Skip to content

Commit bc27e74

Browse files
committed
removed profiles from this repo
1 parent 244ffce commit bc27e74

File tree

5 files changed

+9
-3602
lines changed

5 files changed

+9
-3602
lines changed

README.md

Lines changed: 9 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
# LibScout
22

3-
LibScout is a light-weight and effective static analysis tool to detect third-party libraries in Android apps. The detection is resilient against common bytecode obfuscation techniques such as identifier renaming or code-based obfuscations such as reflection-based API hiding or control-flow randomization.<br>
4-
LibScout requires the original library SDKs (compiled .jar/.aar files) to extract library profiles that can be used for detection on Android apps.
3+
LibScout is a light-weight and effective static analysis tool to detect third-party libraries in Android/Java apps. The detection is resilient against common bytecode obfuscation techniques such as identifier renaming or code-based obfuscations such as reflection-based API hiding or control-flow randomization. Further LibScout is capable of pinpointing exact library versions.<br>
4+
LibScout requires the original library SDKs (compiled .jar/.aar files) to extract library profiles that can be used for detection on Android apps. Pre-generated library profiles are hosted at the repository [LibScout-Profiles](https://github.com/reddr/LibScout-Profiles).
55

66
Unique features:
77
* Library detection resilient against many kinds of bytecode obfuscation
@@ -21,26 +21,10 @@ If you use LibScout in a scientific publication, we would appreciate citations u
2121

2222
## Library Profiles and Scripts
2323

24-
To facilitate usage of LibScout we are happy to release our datasets to the community. <br>
25-
You can find the following resources in the data/scripts directory:<br>
24+
Ready-to-use library profiles and library meta-data can be found in the repository [LibScout-Profiles](https://github.com/reddr/LibScout-Profiles).
25+
It further includes scripts to automatically retrieve complete library version histories.
2626

27-
28-
### Library Profiles (last updated: 06/27/2017)
29-
30-
You can find all <b>library profiles</b> (ready-to-use) for lib detection in apps in the data directory as compressed .zip file.<br>
31-
It currently includes <b>205</b> unique libraries and <b>3,071</b> library versions.<br> For convenience, data/library-data.csv contains a complete list of library/-versions including meta data such as release dates.
32-
33-
### Scripts (scripts/mvn-central)
34-
The scripts directory further contains a python script to automatically download original library SDKs including complete version histories from maven-central.<br>
35-
The set of libraries we currently retrieve is stored in a json file.<br>
36-
37-
38-
Due to copyright reasons we cannot publicy provide the original library SDKs. If you are interested in this data, send us an email.
39-
We also welcome contributions to LibScout or our library database (either original SDKs or scripts for automatic retrieval from sources other than mvn central).<br><br>
40-
Contact us for comments, feedback, how to contribute: Erik Derr [[email protected]]
41-
42-
43-
## Detecting vulnerable library versions
27+
### Detecting vulnerable library versions
4428

4529
LibScout has builtin functionality to report library versions with the following security vulnerabilities.<br>
4630
Detected vulnerable versions are tagged with <b>[SECURITY]</b>, patches with <b>[SECURITY-FIX]</b>. <br>
@@ -67,17 +51,14 @@ These results have been reported to Google's [ASI program](https://developer.and
6751
## LibScout Repo Structure
6852
<pre><code>
6953
|_ build.xml (ant build file to generate runnable .jar)
70-
|_ data (library profiles and supplemental data sets)
71-
| |_ library-data.csv (library meta data)
72-
| |_ library-profiles-21.06.zip (all library profiles)
73-
| |_ app-version-codes.csv (app packages with valid version codes)
54+
|_ assets
55+
| |_ library.xml (Library meta-data template)
56+
|_ data
57+
| |_ app-version-codes.csv (Google Play app packages with valid version codes)
7458
|_ lib
7559
| pre-compiled WALA libs, Apache commons*, log4j, Android SDK
7660
|_ logging
7761
| |_ logback.xml (log4j configuration file)
78-
|_ scripts
79-
| |_ mvn-central
80-
| |_ mvn-central-crawler.py (script to retrieve complete library histories from mvn-central)
8162
|_ src
8263
source directory of LibScout (de/infsec/tpl). Includes some open-source,
8364
third-party code to parse AXML resources / app manifests etc.

0 commit comments

Comments
 (0)