2.2.5

What's Changed

• Supporting analysis of iOS apps
• Supporting analysis of native codes (NDK) in Android apps
• Supporting patching of xapks
• Supporting frida-server
• Optionally looking 2-level deep for extensions: you can place your extension easier
• Command: Experimentally adding command to merge slices
• fix: Do not require context unless need to
• fix: Do not filter without target
• fix: Considering type affinity on commands
• fix: Fixing failed assertion
• fix: Setting member sizes in archives correctly
• fix: Correctly quoting pathes

Full Changelog: v2.2.4...v2.2.5

2.2.4

Release notes

• Option: Listing file formats (--help-formats)
• Fix: Better terminal handling
• Fix: No longer crash on non-UTF-8 text matches

Full Changelog: v2.2.3...v2.2.4

2.2.3

Release note

• Command: Adding install/uninstall command (xpd/xpu)
• Command: Adding device shell (!!)
• Command: Experimentally reviving apk grabber (xg)
• Option: Enabling to bind configs for commands (cmd .. @e:k=v)
• API: Verifiable FP, and API fixup
• Fix: Experimentally supporting xapk
• Fix: Simpler, faster, smaller schema
• Fix: Show/search command fixup
• Fix: Better wording
• Fix: Do not cache target
• Fix: Sorting commands
• Fix: CLI fixups

Full Changelog: v2.2.2...v2.2.3

2.2.2

Release note 🐱

• Command: inject frida-gadget (xf*)
• Command: dynamic analysis: watch device log/UI/filesystem (d*)
• Option: Now you can select opener to open target file (-F)
• Option: Adding quieter mode (-Q)
• Signature: authenticated URLs
• Fix: Printing class/method with qualname (pd)
• Fix: Search commands now yield tagged listing instead of raw op list (/d*)
• Fix: Aborting scanning on invalid scanner configurations (@s)
• Fix: Large blobs are now properly handled (~1GB compressed)
• Fix: Unmatches no longer negate matches in sigsels
• Fix: Do not crash on invalid undecodable base64 string
• API: Contexts are now required to provide info and their size
• API: format map keys are names; patterns should be specified in the entries
• API: Analysis level is now 0 .. 4

Full Changelog: v2.2.1...v2.2.2

2.2.1

Release notes

• Allowing context subtypes; context type is now a set
• Adding text mode operation of /s
• Experimentally compressing benign corpus
• API updates
• fix: ensuring to require relevant context type
• fix: updated command description
• fix: documentation

Full Changelog: v2.2.0...v2.2.1

2.2.0

Release notes

• Better progress reporting
• Extension APIs: now you can add signatures, commands, file formats
• Analysis are now leveled
• Flaky issue grouping is now fixed
• Command lines are now handled with argparse

etc.

Full Changelog: v2.1.9...v2.2.0

2.1.10

Release notes

• Bump termcolor from 2.3 to 2.4 by @AkechiShiro in #358
• Adding workflow for staling and closing issue
• Copyright overhaul

2.1.9

Release notes

• New signature: SharedPreferences I/O
• Adding device related commands for inspect mode ( mainly x.. )
• graph size limit is now tunable ( @gs: or --max-graph-size )
• Experimentally counting fragment-like
• Implicit scan mode is now deprecated
• Dropping into inspect mode if neither mode nor files given
• fix: Method mapping choke fixup (see: #290 )
• fix: Picking up architectures
• fix: Retargetting fix for normal case
• fix: CI reports can now be properly generated
• fix: Correctly score cleartext traffic eligibility
• fix: Fixing broken statement in class search
• fix: Showing package in info command
• fix: Providing building instruction
• fix: Marking tentative scenarios of backup attacks
• fix: Limiting graph size at 2M by default
• internal: Updating to Python 3.12

etc.

2.1.8.1

Release notes

• fix: using private copy of APKEditor
• fix: flushing stdout/err
• internal: dropping version name from bundled jar filenames

2.1.8

Release note

• New mode: Inspect mode II. Try trueseeing --inspect and (hopefully) enjoy
• New signature: cleartext traffic permitted status
• Considering fullBackupContent upon flagging "manipulatable backups"
• Writing summary upon successful scan
• Experimentally limiting graph size not to OOM
• Slightly refined hostlike filter
• internal: Switching toolchain: apkeditor and apksigner
• internal: Performance fixup
• internal: Dependency cleanup