Question 1

iOS and Android - Build Creation Guide

Accepted Answer

**

For iOS Application:

a) Select: Product ---> Archive

b) Click on Export button

c) Select your Code Signing Account:

d) ${color}#ff2600 Export as "Save for Development Deployment"

e) Choose: Export One Application for all Compatible devices

f) Check the Summary:

g) Select the Location to Create a folder and save the IPA file:

h) Upload the IPA in the Appknox Dashboard: https://secure.appknox.com

For Android Applications

a) Go To Build and Click on Generate Signed APK

b) Android Studi

Question 2

Appknox Product Onboarding

Accepted Answer

Welcome

Discover all the incredible capabilities of our platform via our resources, Whether you are new to the dashboard or an existing user, you will find out all the useful information about our product and its services varying from a basic introduction to SAST, DAST, API and instructions for using advanced features.

Appknox automated scanner is easy to use and has vast API compatibilities which make it simple to integrate into the mobile Application Development cycle, providing complete automation of SAST, DAST, and Application Program Interface(API) Testing. This user guide provides an overview of the platform and how you can interact with it and how to interpret the results & administer end-to-end security.

Why Appknox?

Appknox is the world ’s most Powerful Plug and Play SaaS solution to automate your Mobile Application Security and provide real-time detection of vulnerabilities & Security risks. We help companies by providing a 360-degree view of security under a single platform accurately by identifying security flaws by thoroughly testing them against the evergrowing risk, vulnerabilities and test cases.

Appknox has been developed in a way that it can be integrated with any application Systems development life cycle(SDLC) and providing an early-stage detection & achieving a complete DevSecOps cycle.

Project View and Upload Feature (APK or IPA Upload)

Once you login to the dashboard, you get the below-mentioned view:

${youtube}[Project View](6cXgdXZ

Question 3

FAQ: Encountering 404 Issue While Accessing the Appknox Dashboard?

Accepted Answer

Many a times we might get a 404 Error when trying to access the Appknox Dashboard via VPN/Proxy.

Please perform the below mentioned actionable items to avoid such scenarios:

1) Check if the backend is connecting by visiting ${color}#ff2600 and everything should be operational

2) Add *.appknox.com to whitelist domain

3) Add appknox-production.s3-accelerate.amazonaws.com to whitelist domain

4) Add appknox-production.s3.amazonaws.com to whitelist domain

5) If the above mentioned steps doesn't working please try to access Appknox Dashboard without VPN/Proxy

Question 4

iOS Build Creation Guide [XCode 12]

Accepted Answer

a) Select Product --> Archive

Product -> Archive

b) Select Distribute App

Distribute App

c) ${color}#f20707 Choose the "Development" option

Choose Development Option

d) Uncheck all the option and make sure App Thinning is set to None:

App Thinning: None

e) Choose "Automatically manage signing"

Choose "automatically manage signing"

f) You will have the IPA ready to be exported. Click on "Export"

Click on Export

g) Choose the directory you want to export the IPA

Directory to export the IPA

h) Finally you have the IPA ready

IPA ready

Question 5

FAQ: IP Whitelisting for DAST and API Scan

Accepted Answer

IP whitelisting is a security feature often used for limiting and controlling access only to trusted users. It will enable your team to further not highlight access from following IPs as a risk. Below are IP's that you need to whitelist if you are performing Appknox Assessment on your mobile application.

1) Dynamic Assessment and Manual Scan (PT):

If you need to Whitelist the IPs for running the ${color}[#d04343](Dynamic Scan or DAST) - please whitelist http://devicefarm.appknox.com/ which is pointing to the below mentioned IP address ie, any outgoing traffic during the dynamic scan on Appknox cloud will have the following IPs:

106.51.36.33
122.166.147.106

2) API Assessment:

Any outgoing traffic during the API scan on Appknox cloud will have the following IPs:

34.72.67.16

Question 6

Appknox mDevSecOps

Accepted Answer

Appknox platform now supports CLI to enable you to set up a complete continuous integration (CI/CD) with Appknox Tool for your mobile application’s security needs. This can be easily achieved by integrating Appknox CLI in your development CI/CD pipeline. After integrating Appknox into a CI/CD workflow, teams can achieve a complete cycle from uploading the mobile app binary to reporting the vulnerabilities and performing reaudit at a much faster pace.

Appknox CI/CD Model

Benefits of continuous integration with Appknox: ● Reduced human effort and intervention ● Developer friendly and easy setup process ● Efficient and less effort ● Faster Turn around ● Always up to date on security for each and every build

**Integration Instructions **

Prerequisites: ● cURL(or equivalent) to download the Appknox CLI binary

Steps of setup:

Get Personal Access Token from Appknox dashboard from the below link: https://secure.appknox.com/settings/developersettings

Download the appknox binary with the following command:

Set an environment variable APPKNOXACCESSTOKEN with t

Frequently Read Articles

Browse All Categories