pip install truegaze
truegaze

git clone https://github.com/nightwatchcybersecurity/truegaze.git
cd truegaze
pip install -r requirements.txt
python -m truegaze.cli

truegaze list

truegaze scan test.apk
truegaze scan test.ipa

truegaze scan *.apk
truegaze scan *.ipa

user@localhost:~/$ truegaze list
Total active plugins: 3
+----------------+-------------------------------------------+---------+-------+
|      الاسم     |                الوصف                     | Android |  iOS  |
+----------------+-------------------------------------------+---------+-------+
| AdobeMobileSdk | كشف التهيئة الخاطئة لـ SSL في Adobe Mobile|   صحيح  | صحيح  |
|                |                    SDK                    |         |       |
+----------------+-------------------------------------------+---------+-------+
| FirebasePlugin | كشف قواعد بيانات Firebase غير الآمنة وحاويات|  صحيح   | خطأ   |
|                |                  التخزين في GCP            |         |       |
+----------------+-------------------------------------------+---------+-------+
| WeakKeyPlugin  |      كشف مفاتيح توقيع Android الضعيفة     |   صحيح  | خطأ   |
+----------------+-------------------------------------------+---------+-------+

user@localhost:~/$ truegaze scan ~/test.ipa
Identified as an iOS application via a manifest located at: Payload/IPAPatch-DummyApp.app/Info.plist
Scanning using the "AdobeMobileSdk" plugin
-- Found 1 configuration file(s)
-- Scanning "Payload/IPAPatch-DummyApp.app/Base.lproj/ADBMobileConfig.json'
---- FOUND: The ["analytics"]["ssl"] setting is missing or false - SSL is not being used
---- FOUND: The ["remotes"]["analytics.poi"] URL doesn't use SSL: http://assets.example.com/c234243g4g4rg.json
---- FOUND: The ["remotes"]["messages"] URL doesn't use SSL: http://assets.example.com/b34343443egerg.json
---- FOUND: A "templateurl" in ["messages"]["payload"] doesn't use SSL: http://my.server.com/?user={user.name}&zip={user.zip}&c16={%sdkver%}&c27=cln,{a.PrevSessionLength}
---- FOUND: A "templateurl" in ["messages"]["payload"] doesn't use SSL: http://my.43434server.com/?user={user.name}&zip={user.zip}&c16={%sdkver%}&c27=cln,{a.PrevSessionLength}
Done!

user@localhost:~/$ truegaze version
Current version: v0.2