android-doctor 0.3.1

Extract and audit Android OTA and firmware images (payload.bin, super.img, ext4, erofs) without running them
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51

{
  "audit": [
    {
      "id": "adbd-service",
      "severity": "medium",
      "subject": "system"
    },
    {
      "id": "shell-service",
      "severity": "medium",
      "subject": "system"
    },
    {
      "id": "shell-service",
      "severity": "medium",
      "subject": "system"
    },
    {
      "id": "su-service",
      "severity": "high",
      "subject": "system"
    }
  ],
  "doctor": [
    {
      "id": "avb_signature",
      "severity": "info",
      "subject": "vbmeta.img"
    },
    {
      "id": "init_service_hygiene",
      "severity": "warn",
      "subject": "rootshell"
    },
    {
      "id": "partition_coverage",
      "severity": "warn",
      "subject": "boot.img"
    },
    {
      "id": "partition_coverage",
      "severity": "warn",
      "subject": "vendor.img"
    },
    {
      "id": "selinux_label_gaps",
      "severity": "info",
      "subject": "system"
    }
  ]
}