MobSF поддерживает бинарники мобильных приложений (APK, IPA и APPX), а также сжатый исходный код и предоставляет REST API для интеграции с вашим CI/CD. Динамический анализатор помогает выполнять оценку безопасности во время выполнения и интерактивное инструментальное тестирование.
Текущая версия v3.0.0 Beta
v3.0.0 Beta Changelog
- Features or Enhancements
- OWASP Mobile Top 10 2016 is supported
- Major UI Update for MobSF
- Major Schema changes to rest API
- iOS URLs Scheme
- iOS ATS Analysis improved
- New iOS Static Analysis Rules
- New iOS Static Analysis Rules
- New Android Manifest Analysis Rules
- Updated dependencies
- Optimized Windows Setup
- Updated Scoring mechanisms
- Improved Tracker detection
- Remove Global Proxy after dynamic analysis
- Android Permission database update
- Added Play with Docker support
- AppMonsta support
- Code QA
- Bug Fixes
- Fix Security issue #1197 (Directory Traversal)
- iOS Static Analyzer fixes
- Typo Fix
- Moved to oscrypto and distro
- Windows binscope bug fix
- Reduce False positives
Скачать:
GitHub - MobSF/Mobile-Security-Framework-MobSF: Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dy
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static a...
github.com
Описание работы было рассмотрено здесь:
https://medium.com/@kshitishirke/mobile-security-framework-mobsf-static-analysis-df22fcdae46e