Summary
This release delivers significant upgrades to Medusa and Mango, enhancing both their capabilities and usability. Medusa now supports dynamic module configuration via the options
command, provides clearer output for class hooking, and includes new modules to extend its functionality. Mango has been enhanced with tools like TruffleHog for identifying secrets within APK assets and expanded its exposure interface to include Firebase-related keys for deeper analysis.
Release Highlights
Medusa
-
Dynamic Module Configuration: Modules can now be customized dynamically using the
options
command. -
Enhanced Hooking Output: The
hook -a
command now provides much clearer output when hooking all functions of a class. -
New Modules and Updates: Additional modules have been added, and existing ones have been improved for better functionality.
Mango
-
Firebase Key and Configuration Display: The
show exposure
command now reveals Firebase-related keys and relevant information. -
Secret Scanning via integration with TruffleHog: Integration with TruffleHog enables storing secrets in the application's database and displaying them with the
show secrets
command. -
Off-Market Installations: Support for installing off-market formats such as APKS, XAPK, ZIP, and other file types using the
installmultiple
command.