Where communities thrive


  • Join over 1.5M+ people
  • Join over 100K+ communities
  • Free without limits
  • Create your own community
People
Activity
  • Dec 02 13:49
  • Dec 02 13:44
  • Oct 01 11:49

    parthipanramesh on feature_oreo_8.1_support

    WIP: Oreo 8.1 (compare)

  • Sep 23 08:59

    parthipanramesh on feature_oreo_8.1_support

    WIP: Adding Android 8.0 Oreo Su… WIP: Backup of the most recent … Fixes for the Orep port on othe… and 6 more (compare)

  • Sep 12 12:27
    alfink edited #87
  • Sep 12 12:24
    alfink synchronize #87
  • Sep 12 11:23
    alfink assigned #87
  • Sep 12 11:23
    alfink labeled #87
  • Sep 12 11:23
    alfink opened #87
  • Sep 12 11:23
    alfink labeled #87
  • Sep 12 11:23
    alfink review_requested #87
  • Sep 11 09:02

    parthipanramesh on artist_oreo_8.1_master

    Move module registration to Com… (compare)

  • Sep 11 08:58

    parthipanramesh on artist_oreo_8.1_master

    Move module registration to Com… (compare)

  • Sep 11 08:13

    parthipanramesh on artist_oreo_8.1_master

    Add ARTist src files to Android… (compare)

  • Sep 11 07:58

    parthipanramesh on artist_oreo_8.1_master

    Add ARTist src files to Android… (compare)

  • Sep 11 07:53

    parthipanramesh on artist_oreo_8.1_master

    Add ARTist src files to Android… (compare)

  • Sep 09 12:38
  • Sep 07 09:15
  • Sep 05 01:24
  • Jul 16 17:21
Sebastian Weisgerber
@sweisgerber-dev
Bonjour ! :sparkles:
Oliver Schranz
@schrnz
Welcome! :clap:
So let me again emphasize that this is an experiment. We want to have an open platform where we can also discuss matters that do not fit into issues. For example, discussions that are primarily opinion-based, concrete questions concerning the code, surveys etc.
Let's see what happens, I am looking forward to your reactions =)
Parthipan Ramesh
@parthipanramesh
Good idea! :thumbsup:
Sebastian Weisgerber
@sweisgerber-dev
I think it already failed, because we have no inline emojis support :(
Oliver Schranz
@schrnz
@sweisgerber-dev I would assume that the Gitter devs will at some point add this... until then, we need to stay patient =)
Oliver Schranz
@schrnz
I just pushed a minor update to the ssh build scripts in ArtistGui. In case you are using them, you might have to update your config since missing variables are now considered as errors and the script will fail on any unsuppressed error now.
This will help prevent weird half-baked builds due to missing variables
Oliver Schranz
@schrnz
Hi there,
all 8 repositories have received new README.md files that explain the corresponding projects' roles in the ARTist ecosystem and how to build and work with them. Right now, they reside in the README-v2 branches, but I intend to merge them soon.
It really was about time to introduce proper README files since many of the repositories had simple one-liners that at most hinted at what the repository actually contain, let alone what can be achieved with them. In the end, we put a lot of effort into the overall project and it would be a pity if the lack of proper README files would let people turn away from the project. I hope this is fixed now. Beside instructions on what the repo contains and how to build and use it, each README also received sections that explain the upcoming beta release (there will be a dedicated post) and a primer on the larger ARTist ecosystem.
Please have a look and let me know what you think. I would like to incorporate the feedback before merging this to master, so don't be shy =)
Sebastian Weisgerber
@sweisgerber-dev
Very good idea :)
Perhaps we should also think about merging or unifying it with http://artist.cispa.saarland somehow
Oliver Schranz
@schrnz
Yeah I am working on a new version of the docu at https://artist.cispa.saarland, but it is not finished yet. Hope to have this available soon though...
Sebastian Weisgerber
@sweisgerber-dev
travis builds a working again
Sebastian Weisgerber
@sweisgerber-dev
@all FYI: We removed ARTist as git submodule of art, it gets now managed via the local_manifest, too.
Build Guide & manifest files are updated: https://artist.cispa.saarland/build-setup/
Replace your existing .repo/local_manifest/artist.xml with the new one and do a repo sync.
  • Be sure to backup all your code before
  • there's potentially a repo force sync necessary or you delete the art/ folder
Oliver Schranz
@schrnz
Yay, thanks to @alfink the infamous clone bug (Project-ARTist/ARTist#10) is fixed and hence, it is possible now to inject multiple different method calls per module. This issue was also the major blocker for having multiple instrumentation passes in one module, which means we could have this now but need to update the API first. TL;DR: You can now inject calls to different methods from within one instrumentation pass, but for having multiple passes per module you have to wait for an update
Oliver Schranz
@schrnz
I created an issue for the API change so that you can track the current state: Project-ARTist/ARTist#24
Oliver Schranz
@schrnz
Hi all, did anyone by chance check out https://github.com/Chainfire/libsuperuser ? Seems to be a nice and unified way to make use of a (potentially) installed root manager/shell without having to worry about different providers (SuperSU, Magisk, ...) and I think it might be nice to use it in ArtistGui instead of making su calls by hand as we currently do it
Sebastian Weisgerber
@sweisgerber-dev
Did use or had seen it yet, but we could benefit from it I suppose :)
Alexander Fink
@alfink
Hi all, I used ARTist in a recent CTF challenge to intercept https traffic with burp and to bypass a custom certificate pinning check. I uploaded the challenge writeup, module and CodeLib. It might help those, who just started working with ARTist and want to see another example module or use-case besides tracelogging and stetho.
Sebastian Weisgerber
@sweisgerber-dev
Nice and very detailed, thanks a lot @alfink :)
simmac
@simmac
Hi all, is the Taint Tracking Module that is presented in the paper available somewhere?
Oliver Schranz
@schrnz
Hi there, the code was only a prototype and is not published, and given that it is based on a very old version of ARTist (even before we had actual modules) it will not work nowadays. However, if you are primarily interested in the concepts behind it I am happy to help and maybe I can even dig out some old code. I wanted to port it to newer ARTist but as usual time is the problem =/
simmac
@simmac
Thank you for your answer and your offer to help! :) I want to do my BSc-thesis in this field, I will speak to my advisor and we will probably reach out to you via email within the next week if that's alright
b1ackm4x
@b1ackm4x
Hello, thanks for your ARTIST. I am also interested in Taint tracking Module, I know it's old but it doesn't matter, can you upload it if you can find that? Thanks!
Oliver Schranz
@schrnz
Alright everyone, because I received quite some requests, I compiled a small zip that contains the main files of the old taint tracking logic (was not even a module back then). Given that it is highly outdated, I don't feel comfortable uploading it anywhere public, so please drop me an email at oliver.schranz@cispa.saarland and I will give you access.