MobSF scan results aren't fully processed

[ahammoudeh96]

MobSF binary static scan results in json format aren't fully processed.DefectDojo skips lots of findings made by MobSF, e.g. malware analysis and code analysis

Steps to reproduce:

• Download json report via MobSF REST API
• Upload MobSF json report to DefectDojo either via REST API or WEB UI
• lots of findings are skipped!

[manuel-sommer]

Could you provide a sampleoutput? I can help you to fix this.

[ahammoudeh96]

Thank you for replaying back @manuel-sommer,

I have attached the following file:

• Mobsf scan result json file
• Mobsf scan result pdf file
• Defectdojo pdf file from the uploaded Mobsf scan result json file.

As you can see in mobsf json and pdf files the total numbers of findings are 36. defectdojo on the other hand only reports 21.

defectdojo_scan_result.xlsx
download.pdf
mobsf_scan_result.json

[manuel-sommer]

@ahammoudeh96 I started to fix the parser, could you provide more output files from different scans or test my fix?
I guess we don't have enough test data for this parser to test it properly.

[ahammoudeh96]

@manuel-sommer I have findings for two apps.

---

Allsafe - 1.4
allsafe.pdf
allsafe.json

damnvulenrablebank
damnvulnerablebank.pdf
damnvulnrablebank.json

I will create a dev defectdojo machine to test your fix. might takes a bit of time. you know management approval

[manuel-sommer]

You can also test on localhost. ;-)

Tested both your json and added them to the unittests, they are processed fine.

[manuel-sommer]

This can be closed.