Static Analysis

Tools

• An Android Device or an Emulator

• APKTool

• JADX

• JD-GUI

• ADB

• GREP

• MOBSF

ADB

# Connect to android device
adb tcpip 5555
adb connect device_ip_address:5555

# List available devices
adb devices

# Connect to the shell
adb shell

# Push a file
adb push local remote

# Install an apk
adb install path_to_apk

# Stop ADB Server
adb kill-server

APKTool

# Decompile an apk
apktool d pivaa.apk

MobSF

GitHub - MobSF/Mobile-Security-Framework-MobSF: Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.GitHub

Installation (Docker)

docker pull opensecurity/mobile-security-framework-mobsf:latest
docker run -it --rm -p 8000:8000 opensecurity/mobile-security-framework-mobsf:latest

Dex2Jar

# Convert .dex file to .jar
d2j-dex2jar classes.dex

REFERENCES

• https://github.com/MobSF/Mobile-Security-Framework-MobSF?tab=readme-ov-file

• https://mobsf.live/

• https://developer.android.com/tools/adb