android-doctor 0.3.1

Extract and audit Android OTA and firmware images (payload.bin, super.img, ext4, erofs) without running them
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61

{
  "audit": [
    {
      "id": "adb-by-default",
      "severity": "medium",
      "subject": "system"
    },
    {
      "id": "adb-root",
      "severity": "high",
      "subject": "system"
    },
    {
      "id": "adb-unauthenticated",
      "severity": "high",
      "subject": "system"
    },
    {
      "id": "debug-build-type",
      "severity": "medium",
      "subject": "system"
    },
    {
      "id": "debuggable-build",
      "severity": "high",
      "subject": "system"
    },
    {
      "id": "insecure-adb",
      "severity": "high",
      "subject": "system"
    },
    {
      "id": "test-keys",
      "severity": "medium",
      "subject": "system"
    }
  ],
  "doctor": [
    {
      "id": "avb_signature",
      "severity": "info",
      "subject": "vbmeta.img"
    },
    {
      "id": "partition_coverage",
      "severity": "warn",
      "subject": "boot.img"
    },
    {
      "id": "partition_coverage",
      "severity": "warn",
      "subject": "vendor.img"
    },
    {
      "id": "selinux_label_gaps",
      "severity": "info",
      "subject": "system"
    }
  ]
}