Fork of drneox/nutcracker with a web dashboard (job queue, scheduler, MASVS trend per app), real-time device video via WebUSB (no scrcpy needed), an LLM-driven autonomous Frida bypass + exploit-confirmation agent (aipwn), SQLite-backed run history, and a Dockerized static-analysis toolbox (jadx/apktool/radare2/gitleaks/apkleaks/apkid) — no local tool installs required. - #26
Open
Hiteek wants to merge 42 commits into
Open
Fork of drneox/nutcracker with a web dashboard (job queue, scheduler, MASVS trend per app), real-time device video via WebUSB (no scrcpy needed), an LLM-driven autonomous Frida bypass + exploit-confirmation agent (aipwn), SQLite-backed run history, and a Dockerized static-analysis toolbox (jadx/apktool/radare2/gitleaks/apkleaks/apkid) — no local tool installs required.#26Hiteek wants to merge 42 commits into
Hiteek wants to merge 42 commits into
Conversation
Docs/plugin guide
fix: launch uses strategies.frida_host from config (-H/-D/-U)
Fix/frida server tmp path
…store .gitignore - apk_tools.py: replace 25 hardcoded Spanish strings with t() calls (apk_* keys) Covers: patch_split_apk (no apksigner/keytool, patching, zipalign, signing) and install_apk (all install paths, split/bundle, signature mismatch, ABI) - runtime.py: replace 3 hardcoded strings in simulate_app_navigation (rt_ui_*) - i18n.py: add 26 new apk_* keys (EN + ES) and rt_ui_stopped (EN + ES) - .gitignore: restore entries for AI tools, plugin outputs, backups and logs
i18n(core): localize all hardcoded strings in apk_tools, runtime + re…
Agent-Logs-Url: https://github.com/drneox/nutcracker/sessions/854364d9-1441-4a3e-a0fc-6c797bc4e22e Co-authored-by: drneox <1235287+drneox@users.noreply.github.com>
…-video docs: Add Demo section with YouTube video thumbnail to README
fix: corrected bugs in device, report and pipeline
Add 24 keys (er_header, er_title, er_description, er_confirmed, er_badge_*, er_field_*, er_section_bypass, er_stats_line, etc.) for both 'en' and 'es' locales. Used by exploit_report_pdf.py.
…P008, PDF a reports/{pkg}/
Fix/misc updates
…findings en vuln.json
Fix/misc updates
…MASVS summary layout; i18n vuln_scanner + native_scanner
…tion entry
- vuln_scanner.py: replace loose (?i)(AKIA|...) pattern with anchored
\b(AKIA|AIPA|ASIA)[A-Z0-9]{16}\b to reduce false positives
- ROADMAP.md: new Reporting section documenting the disconnect between
FridaAgent bypass success and DEX extraction, with proposed two-verdict
model and implementation touch-points (AnalysisResult, masvs.py,
reporter.py, PDF report)
- update aipwn submodule pointer to feat/vuln-exploit-native-scan HEAD
Fix/misc updates
…tion entry
- vuln_scanner.py: replace loose (?i)(AKIA|...) pattern with anchored
\b(AKIA|AIPA|ASIA)[A-Z0-9]{16}\b to reduce false positives
- ROADMAP.md: new Reporting section documenting the disconnect between
FridaAgent bypass success and DEX extraction, with proposed two-verdict
model and implementation touch-points (AnalysisResult, masvs.py,
reporter.py, PDF report)
- update aipwn submodule pointer to feat/vuln-exploit-native-scan HEAD
fix: tighten AWS key regex; roadmap: add dynamic bypass vs DEX extrac…
test.yaml was a stray copy of config.yaml committed since the initial commit. Rewrote history with git-filter-repo to remove it from all 97 commits, and added config*.yaml (except the .example template) to .gitignore to prevent this from happening again.
# Conflicts: # .gitignore # ROADMAP.md # nutcracker.py # nutcracker_core/masvs.py # nutcracker_core/vuln_scanner.py # setup.sh
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Fork of drneox/nutcracker — adds a web dashboard with device video (WebUSB), an autonomous LLM exploit agent (aipwn), SQLite run history + scheduler, and a Dockerized static-analysis toolbox.