Mobile Security Framework ORG

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

MobSF Documentation

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.

MobSF related Presentations, Slides and Others.

httptools helps you to capture, repeat and live intercept HTTP requests with scripting capabilities. It is built on top of mitmproxy

a nginx reverse proxy with ssl and auth for MobSF

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.

CapFuzz - capture, fuzz & intercept web traffic.

yara-python-dex enabled wheels

Tools around MobSF security mobile testing solution

Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities

Java Library for JD-Core, a java decompiler

DIVA Android - Damn Insecure and vulnerable App for Android

Python CLI and wrapper for the Mobile Security Framework (MobSF) REST-API

Clone this repo to build Frida

Training materials crafted and publicly provided by Red Naga members

Test files for MobSF

Robot Framework Library for MobSF (SAST) Tool

Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This project is developed and maintained by @prateekg147. The vulnerabilities and solutions covered in this app are tested up to iOS 11. The current version is writen in Swift and has the following vulnerabilities.

All that is required to run MobSF in the ci

ScreenCast for MobSF

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

No description.

DataPusher for MobSF

Created by High-Tech Bridge, the Purposefully Insecure and Vulnerable Android Application (PIVAA) replaces outdated DIVA for benchmark of mobile vulnerability scanners.

Dumps Android Clipboard

No description.