Skip to content

Commit

Permalink
Multiple Features Improved or Added (#2310)
Browse files Browse the repository at this point in the history
* Android added App Link assetlinks.json check
* Added more new permission mappings
* Updated Permission database
* Improved Source code view content search
* Added upstream proxy support for Corellium API calls
* Updated Readme
  • Loading branch information
ajinabraham authored Dec 20, 2023
1 parent f465abd commit b48276a
Show file tree
Hide file tree
Showing 16 changed files with 236,875 additions and 198,781 deletions.
10 changes: 4 additions & 6 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ Version: v3.8 beta

![](https://cloud.githubusercontent.com/assets/4301109/20019521/cc61f7fc-a2f2-11e6-95f3-407030d9fdde.png)

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. MobSF supports mobile app binaries (APK, XAPK, IPA & APPX) along with zipped source code and provides REST APIs for seamless integration with your CI/CD or DevSecOps pipeline.The Dynamic Analyzer helps you to perform runtime security assessment and interactive instrumented testing.
Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile. MobSF can be used for a variety of use cases such as mobile application security, penetration testing, malware analysis, and privacy analysis. The Static Analyzer supports popular mobile app binaries like APK, IPA, APPX and source code. Meanwhile, the Dynamic Analyzer supports both Android and iOS applications and offers a platform for interactive instrumented testing, runtime data and network traffic analysis. MobSF seamlessly integrates with your DevSecOps or CI/CD pipeline, facilitated by REST APIs and CLI tools, enhancing your security workflow with ease.

Made with ![Love](https://cloud.githubusercontent.com/assets/4301109/16754758/82e3a63c-4813-11e6-9430-6015d98aeaab.png) in India

Expand All @@ -23,6 +23,8 @@ Made with ![Love](https://cloud.githubusercontent.com/assets/4301109/16754758/82
[![ToolsWatch Best Security Tools 2017](https://img.shields.io/badge/ToolsWatch-Rank%209%20%7C%20Year%202017-red.svg)](http://www.toolswatch.org/2018/01/black-hat-arsenal-top-10-security-tools/)
[![Blackhat Arsenal Asia 2015](https://img.shields.io/badge/Black%20Hat%20Arsenal-Asia%202015-blue.svg)](https://www.blackhat.com/asia-15/arsenal.html#yso-mobile-security-framework)
[![Blackhat Arsenal Asia 2018](https://img.shields.io/badge/Black%20Hat%20Arsenal-Asia%202018-blue.svg)](https://www.blackhat.com/asia-18/arsenal.html#mobile-security-framework-mobsf)
[![Blackhat Arsenal Europe 2023](https://img.shields.io/badge/Black%20Hat%20Arsenal-Europe%202023-blue.svg)](https://www.blackhat.com/eu-23/arsenal/schedule/index.html#mobile-security-framework---mobsf-35327)


MobSF is also bundled with [Android Tamer](https://tamerplatform.com), [BlackArch](https://blackarch.org/mobile.html) and [Pentoo](https://www.pentoo.ch/).

Expand All @@ -32,7 +34,7 @@ MobSF is also bundled with [Android Tamer](https://tamerplatform.com), [BlackArc

If you liked MobSF and find it useful, please consider donating.

*It's easy to build open source, try maintaining a project once. Long live open source!*
*It's easy to build open source, maintaining one is a different another story. Long live open source!*

## Documentation

Expand Down Expand Up @@ -79,10 +81,6 @@ docker run -it --rm -p 8000:8000 opensecurity/mobile-security-framework-mobsf:la

![mobsf_android_static_analysis](https://user-images.githubusercontent.com/4301109/95506503-f9b6c980-097d-11eb-803a-f88321e1feb7.gif)

### Static Analysis - Android Source Tree-view

![mobsf_android_static_analysis_tree_view](https://user-images.githubusercontent.com/6709304/101240296-1578ea80-36f7-11eb-810a-3827f238c231.gif)

### Static Analysis - iOS

![mobsf_ios_ipa_static_analysis](https://user-images.githubusercontent.com/4301109/95507865-16540100-0980-11eb-9e4d-887668d46969.gif)
Expand Down
5 changes: 4 additions & 1 deletion mobsf/DynamicAnalyzer/tools/apk_patcher.py
Original file line number Diff line number Diff line change
Expand Up @@ -89,7 +89,10 @@ def download_frida_gadget(self, frida_arch, aarch, version):
if not url:
return None
logger.info('Downloading frida-gadget %s', fgadget)
with requests.get(url, stream=True) as r:
with requests.get(url,
stream=True,
proxies=proxies,
verify=verify) as r:
with LZMAFile(r.raw) as f:
with open(gadget_bin, 'wb') as flip:
copyfileobj(f, flip)
Expand Down
Loading

0 comments on commit b48276a

Please sign in to comment.