mobsf Goto Github PK

android-insecurebankv2

Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities

apkid

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

atx

capfuzz

CapFuzz - capture, fuzz & intercept web traffic.

diva-android

DIVA Android - Damn Insecure and vulnerable App for Android

docs

MobSF Documentation

dvia-v2

Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This project is developed and maintained by @prateekg147. The vulnerabilities and solutions covered in this app are tested up to iOS 11. The current version is writen in Swift and has the following vulnerabilities.

frida

Clone this repo to build Frida

httptools

httptools helps you to capture, repeat and live intercept HTTP requests with scripting capabilities. It is built on top of mitmproxy

jd-core-java

Java Library for JD-Core, a java decompiler

mobile-security-framework-mobsf

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

mobsf-ci

All that is required to run MobSF in the ci

mobsf-clipboarddump

Dumps Android Clipboard

mobsf-datapusher

DataPusher for MobSF

mobsf-related-materials

MobSF related Presentations, Slides and Others.

mobsf-screencast

ScreenCast for MobSF

mobsf-tools

Tools around MobSF security mobile testing solution

mobsf_bitrise

mobsfpy

Python CLI and wrapper for the Mobile Security Framework (MobSF) REST-API

mobsfscan

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.

pivaa

Created by High-Tech Bridge, the Purposefully Insecure and Vulnerable Android Application (PIVAA) replaces outdated DIVA for benchmark of mobile vulnerability scanners.

robomobsf

Robot Framework Library for MobSF (SAST) Tool

rp4mobsf

a nginx reverse proxy with ssl and auth for MobSF

test_files

Test files for MobSF

training

Training materials crafted and publicly provided by Red Naga members

yara-python-dex

yara-python-dex enabled wheels