Description

Detects improper SSL/TLS certificate validation in Android applications. This vulnerability occurs when an app fails to properly validate SSL certificates during secure communications, potentially allowing attackers to intercept sensitive data through man-in-the-middle attacks. Improper certificate validation severely compromises the security of network communications.

Detection Strategy

• Reads res/xml/network_security_config.xml from the APK

• Reports a vulnerability when the file contains both the text trust-anchors and the text user

• Finds the two texts only when the compiled file stores its strings in UTF-8