmobsf/StaticAnalyzer/views/ios/classdump.py63 except Exception:CODE
LOWmobsf/StaticAnalyzer/views/ios/classdump.py84 except Exception:CODE
LOWmobsf/StaticAnalyzer/views/ios/classdump.py99 except Exception:CODE
LOWmobsf/StaticAnalyzer/views/ios/classdump.py127 except Exception as exp:CODE
LOWmobsf/StaticAnalyzer/views/ios/binary_analysis.py78 except Exception:CODE
LOWmobsf/StaticAnalyzer/views/ios/binary_analysis.py176 except Exception as exp:CODE
LOWmobsf/StaticAnalyzer/views/ios/static_analyzer.py96 except Exception as exp:CODE
LOWmobsf/StaticAnalyzer/views/ios/ipa.py257 except Exception as exp:CODE
LOWmobsf/StaticAnalyzer/views/ios/ipa.py348 except Exception as exp:CODE
LOWmobsf/StaticAnalyzer/views/ios/icon_analysis.py87 except Exception:CODE
LOWmobsf/StaticAnalyzer/views/ios/icon_analysis.py104 except Exception:CODE
LOWmobsf/StaticAnalyzer/views/ios/icon_analysis.py110 except Exception as exp:CODE
LOWmobsf/StaticAnalyzer/views/ios/icon_analysis.py148 except Exception as exp:CODE
LOWmobsf/StaticAnalyzer/views/ios/appstore.py61 except Exception as exp:CODE
LOWmobsf/StaticAnalyzer/views/ios/code_analysis.py115 except Exception:CODE
LOWmobsf/StaticAnalyzer/views/ios/code_analysis.py151 except Exception as exp:CODE
LOWmobsf/StaticAnalyzer/views/ios/file_analysis.py100 except Exception as exp:CODE
LOWmobsf/StaticAnalyzer/views/ios/strings.py55 except Exception as exp:CODE
LOWmobsf/StaticAnalyzer/views/ios/plist_analysis.py92 except Exception:CODE
LOWmobsf/StaticAnalyzer/views/ios/plist_analysis.py114 except Exception:CODE
LOWmobsf/StaticAnalyzer/views/ios/plist_analysis.py137 except Exception:CODE
LOWmobsf/StaticAnalyzer/views/ios/plist_analysis.py211 except Exception:CODE
LOWmobsf/StaticAnalyzer/views/ios/plist_analysis.py258 except Exception as exp:CODE
LOWmobsf/StaticAnalyzer/views/ios/db_interaction.py82 except Exception:CODE
360 more matches not shown…
Empty Error Handlers70 hits · 350 pts
SeverityFileLineSnippetContext
HIGHscripts/mass_static_analysis.py19except urllib.error.URLError:CODE
HIGHmobsf/MalwareAnalyzer/views/Trackers.py157except Exception:CODE
HIGHmobsf/StaticAnalyzer/tools/androguard4/apk.py572except TypeError:CODE
HIGHmobsf/StaticAnalyzer/tools/androguard4/apk.py2858except (ValueError, TypeError):CODE
HIGHmobsf/StaticAnalyzer/tools/androguard4/axml.py2103except KeyError:CODE
HIGHmobsf/StaticAnalyzer/tools/androguard4/axml.py2134except KeyError:CODE
HIGHmobsf/StaticAnalyzer/tools/androguard4/axml.py2201except KeyError:CODE
HIGHmobsf/StaticAnalyzer/tools/androguard4/axml.py2228except KeyError:CODE
HIGHmobsf/StaticAnalyzer/tools/androguard4/axml.py2255except KeyError:CODE
HIGHmobsf/StaticAnalyzer/tools/androguard4/axml.py2282except KeyError:CODE
HIGHmobsf/StaticAnalyzer/tools/androguard4/axml.py2309except KeyError:CODE
HIGHmobsf/StaticAnalyzer/tools/androguard4/axml.py2334except KeyError:CODE
HIGHmobsf/StaticAnalyzer/tools/androguard4/axml.py2164except KeyError:CODE
HIGHmobsf/StaticAnalyzer/tools/androguard4/axml.py2497except KeyError:CODE
HIGHmobsf/StaticAnalyzer/tools/androguard4/axml.py2504except KeyError:CODE
HIGHmobsf/StaticAnalyzer/tools/androguard4/axml.py3707except AttributeError:CODE
HIGHmobsf/StaticAnalyzer/views/common/suppression.py54except Exception:CODE
HIGHmobsf/StaticAnalyzer/views/common/suppression.py60except Exception:CODE
HIGHmobsf/StaticAnalyzer/views/common/binary/macho.py335except Exception:CODE
HIGHmobsf/StaticAnalyzer/views/common/binary/elf.py321except Exception:CODE
HIGHmobsf/StaticAnalyzer/views/common/binary/elf.py379except Exception:CODE
HIGHmobsf/StaticAnalyzer/views/common/binary/elf.py281except Exception:CODE
HIGHmobsf/StaticAnalyzer/views/common/binary/elf.py293except Exception:CODE
HIGHmobsf/StaticAnalyzer/views/android/converter.py66except Exception:CODE
HIGHmobsf/StaticAnalyzer/views/android/icon_analysis.py216except Exception:CODE
HIGHmobsf/StaticAnalyzer/views/android/sbom_analysis.py68except Exception:CODE
HIGHmobsf/DynamicAnalyzer/tools/webproxy.py25except Exception:CODE
HIGHmobsf/DynamicAnalyzer/tools/webproxy.py39except Exception:CODE
HIGHmobsf/DynamicAnalyzer/views/ios/corellium_ssh.py104except ConnectionResetError:CODE
HIGHmobsf/DynamicAnalyzer/views/ios/frida_core.py209except (frida.ProcessNotFoundError,CODE
HIGHmobsf/DynamicAnalyzer/views/ios/frida_core.py255except (frida.ProcessNotFoundError,CODE
HIGHmobsf/DynamicAnalyzer/views/ios/frida_core.py295except frida.InvalidOperationError:CODE
HIGHmobsf/DynamicAnalyzer/views/ios/frida_core.py233except Exception:CODE
HIGHmobsf/DynamicAnalyzer/views/ios/device/connect.py110except Exception:CODE
HIGHmobsf/DynamicAnalyzer/views/ios/device/connect.py226except Exception:CODE
HIGHmobsf/DynamicAnalyzer/views/ios/device/connect.py236except Exception:CODE
HIGHmobsf/DynamicAnalyzer/views/ios/device/connect.py337except Exception:CODE
HIGHmobsf/DynamicAnalyzer/views/ios/device/connect.py428except Exception:CODE
HIGHmobsf/DynamicAnalyzer/views/ios/device/device.py213except Exception:CODE
HIGHmobsf/DynamicAnalyzer/views/ios/device/device.py419except (KeyError, TypeError):CODE
HIGHmobsf/DynamicAnalyzer/views/ios/device/device.py447except Exception:CODE
HIGHmobsf/DynamicAnalyzer/views/ios/device/device.py465except Exception:CODE
HIGH…f/DynamicAnalyzer/views/ios/device/dynamic_analyzer.py448except ValueError:CODE
HIGHmobsf/DynamicAnalyzer/views/ios/device/frida.py72except (frida.ProcessNotFoundError,CODE
HIGHmobsf/DynamicAnalyzer/views/ios/device/frida.py104except (frida.ProcessNotFoundError,CODE
HIGHmobsf/DynamicAnalyzer/views/ios/device/frida.py152except (frida.ProcessNotFoundError,CODE
HIGHmobsf/DynamicAnalyzer/views/ios/device/frida.py127except Exception:CODE
HIGHmobsf/DynamicAnalyzer/views/common/shared.py69except Exception:CODE
HIGHmobsf/DynamicAnalyzer/views/common/shared.py74except Exception:CODE
HIGH…sf/DynamicAnalyzer/views/common/frida/server_update.py45except Exception:CODE
HIGH…sf/DynamicAnalyzer/views/common/frida/server_update.py77except Exception:CODE
HIGHmobsf/DynamicAnalyzer/views/common/frida/views.py70except Exception:CODE
HIGHmobsf/DynamicAnalyzer/views/android/tests_frida.py62except Exception:CODE
HIGHmobsf/DynamicAnalyzer/views/android/tests_frida.py247except Exception:CODE
HIGHmobsf/DynamicAnalyzer/views/android/analysis.py207except Exception:CODE
HIGHmobsf/DynamicAnalyzer/views/android/analysis.py93except Exception:CODE
HIGHmobsf/DynamicAnalyzer/views/android/tests_xposed.py180except Exception:CODE
HIGHmobsf/DynamicAnalyzer/views/android/tests_xposed.py153except Exception:CODE
HIGHmobsf/DynamicAnalyzer/views/android/dynamic_analyzer.py96except Exception:CODE
HIGHmobsf/DynamicAnalyzer/views/android/environment.py517except Exception:CODE
10 more matches not shown…
Hyper-Verbose Identifiers131 hits · 131 pts
SeverityFileLineSnippetContext
LOWmobsf/MalwareAnalyzer/views/Trackers.py246 def get_trackers_domains_or_deps(self, domains, deps):CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/util.py8def get_certificate_name_string(CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py115def _dump_additional_attributes(additional_attributes):CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py137def _dump_digests_or_signatures(digests_or_sigs):CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py1433 def get_uses_implied_permission_list(self) -> list[str]:STRING
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py1484 def _update_permission_protection_level(STRING
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py1491 def _fill_deprecated_permissions(self, permissions):STRING
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py1553 def get_requested_aosp_permissions(self) -> list[str]:STRING
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py1568 def get_requested_aosp_permissions_details(self) -> dict[str, list[str]]:STRING
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py1583 def get_requested_third_party_permissions(self) -> list[str]:STRING
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py1604 def get_declared_permissions_details(self) -> dict[str, list[str]]:STRING
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py1636 def get_effective_target_sdk_version(self) -> int:STRING
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py1788 def verify_signer_info_against_sig_file(STRING
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py2174 def get_android_manifest_axml(self) -> Union[AXMLPrinter, None]:STRING
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py2259 def parse_signatures_or_digests(STRING
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py3143 def _unpack_language_or_region(self, char_in, char_base):CODE
LOW…aticAnalyzer/tools/androguard4/apkinspector/headers.py473 def get_central_directory_entry_dict(self, filename):CODE
LOW…aticAnalyzer/tools/androguard4/apkinspector/headers.py553def print_headers_of_filename(cd_h_of_file, local_header_of_file):CODE
LOW…aticAnalyzer/tools/androguard4/apkinspector/headers.py576def show_and_save_info_of_headers(entries, apk_name, header_type: str, export: bool, show: bool):CODE
LOW…aticAnalyzer/tools/androguard4/apkinspector/extract.py39def extract_file_based_on_header_info(apk_file, local_header_info, central_directory_info):CODE
LOW…aticAnalyzer/tools/androguard4/apkinspector/extract.py107def extract_all_files_from_central_directory(apk_file, central_directory_entries, local_header_entries, output_dir):CODE
LOWmobsf/StaticAnalyzer/views/sast_engine.py20def get_multiprocessing_strategy():CODE
LOWmobsf/StaticAnalyzer/views/comparer.py68def diff_browsable_activities(context, first_app, second_app):CODE
LOWmobsf/StaticAnalyzer/views/ios/ipa.py156def common_firebase_and_trackers(code_dict, app_dic, checksum):CODE
LOWmobsf/StaticAnalyzer/views/ios/ipa.py355def generate_dynamic_ios_context(request, context, api):CODE
LOWmobsf/StaticAnalyzer/views/ios/db_interaction.py25def get_context_from_db_entry(db_entry):CODE
LOWmobsf/StaticAnalyzer/views/ios/db_interaction.py88def get_context_from_analysis(app_dict,CODE
LOWmobsf/StaticAnalyzer/views/common/suppression.py316def process_suppression_manifest(data, package):CODE
LOWmobsf/StaticAnalyzer/views/common/shared_func.py96def is_reserved_file_conflict(file_path):CODE
LOWmobsf/StaticAnalyzer/views/common/binary/macho.py19def objdump_is_debug_symbol_stripped(macho_file):CODE
LOWmobsf/StaticAnalyzer/views/common/binary/elf.py27def nm_is_debug_symbol_stripped(elf_file):CODE
LOWmobsf/StaticAnalyzer/views/android/apk.py365def generate_dynamic_src_context(request, context, api):CODE
LOWmobsf/StaticAnalyzer/views/android/manifest_analysis.py74def escape_manifest_attribute(value):CODE
LOWmobsf/StaticAnalyzer/views/android/app.py139def get_app_name_from_values_folder(values_dir):CODE
LOWmobsf/StaticAnalyzer/views/android/cert_analysis.py46def get_hardcoded_cert_keystore(app_dic):CODE
LOWmobsf/StaticAnalyzer/views/android/db_interaction.py30def get_context_from_db_entry(db_entry: QuerySet) -> dict:CODE
LOWmobsf/StaticAnalyzer/views/android/db_interaction.py104def get_context_from_analysis(app_dic,CODE
LOWmobsf/StaticAnalyzer/views/windows/db_interaction.py17def get_context_from_db_entry(db_entry):CODE
LOWmobsf/StaticAnalyzer/views/windows/db_interaction.py52def get_context_from_analysis(app_dic,CODE
LOWmobsf/static/codemirror/codemirror.js1527 function conflictingCollapsedRange(doc, lineNo, from, to, marker) {CODE
LOWmobsf/static/codemirror/codemirror.js1784 function defaultSpecialCharPlaceholder(ch) {CODE
LOWmobsf/static/codemirror/codemirror.js2356 function updateExternalMeasurement(cm, line) {CODE
LOW⚡mobsf/static/codemirror/codemirror.js2532 function maybeUpdateRectForZooming(measure, rect) {CODE
LOW⚡mobsf/static/codemirror/codemirror.js2542 function clearLineMeasurementCacheFor(lineView) {CODE
LOW⚡mobsf/static/codemirror/codemirror.js2551 function clearLineMeasurementCache(cm) {CODE
LOWmobsf/static/codemirror/codemirror.js4274 function maybeUpdateLineNumberWidth(cm) {CODE
LOWmobsf/static/codemirror/codemirror.js4898 function selectionEventCanBeMerged(doc, origin, prev, sel) {CODE
LOWmobsf/static/codemirror/codemirror.js5097 function setSelectionReplaceHistory(doc, sel, options) {CODE
LOWmobsf/static/codemirror/codemirror.js5428 function makeChangeSingleDocInEditor(cm, change, spans) {CODE
LOWmobsf/static/codemirror/codemirror.js5766 function adjustScrollWhenAboveVisible(cm, line, diff) {CODE
LOWmobsf/static/chartjs/Chart.bundle.js3925 function computeFlexCategoryTraits(index, ruler, options) {CODE
LOWmobsf/static/chartjs/Chart.bundle.js6562 function getCjsExportFromNamespace (n) {CODE
LOWmobsf/static/chartjs/Chart.bundle.js12236 function adjustPointPositionForLabelHeight(angle, textSize, position) {CODE
LOWmobsf/static/chartjs/Chart.bundle.js12811 function determineUnitForAutoTicks(minUnit, min, max, capacity) {CODE
LOWmobsf/static/chartjs/Chart.bundle.js12830 function determineUnitForFormatting(scale, ticks, minUnit, min, max) {CODE
LOWmobsf/static/chartjs/Chart.bundle.js13945 function replaceLongDateFormatTokens(input) {CODE
LOWmobsf/static/chartjs/Chart.bundle.js15728 function configFromStringAndFormat(config) {CODE
LOWmobsf/static/chartjs/Chart.bundle.js16309 function isDaylightSavingTimeShifted () {CODE
LOWmobsf/static/chartjs/Chart.bundle.js16423 function positiveMomentsDifference(base, other) {CODE
LOWmobsf/static/chartjs/Chart.bundle.js17714 function getSetRelativeTimeRounding (roundingFunction) {CODE
71 more matches not shown…
Deep Nesting138 hits · 123 pts
SeverityFileLineSnippetContext
LOWmobsf/MalwareAnalyzer/views/VirusTotal.py286CODE
LOWmobsf/MalwareAnalyzer/views/Trackers.py43CODE
LOWmobsf/MalwareAnalyzer/views/MalwareDomainCheck.py58CODE
LOWmobsf/StaticAnalyzer/tests.py20CODE
LOWmobsf/StaticAnalyzer/tests.py175CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py2864CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py670CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py1210CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py1349CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py1788CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py1879CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py2045CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py2128CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py1034CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py3683CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py589CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py1106CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py1615CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py1896CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py2141CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py2475CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py3215CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py2409CODE
LOW…aticAnalyzer/tools/androguard4/apkinspector/extract.py39CODE
LOWmobsf/StaticAnalyzer/views/sast_engine.py72CODE
LOWmobsf/StaticAnalyzer/views/comparer.py103CODE
LOW…bsf/StaticAnalyzer/views/ios/app_transport_security.py1CODE
LOWmobsf/StaticAnalyzer/views/ios/binary_rule_matcher.py32CODE
LOWmobsf/StaticAnalyzer/views/ios/classdump.py67CODE
LOWmobsf/StaticAnalyzer/views/ios/static_analyzer.py37CODE
LOWmobsf/StaticAnalyzer/views/ios/icon_analysis.py26CODE
LOWmobsf/StaticAnalyzer/views/ios/icon_analysis.py116CODE
LOWmobsf/StaticAnalyzer/views/ios/code_analysis.py41CODE
LOWmobsf/StaticAnalyzer/views/ios/file_analysis.py20CODE
LOWmobsf/StaticAnalyzer/views/ios/strings.py20CODE
LOWmobsf/StaticAnalyzer/views/ios/plist_analysis.py63CODE
LOWmobsf/StaticAnalyzer/views/ios/plist_analysis.py141CODE
LOWmobsf/StaticAnalyzer/views/ios/plist_analysis.py264CODE
LOWmobsf/StaticAnalyzer/views/ios/plist_analysis.py281CODE
LOWmobsf/StaticAnalyzer/views/ios/views/view_source.py34CODE
LOWmobsf/StaticAnalyzer/views/ios/views/view_source.py50CODE
LOWmobsf/StaticAnalyzer/views/common/appsec.py31CODE
LOWmobsf/StaticAnalyzer/views/common/appsec.py365CODE
LOWmobsf/StaticAnalyzer/views/common/suppression.py216CODE
LOWmobsf/StaticAnalyzer/views/common/suppression.py255CODE
LOWmobsf/StaticAnalyzer/views/common/suppression.py316CODE
LOWmobsf/StaticAnalyzer/views/common/shared_func.py103CODE
LOWmobsf/StaticAnalyzer/views/common/shared_func.py323CODE
LOWmobsf/StaticAnalyzer/views/common/shared_func.py491CODE
LOWmobsf/StaticAnalyzer/views/common/shared_func.py541CODE
LOWmobsf/StaticAnalyzer/views/common/pdf.py57CODE
LOWmobsf/StaticAnalyzer/views/common/entropy.py53CODE
LOW…bsf/StaticAnalyzer/views/common/binary/lib_analysis.py23CODE
LOWmobsf/StaticAnalyzer/views/common/binary/elf.py45CODE
LOWmobsf/StaticAnalyzer/views/android/apk.py373CODE
LOWmobsf/StaticAnalyzer/views/android/apk.py468CODE
LOWmobsf/StaticAnalyzer/views/android/converter.py35CODE
LOWmobsf/StaticAnalyzer/views/android/manifest_analysis.py151CODE
LOWmobsf/StaticAnalyzer/views/android/manifest_analysis.py225CODE
LOWmobsf/StaticAnalyzer/views/android/static_analyzer.py51CODE
78 more matches not shown…
Cross-Language Confusion (JS/TS)14 hits · 105 pts
SeverityFileLineSnippetContext
HIGH⚡…rida_scripts/android/others/trace-shared-preference.js17 print("contains",key,value);CODE
HIGH⚡…rida_scripts/android/others/trace-shared-preference.js23 print("getInt",key,value);CODE
HIGH⚡…rida_scripts/android/others/trace-shared-preference.js29 print("getFloat",key,value);CODE
HIGH⚡…rida_scripts/android/others/trace-shared-preference.js35 print("getLong",key,value);CODE
HIGH⚡…rida_scripts/android/others/trace-shared-preference.js41 print("getBoolean",key,value);CODE
HIGH⚡…rida_scripts/android/others/trace-shared-preference.js47 print("getString",key,value);CODE
HIGH⚡…rida_scripts/android/others/trace-shared-preference.js53 print("getStringSet",key,value);CODE
HIGH⚡…rida_scripts/android/others/trace-shared-preference.js58 print("putString",key,value);CODE
HIGH⚡…rida_scripts/android/others/trace-shared-preference.js63 print("putStringSet",key,values);CODE
HIGH⚡…rida_scripts/android/others/trace-shared-preference.js68 print("putInt",key,value);CODE
HIGH⚡…rida_scripts/android/others/trace-shared-preference.js73 print("putFloat",key,value);CODE
HIGH⚡…rida_scripts/android/others/trace-shared-preference.js78 print("putBoolean",key,value);CODE
HIGH⚡…rida_scripts/android/others/trace-shared-preference.js83 print("putLong",key,value);CODE
HIGH⚡…rida_scripts/android/others/trace-shared-preference.js88 print("remove",key,"");CODE
Modern Structural Boilerplate105 hits · 104 pts
SeverityFileLineSnippetContext
LOWscripts/mass_static_analysis.py12logger = logging.getLogger(__name__)CODE
LOWmobsf/install/windows/setup.py24logger = logging.getLogger(__name__)CODE
LOWmobsf/MalwareAnalyzer/views/VirusTotal.py16logger = logging.getLogger(__name__)CODE
LOWmobsf/MalwareAnalyzer/views/Trackers.py24logger = logging.getLogger(__name__)CODE
LOWmobsf/MalwareAnalyzer/views/MalwareDomainCheck.py22logger = logging.getLogger(__name__)CODE
LOWmobsf/MalwareAnalyzer/views/android/apkid.py13logger = logging.getLogger(__name__)CODE
LOWmobsf/MalwareAnalyzer/views/android/permissions.py85logger = logging.getLogger(__name__)CODE
LOW…sf/MalwareAnalyzer/views/android/behaviour_analysis.py12logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/tests.py13logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py55logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py26logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py2702 def set_mResId(self, mResId: int) -> None:CODE
LOWmobsf/StaticAnalyzer/views/sast_engine.py17logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/ios/binary_rule_matcher.py13logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/ios/classdump.py18logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/ios/binary_analysis.py33logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/ios/static_analyzer.py32logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/ios/ipa.py73logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/ios/icon_analysis.py23logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/ios/appstore.py13logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/ios/code_analysis.py18logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/ios/file_analysis.py17logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/ios/strings.py17logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/ios/plist_analysis.py39logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/ios/dylib.py49logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/ios/db_interaction.py22logger = logging.getLogger(__name__)CODE
LOW…bsf/StaticAnalyzer/views/ios/kb/permission_analysis.py3logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/ios/views/view_source.py31logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/common/appsec.py28logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/common/suppression.py38logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/common/shared_func.py59logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/common/a.py48logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/common/async_task.py32logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/common/pdf.py45logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/common/pdf.py52logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/common/firebase.py17logger = logging.getLogger(__name__)CODE
LOW…bsf/StaticAnalyzer/views/common/binary/lib_analysis.py20logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/common/binary/strings.py11logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/android/aapt.py15logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/android/apk.py87logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/android/converter.py26logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/android/playstore.py17logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/android/manifest_analysis.py27logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/android/static_analyzer.py43logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/android/icon_analysis.py34logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/android/so.py40logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/android/app.py18logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/android/code_analysis.py33logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/android/manifest_utils.py21logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/android/sbom_analysis.py10logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/android/strings.py22logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/android/cert_analysis.py33logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/android/jar_aar.py64logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/android/db_interaction.py27logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/android/xapk.py24logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/android/network_security.py13logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/android/views/source_tree.py24logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/android/views/view_source.py35logger = logging.getLogger(__name__)CODE
LOWmobsf/StaticAnalyzer/views/android/views/find.py23logger = logging.getLogger(__name__)CODE
LOW…sf/StaticAnalyzer/views/android/views/manifest_view.py21logger = logging.getLogger(__name__)CODE
45 more matches not shown…
Hallucination Indicators8 hits · 90 pts
SeverityFileLineSnippetContext
CRITICALmobsf/static/codemirror/codemirror.js8872 return this.cm.display.wrapper.ownerDocument.getSelection()CODE
CRITICALmobsf/static/chartjs/chartjs-gauge.js304 Chart.controllers.doughnut.prototype.update.call(this, reset);CODE
CRITICALmobsf/static/chartjs/chartjs-gauge.js308 Chart.controllers.doughnut.prototype.updateElement.call(this, arc, index, reset);CODE
CRITICALmobsf/static/chartjs/chartjs-gauge.js331 Chart.controllers.doughnut.prototype.draw.call(this, ease);CODE
CRITICAL⚡mobsf/static/adminlte/plugins/jquery-ui.min.js6(function(t){"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)})(function(t){function e(t){for(var e=CODE
CRITICAL⚡mobsf/static/adminlte/plugins/jquery-ui.min.js9}},_updateDatepicker:function(e){this.maxRows=4,m=e,e.dpDiv.empty().append(this._generateHTML(e)),this._attachHandlers(eCODE
CRITICALmobsf/static/adminlte/plugins/jquery.min.js2!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):fCODE
CRITICAL…ls/frida_scripts/android/default/ssl_pinning_bypass.js252 send('[SSL Pinning Bypass] Wultra com.wultra.android.sslpinning.CertStore.validateFingerprint() bypassed');CODE
Decorative Section Separators21 hits · 81 pts
SeverityFileLineSnippetContext
MEDIUM⚡mobsf/MobSF/settings.py430 # =================================================COMMENT
MEDIUM⚡mobsf/MobSF/settings.py431 # --------------------------COMMENT
MEDIUM⚡mobsf/MobSF/settings.py433 # --------------------------COMMENT
MEDIUM⚡mobsf/MobSF/settings.py437 # ==================================================COMMENT
MEDIUM⚡mobsf/MobSF/settings.py446 # ==================================================COMMENT
MEDIUM⚡mobsf/MobSF/settings.py480 # ==========================================================COMMENT
MEDIUM⚡mobsf/MobSF/settings.py481 # -------------------------COMMENT
MEDIUM⚡mobsf/MobSF/settings.py483 # -------------------------COMMENT
MEDIUM⚡mobsf/MobSF/settings.py489 # ==============================================COMMENT
MEDIUM⚡mobsf/MobSF/settings.py494 # ===================================================COMMENT
MEDIUM⚡mobsf/MobSF/settings.py524 # ===============================================COMMENT
MEDIUM⚡mobsf/MobSF/settings.py533 # ==============================================COMMENT
MEDIUM⚡mobsf/MobSF/settings.py540 # ===============================================COMMENT
MEDIUMmobsf/MobSF/settings.py174# ===============================================COMMENT
MEDIUMmobsf/MobSF/settings.py366# ===========================COMMENT
MEDIUMmobsf/MobSF/settings.py368# ===========================COMMENT
MEDIUMmobsf/MobSF/settings.py382# ===================COMMENT
MEDIUMmobsf/MobSF/settings.py384# ===================COMMENT
MEDIUMmobsf/MobSF/settings.py399 # -------------------------COMMENT
MEDIUMmobsf/MobSF/settings.py401 # -------------------------COMMENT
MEDIUMmobsf/MobSF/settings.py507 # ==============================================COMMENT
Redundant / Tautological Comments40 hits · 62 pts
SeverityFileLineSnippetContext
LOWscripts/start_avd.sh3# Check if START_PORT, AVD_NAME, and open_gapps.zip are provided as argumentsCOMMENT
LOWscripts/start_avd.sh18# Check if the emulator path exists and is executableCOMMENT
LOWscripts/start_avd.sh36# Check if adb is availableCOMMENT
LOWscripts/start_avd.sh52# Check if provided AVD_NAME exists in available AVDsCOMMENT
LOWscripts/start_avd.sh73# Check if socat is available only on LinuxCOMMENT
LOWmobsf/install/windows/rpc_client.py94 # Check if param is a md5 to prevent attacks (we only use lower-case)COMMENT
LOWmobsf/install/windows/rpc_client.py122 # Open the file and return the jsonCOMMENT
LOWmobsf/install/windows/rpc_client.py171 # Open the file and return the jsonCOMMENT
LOWmobsf/install/windows/setup.py330 # Open fileCOMMENT
LOWmobsf/StaticAnalyzer/tests.py16# Set RESCAN to True if Static Analyzer Code is modifiedCOMMENT
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py151 # Check if they supplied a stylesOffset even if the count is 0:COMMENT
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py1217 # Check if all namespace mappings are closedCOMMENT
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py1832 # Check if FLAG_OFFSET16 is setCOMMENT
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py1120 if not self.axml.name: # Check if the name is emptyCODE
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py1197 if not self.axml.name: # Check if the name is emptyCODE
LOW…aticAnalyzer/tools/androguard4/apkinspector/extract.py123 # Check if the output directory already existsCOMMENT
LOW⚡mobsf/StaticAnalyzer/views/common/async_task.py51 # Check if the scan is already completed and successfulCOMMENT
LOW⚡mobsf/StaticAnalyzer/views/common/async_task.py57 # Check if task is already completed within the last 60 minutesCOMMENT
LOW⚡mobsf/StaticAnalyzer/views/common/async_task.py65 # Check if the task is already enqueued within the last 60 minutesCOMMENT
LOW⚡mobsf/StaticAnalyzer/views/common/async_task.py71 # Check if the task is already started within the last 60 minutesCOMMENT
LOWmobsf/StaticAnalyzer/views/android/apk.py397 # Check if Valid Directory Structure and get ZIP TypeCOMMENT
LOWmobsf/StaticAnalyzer/views/android/playstore.py28 # Check if Google Play Store is reachableCOMMENT
LOWmobsf/StaticAnalyzer/views/android/app.py100 # Check if it's an APK and try to retrieve the app nameCOMMENT
LOWmobsf/StaticAnalyzer/views/android/app.py117 # Check if it's source code and try to retrieve the app nameCOMMENT
LOWmobsf/StaticAnalyzer/views/android/xapk.py136 # Check if previously extractedCOMMENT
LOWmobsf/StaticAnalyzer/views/android/xapk.py168 # Check if previously convertedCOMMENT
LOWmobsf/StaticAnalyzer/views/windows/windows.py339 # Open the file and return the jsonCOMMENT
LOWmobsf/StaticAnalyzer/views/windows/windows.py508 # Open the file and return the jsonCOMMENT
LOWmobsf/DynamicAnalyzer/views/ios/dynamic_analyzer.py128 # Check if our key is associatedCOMMENT
LOWmobsf/DynamicAnalyzer/views/ios/corellium_instance.py363 # Check if AppSync Unified is installedCOMMENT
LOW⚡mobsf/DynamicAnalyzer/views/ios/device/connect.py322 # Check if we have root accessCOMMENT
LOWmobsf/DynamicAnalyzer/views/ios/device/connect.py121 # Check if usbmuxd/iproxy is availableCOMMENT
LOWmobsf/DynamicAnalyzer/views/ios/device/connect.py388 # Check if port forwarding already existsCOMMENT
LOWmobsf/DynamicAnalyzer/views/ios/device/device.py327 # Check if AppSync Unified is installedCOMMENT
LOWmobsf/DynamicAnalyzer/views/ios/device/environment.py177 # Check if setup is already doneCOMMENT
LOWmobsf/DynamicAnalyzer/views/ios/device/report.py246 # Read the file and parse each line as JSONCOMMENT
LOWmobsf/DynamicAnalyzer/views/common/device.py57 # Check if it's a binary plist firstCOMMENT
LOWmobsf/DynamicAnalyzer/views/android/environment.py456 # Check if there is exactly one APK fileCOMMENT
LOWmobsf/MobSF/tools_download.py77 # Check if MobSF upstream proxy is explicitly configuredCOMMENT
LOWmobsf/MobSF/settings.py125# Set MOBSF_API_ONLY to 1 to enable REST API only modeCOMMENT
Over-Commented Block35 hits · 33 pts
SeverityFileLineSnippetContext
LOWLICENSES/ios_binary_analysis_rules.txt1#COMMENT
LOWLICENSES/ios_binary_analysis_rules.txt21# INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER INCOMMENT
LOWLICENSES/apksigner.txt1# Copyright (C) 2016 The Android Open Source ProjectCOMMENT
LOW.github/workflows/codeql-analysis.yml41 # Use 'java-kotlin' to analyze code written in Java, Kotlin or bothCOMMENT
LOW.github/workflows/codeql-analysis.yml61 languages: ${{ matrix.language }}COMMENT
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py801 # def _get_file_magic_name(self, buffer: bytes) -> str:COMMENT
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py821 # self.__no_magic = TrueCOMMENT
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py841 # self.__no_magic = TrueCOMMENT
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py861 # def files(self) -> dict[str, str]:COMMENT
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py881 # self._files[i] = self._get_file_magic_name(buffer)COMMENT
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py2281 def parse_v2_v3_signature(self) -> None:COMMENT
LOWmobsf/StaticAnalyzer/tools/androguard4/types.py1# -*- coding: utf_8 -*-COMMENT
LOWmobsf/StaticAnalyzer/tools/androguard4/types.py21TYPE_DIMENSION = 0x05COMMENT
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py721COMMENT
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py2981COMMENT
LOW…bsf/StaticAnalyzer/views/android/kb/dvm_permissions.py1COMMENT
LOWmobsf/static/codemirror/codemirror.js341 else { bidiOther = i; }COMMENT
LOWmobsf/static/codemirror/codemirror.js4441 // unstandardized between browsers and even browser versions, andCOMMENT
LOWmobsf/static/chartjs/Chart.bundle.js6301 var verticalBoxes = leftBoxes.concat(rightBoxes);COMMENT
LOWmobsf/static/chartjs/Chart.bundle.js6321 // | L1 | L2 | ChartArea (C0) | R1 |COMMENT
LOWmobsf/static/chartjs/Chart.bundle.js10321 // Ticks - `this.ticks` is now DEPRECATED!COMMENT
LOWmobsf/static/chartjs/Chart.bundle.js12141 // We assume the radius of the polygon is half the size of the canvas at firstCOMMENT
LOWmobsf/static/chartjs/Chart.bundle.js18321 // We hid a dataset ... rerender the chartCOMMENT
LOW…namicAnalyzer/tools/frida_scripts/ios/dump/data-dir.js61send('Dumping Application Directory file information');COMMENT
LOW…namicAnalyzer/tools/frida_scripts/ios/dump/data-dir.js81COMMENT
LOW…namicAnalyzer/tools/frida_scripts/ios/dump/data-dir.js101COMMENT
LOW…namicAnalyzer/tools/frida_scripts/ios/dump/data-dir.js121COMMENT
LOW…namicAnalyzer/tools/frida_scripts/ios/dump/keychain.js121 ];COMMENT
LOW…s/frida_scripts/android/others/crypto-dump-keystore.js41// Log.e("E", "Aliases = " + aliases.nextElement());COMMENT
LOW…ols/frida_scripts/android/others/ssl-pinning-bypass.js721 }COMMENT
LOW…ols/frida_scripts/android/others/ssl-pinning-bypass.js741 // rudimentaryFix(returnTypeName);COMMENT
LOW…ols/frida_scripts/android/others/ssl-pinning-bypass.js761 // rudimentaryFix(returnTypeName);COMMENT
LOWmobsf/DynamicAnalyzer/views/ios/device/frida.py21 defaults, dump, auxiliary, extras, code):COMMENT
LOWmobsf/MobSF/settings.py421 NIAP_ENABLED = os.getenv('MOBSF_NIAP_ENABLED', '')COMMENT
LOWmobsf/MobSF/settings.py521 # Files will be uploaded to VirusTotal if VT_UPLOAD is True.COMMENT
Self-Referential Comments8 hits · 22 pts
SeverityFileLineSnippetContext
MEDIUMmobsf/StaticAnalyzer/tools/androguard4/apk.py1968 # # Create a x509.Name object for the issuer in the SignerInfoSTRING
MEDIUM…aticAnalyzer/tools/androguard4/apkinspector/extract.py127 # Create the output directory or overwrite if it already existsCOMMENT
MEDIUM…cAnalyzer/views/android/rules/android_permissions.yaml1# This file is generated with the help of https://github.com/reddr/axplorer/tree/master/permissions to cover permissionsCOMMENT
MEDIUMmobsf/StaticAnalyzer/views/windows/windows.py397 # Create an warning for the guiCOMMENT
MEDIUMmobsf/StaticAnalyzer/views/windows/windows.py437 # Create an warning for the guiCOMMENT
MEDIUMmobsf/DynamicAnalyzer/views/ios/corellium_ssh.py14# This file is part of paramiko.COMMENT
MEDIUMmobsf/DynamicAnalyzer/views/ios/device/environment.py218 # Create a file to indicate that frida setup is doneCOMMENT
MEDIUMmobsf/DynamicAnalyzer/views/ios/device/report.py293 # Create the data object for DataTableCOMMENT
Cross-Language Confusion2 hits · 12 pts
SeverityFileLineSnippetContext
HIGHmobsf/StaticAnalyzer/tools/androguard4/axml.py977 # If the result is a (null) string, we need to look it up.COMMENT
HIGHmobsf/StaticAnalyzer/views/ios/classdump.py106 if b'Source: (null)' in cdump:CODE
Synthetic Comment Markers1 hit · 8 pts
SeverityFileLineSnippetContext
HIGH…bsf/StaticAnalyzer/views/android/kb/dvm_permissions.py160 # Short descriptions are generated by ChatGPT, so they may not be accurate.COMMENT
Fake / Example Data5 hits · 6 pts
SeverityFileLineSnippetContext
LOWmobsf/StaticAnalyzer/views/common/shared_func.py480 'change_', 'this_', 'the_', 'placeholder',CODE
LOWmobsf/static/datatables/js/datatables.combined.min.js30!function(n){"use strict";var a;"function"==typeof define&&define.amd?define(["jquery"],function(t){return n(t,window,doCODE
LOW⚡mobsf/static/adminlte/plugins/jquery-ui.min.js6(function(t){"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)})(function(t){function e(t){for(var e=CODE
LOW…c/adminlte/plugins/datatables/jquery.dataTables.min.js41'"/>',j=d.sSearch,j=j.match(/_INPUT_/)?j.replace("_INPUT_",g):j+g,b=h("<div/>",{id:!f.f?c+"_filter":null,"class":b.sFiltCODE
LOW…static/adminlte/plugins/sweetalert2/sweetalert2.min.js1!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&defineCODE
Unused Imports7 hits · 5 pts
SeverityFileLineSnippetContext
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py7CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py7CODE
LOWmobsf/StaticAnalyzer/tools/androguard4/axml.py23CODE
LOWmobsf/DynamicAnalyzer/views/common/frida/__init__.py9CODE
LOWmobsf/DynamicAnalyzer/views/common/frida/__init__.py9CODE
LOWmobsf/MobSF/utils.py484CODE
LOWmobsf/MobSF/utils.py489CODE
Slop Phrases2 hits · 4 pts
SeverityFileLineSnippetContext
MEDIUM.github/workflows/codeql-analysis.yml45 # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize howCOMMENT
LOW…ols/frida_scripts/android/others/helper-heap-search.js6 * Info: make sure to replace placeholdersCOMMENT
AI Slop Vocabulary1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMmobsf/static/chartjs/Chart.bundle.js6305 // Essentially we now have any number of boxes on each of the 4 sides.COMMENT
AI Structural Patterns2 hits · 2 pts
SeverityFileLineSnippetContext
LOWmobsf/MalwareAnalyzer/views/android/permissions.py106CODE
LOWmobsf/MobSF/views/saml2.py108CODE
Verbosity Indicators1 hit · 2 pts
SeverityFileLineSnippetContext
LOWmobsf/StaticAnalyzer/tools/androguard4/apk.py2316 # TODO according to the standard we need to check if theCOMMENT
Structural Annotation Overuse1 hit · 2 pts
SeverityFileLineSnippetContext
LOWmobsf/static/chartjs/Chart.bundle.js6475 // Step 7 - Position the boxesCOMMENT
Example Usage Blocks1 hit · 2 pts
SeverityFileLineSnippetContext
LOW…ls/frida_scripts/ios/auxiliary/find-specific-method.js66// Usage example:COMMENT