aquatone VS rattlesnakeos-stack

How about aquatone? https://github.com/michenriksen/aquatone

Empowered with a list of all the exposed URLs in your organization, you can then set up a process to scan these using a number of web-focused Dynamic Application Security Testing (DAST) tools and scanners such as Zed Attack Proxy, dirsearch (Web path scanner), Aquatone, and Nikto2. The OWASP® Foundation maintains a full list of scanning tools that could be used.

AQUATONE - Subdomain discovery tool utilizing various open sources producing a report that can be used as input to other tools.

download 11.0.15 (https://github.com/dan-v/rattlesnakeos-stack/releases/tag/v11.0.15) and use this binary to 'deploy' and then kick off a 11.0 build and update your phone

I'm not interested in the current android-prepare-vendor drama, so until an alternative is built, I've made a change that requires you to specify an android-prepare-vendor to use in your local config file. This release will require that you update to 12.0.3 and add three new config entries for specifying details of android-prepare-vendor. Here is an example of what that might look like (do not copy as is - it will not build):

There is a new stack version 12.0.2 required for this update. The 12.0.2 update fixes an issue with new stacks on 12.0 that was causing a build failure; thanks u/caasi-dev for reporting the issue.

First release of 12.0. You'll need updated stack release 12.0.1. Highly recommend backing up your device before attempting upgrade.

This release is still 11.x and next release with 12.x will depend on how long it takes to get everything up and working. It requires a stack update this month to 11.0.14, as there were two minor build issues with Chromium 94.x.

There were no stack changes required this month, unless you need support for Pixel 5a and then you should be on 11.0.13.

Adding support for it in rattlesnakeos-stack, which is very minor, an example of adding Pixel 5 is here: https://github.com/dan-v/rattlesnakeos-stack/pull/178

There are some tools already which support automated builds such as https://github.com/dan-v/rattlesnakeos-stack and https://github.com/danielfullmer/robotnix - however they'll need work to support both CalyxOS and also Android Auto.

CalyxOS is an awesome project. I have worked with the lead developer a bit over the past few years and it's been such a pleasure. We share some bits of code between our projects here: https://github.com/AOSPAlliance.

If anyone is interested in building their own custom android OS in the cloud (AWS) with same ability to lock your bootloader like CalyxOS, you can checkout my project I've been maintaining for a few years now called RattlesnakeOS: https://github.com/dan-v/rattlesnakeos-stack.

And if you prefer to not build in the cloud, there is also a really great project called robotnix (https://github.com/danielfullmer/robotnix) which provides a way to build many flavors of OS (AOSP, GrapheneOS, LineageOS, etc).