Static Application Testing

MobSF

Quick Setup

docker pull opensecurity/mobile-security-framework-mobsf:latest
docker run -it --rm -p 8000:8000 opensecurity/mobile-security-framework-mobsf:latest

Online

https://mobsf.live/mobsf.live

Scan Target Application

Download Sieve

https://github.com/mwrlabs/drozer/releases/download/2.3.4/sieve.apkgithub.com

Upload Sieve application in MobSF Website

Manifest Analysis

Code Analysis

MobSF Report

113KB

download.pdf

PDF

Open

Words of Caution

• Eliminate flase positives

• Address the need for manual testing as well

• Third-party integrations

• Not everything can be fixed