GitPlanet

Cheap and reliable Node.js hosting starts at $3/month, and $1/month static HTML hosting

Created with love in Canada, visit hostnodejs.com today

Feel like to post an Ad? Learn Details
All Projects → MobSF → Mobile Security Framework Mobsf

MobSF / Mobile Security Framework Mobsf

Licence: gpl-3.0
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

Programming Languages

python
139335 projects - #7 most used programming language
javascript
184084 projects - #8 most used programming language
HTML
75241 projects
CSS
56736 projects
shell
77523 projects
Batchfile
5799 projects
Dockerfile
14818 projects

Labels

reststatic-analysismalware-analysisapkowaspdevsecopsweb-securitydynamic-analysisandroid-securityapi-testingmobile-securitymobsfwindows-mobile-securityios-securitymobile-security-frameworkcweruntime-securitymstgmasvs

Projects that are alternatives of or similar to Mobile Security Framework Mobsf

Apkleaks
Scanning APK file for URIs, endpoints & secrets.
Stars: ✭ 2,707 (-73.49%)
Mutual labels:  apk, static-analysis, mobile-security, android-security
mobileAudit
Django application that performs SAST and Malware Analysis for Android APKs
Stars: ✭ 140 (-98.63%)
Mutual labels:  apk, malware-analysis, android-security, mobile-security
Saferwall
A hackable malware sandbox for the 21st Century
Stars: ✭ 419 (-95.9%)
Mutual labels:  static-analysis, malware-analysis, dynamic-analysis
Find Sec Bugs
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
Stars: ✭ 1,748 (-82.88%)
Mutual labels:  static-analysis, owasp, cwe
R2frida
Radare2 and Frida better together.
Stars: ✭ 610 (-94.03%)
Mutual labels:  static-analysis, dynamic-analysis, android-security
Adhrit
Android Security Suite for in-depth reconnaissance and static bytecode analysis based on Ghera benchmarks.
Stars: ✭ 399 (-96.09%)
Mutual labels:  apk, mobile-security, android-security
Malwarelab vm Setup
Setup scripts for my Malware Analysis VMs
Stars: ✭ 126 (-98.77%)
Mutual labels:  static-analysis, malware-analysis, dynamic-analysis
Dexcalibur
[Official] Android reverse engineering tool focused on dynamic instrumentation automation. Powered by Frida. It disassembles dex, analyzes it statically, generates hooks, discovers reflected methods, stores intercepted data and does new things from it. Its aim is to be an all-in-one Android reverse engineering platform.
Stars: ✭ 512 (-94.99%)
Mutual labels:  apk, mobile-security, android-security
Awesome Mobile Security
An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.
Stars: ✭ 1,837 (-82.01%)
Mutual labels:  mobile-security, android-security, ios-security
Apicheck
The DevSecOps toolset for REST APIs
Stars: ✭ 184 (-98.2%)
Mutual labels:  rest, owasp, devsecops
Habomalhunter
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
Stars: ✭ 627 (-93.86%)
Mutual labels:  static-analysis, malware-analysis, dynamic-analysis
Engine
Droidefense: Advance Android Malware Analysis Framework
Stars: ✭ 386 (-96.22%)
Mutual labels:  static-analysis, malware-analysis, dynamic-analysis
Sbt Dependency Check
SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). 🌈
Stars: ✭ 187 (-98.17%)
Mutual labels:  static-analysis, owasp, devsecops
Insider
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
Stars: ✭ 216 (-97.88%)
Mutual labels:  static-analysis, owasp, android-security
aparoid
Static and dynamic Android application security analysis
Stars: ✭ 62 (-99.39%)
Mutual labels:  static-analysis, dynamic-analysis, malware-analysis
awesome-malware-analysis
Defund the Police.
Stars: ✭ 9,181 (-10.1%)
Mutual labels:  static-analysis, dynamic-analysis, malware-analysis
Enlightn
Your performance & security consultant, an artisan command away.
Stars: ✭ 378 (-96.3%)
Mutual labels:  static-analysis, dynamic-analysis
Injuredandroid
A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.
Stars: ✭ 317 (-96.9%)
Mutual labels:  apk, android-security
Sec skills
软件安全工程师技能表
Stars: ✭ 410 (-95.99%)
Mutual labels:  malware-analysis, android-security
Glue
Application Security Automation
Stars: ✭ 412 (-95.97%)
Mutual labels:  owasp, devsecops
View All Similar Projects ➔

Mobile Security Framework (MobSF)

Version: v3.4 beta

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. MobSF support mobile app binaries (APK, XAPK, IPA & APPX) along with zipped source code and provides REST APIs for seamless integration with your CI/CD or DevSecOps pipeline.The Dynamic Analyzer helps you to perform runtime security assessment and interactive instrumented testing.

Made with Love in India

python PyPI version platform License Docker Pulls

MobSF tests Requirements Status Language grade: Python Quality Gate Status GitHub closed issues

ToolsWatch Best Security Tools 2016 ToolsWatch Best Security Tools 2017 Blackhat Arsenal Asia 2015 Blackhat Arsenal Asia 2018

MobSF is also bundled with Android Tamer, BlackArch and Pentoo.

Support MobSF

Donate to MobSF

If you liked MobSF and find it useful, please consider donating.

It's easy to build open source, try maintaining a project once. Long live open source!

Documentation

See MobSF Documentation See MobSF Documentation in Chinese

Collaborators

Ajin Abraham india | Magaofei china | Matan Dobrushin israel | Vincent Nadal france

e-Learning Courses & Certifications

MobSF Course Automated Mobile Application Security Assessment with MobSF -MAS

Android Security Tools Course Android Security Tools Expert -ATX

MobSF Support

  • Free Support: Free limited support, questions, help and discussions, join our Slack channel Join_MobSF_Slack
  • Enterprise Support: Priority feature requests, live support & onsite training, see MobSF Support Packages

Contribution, Feature Requests & Bugs

  • Read CONTRIBUTING.md before opening bugs, feature requests and pull request.
  • For Project updates and announcements, follow @ajinabraham or @OpenSecurity_IN.
  • Github Issues are only for tracking bugs and feature requests. Do not post support or help queries there. We have a slack channel for that.

Static Analysis - Android

mobsf_android_static_analysis

Static Analysis - Android Source Tree-view

mobsf_android_static_analysis_tree_view

Static Analysis - iOS

mobsf_ios_ipa_static_analysis

Dynamic Analysis - Android APK

mobsf_dynamic_analysis

Web API Viewer

mobsf_web_api_fuzzing_with_burp

Past Collaborators

Honorable Contributors

  • Amrutha VC - For the new MobSF logo
  • Dominik Schlecht - For the awesome work on adding Windows Phone App Static Analysis to MobSF
  • Esteban - Better Android Manifest Analysis and Static Analysis Improvement.
  • Matan Dobrushin - For adding Android ARM Emulator support to MobSF - Special thanks goes for cuckoo-droid
  • Shuxin - Android Binary Analysis
  • Abhinav Saxena - (@xandfury) - For Travis CI and Logging integration
  • netguru Netguru (@karolpiateknet, @mtbrzeski) - For iOS Swift support, Rule contributions and SAST refactoring.
  • Maxime Fawe - (@Arenash13) - For Matching Strategy implementation of SAST pattern matching algorithms.

Shoutouts

  • Abhinav Sejpal (@Abhinav_Sejpal) - For poking me with bugs, feature requests, and UI & UX suggestions
  • Anant Srivastava (@anantshri) - For Activity Tester Idea
  • Anto Joseph (@antojoseph) - For the help with SuperSU
  • Bharadwaj Machiraju (@tunnelshade) - For writing pyWebProxy from scratch
  • Rahul (@c0dist) - Kali Support
  • MindMac - For writing Android Blue Pill
  • Oscar Alfonso Diaz - (@OscarAkaElvis) - For Dockerfile contributions
  • Thomas Abraham - For JS Hacks on UI
  • Tim Brown (@timb_machine) - For the iOS Binary Analysis Ruleset
  • Shanil Prasad (@Rajuraju14) - For improving iOS ATS Analysis
Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].