mobsf

v4.1.3

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. For more information about how to use this package see README

Latest version published 2 months ago

License: GPL-3.0

PyPI

GitHub

Package Health Score

66 / 100

security
Security issues found
popularity
Recognized
maintenance
Healthy
community
Active

Explore Similar Packages

Popularity

Recognized

GitHub Stars: 17.75K
Forks: 3.26K
Contributors: 90

Direct Usage Popularity

Based on project statistics from the GitHub repository for the PyPI package mobsf, we found that it has been starred 17,750 times.

Security

Security issues found

Security and license risk for latest version

Release Date: Nov 5, 2024
Direct Vulnerabilities: 0
C
2
H
2
M
0
L
Indirect Vulnerabilities: 0
C
0
H
0
M
0
L
License Risk: 0
H
0
M
0
L

All security vulnerabilities belong to production dependencies of direct and indirect packages.

License

GPL-3.0

Non-Permissive License

We noticed that this project uses a license which requires less permissive conditions such as disclosing the source code, stating changes or redistributing the source under the same license. It is advised to further consult the license terms before use.

Security Policy

Yes

Snyk detected that the latest version of mobsf has a security vulnerability.

We highly advise you to review these security issues.

You can connect your project's repository to Snyk to stay up to date on security alerts and receive automatic fix pull requests.

Fix it in your project with Snyk!

Maintenance

Healthy

Commit Frequency

Open Issues: 6
Open PR: 2
Last Release: 2 months ago
Last Commit: 7 days ago

Further analysis of the maintenance status of mobsf based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Healthy.

We found that mobsf demonstrates a positive version release cadence with at least one new version released in the past 3 months.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Community

Active

Readme: Yes
Contributing.md: Yes
Code of Conduct: Yes
Contributors: 90
Funding: Yes

With more than 10 contributors for the mobsf repository, this is possibly a sign for a growing and inviting community.

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Python Versions Compatibility: <4.0,>=3.10

Age: 4 years
Latest Release: 2 months ago
Dependencies: 0 Direct
Versions: 15
Maintainers: 0
Wheels: OS Independent

Readme

Mobile Security Framework (MobSF)

Version: v4.1

Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile. MobSF can be used for a variety of use cases such as mobile application security, penetration testing, malware analysis, and privacy analysis. The Static Analyzer supports popular mobile app binaries like APK, IPA, APPX and source code. Meanwhile, the Dynamic Analyzer supports both Android and iOS applications and offers a platform for interactive instrumented testing, runtime data and network traffic analysis. MobSF seamlessly integrates with your DevSecOps or CI/CD pipeline, facilitated by REST APIs and CLI tools, enhancing your security workflow with ease.

Made with Love in India

GitHub closed issues

MobSF is also bundled with Android Tamer, BlackArch and Pentoo.

Support MobSF

If you liked MobSF and find it useful, please consider donating.

It's easy to build open source, maintaining one is a different story. Long live open source!

Documentation

Quick setup

docker pull opensecurity/mobile-security-framework-mobsf:latest
docker run -it --rm -p 8000:8000 opensecurity/mobile-security-framework-mobsf:latest

Try MobSF Static Analyzer Online: mobsf.live
MobSF in CI/CD: mobsfscan
Conference Presentations: Slides & Videos
MobSF Online Course: OpSecX MAS
What's New: See Changelog

Collaborators

Ajin Abraham india | Magaofei china | Matan Dobrushin israel | Vincent Nadal france

e-Learning Courses & Certifications

MobSF Course Automated Mobile Application Security Assessment with MobSF -MAS

Android Security Tools Course Android Security Tools Expert -ATX

MobSF Support

Free Support: Free limited support, questions, help and discussions, join our Slack channel
Enterprise Support: Priority feature requests, live support & onsite training, see

Contribution, Feature Requests & Bugs

Read CONTRIBUTING.md before opening bugs, feature requests and pull request.
For Project updates and announcements, follow @ajinabraham or @OpenSecurity_IN.
Github Issues are only for tracking bugs and feature requests. Do not post support or help queries there. We have a slack channel for that.

Static Analysis - Android

mobsf_android_static_analysis

Static Analysis - iOS

mobsf_ios_ipa_static_analysis

Dynamic Analysis - Android APK

mobsf_android_dynamic_analysis

Web API Viewer

mobsf_web_api_fuzzing_with_burp

Dynamic Analysis - iOS IPA

mobsf_ios_dynamic_analysis

Past Collaborators

Dominik Schlecht

Honorable Contributors

Amrutha VC - For the new MobSF logo
Dominik Schlecht - For the awesome work on adding Windows Phone App Static Analysis to MobSF
Esteban - Better Android Manifest Analysis and Static Analysis Improvement.
Matan Dobrushin - For adding Android ARM Emulator support to MobSF - Special thanks goes for cuckoo-droid
Shuxin - Android Binary Analysis
Abhinav Saxena - (@xandfury) - For Travis CI and Logging integration
Netguru (@karolpiateknet, @mtbrzeski) - For iOS Swift support, Rule contributions and SAST refactoring.
Maxime Fawe - (@Arenash13) - For Matching Strategy implementation of SAST pattern matching algorithms.

Shoutouts

Abhinav Sejpal (@Abhinav_Sejpal) - For poking me with bugs, feature requests, and UI & UX suggestions
Anant Srivastava (@anantshri) - For Activity Tester Idea
Anto Joseph (@antojoseph) - For the help with SuperSU
Bharadwaj Machiraju (@tunnelshade) - For writing pyWebProxy from scratch
Rahul (@c0dist) - Kali Support
MindMac - For writing Android Blue Pill
Oscar Alfonso Diaz - (@OscarAkaElvis) - For Dockerfile contributions
Thomas Abraham - For JS Hacks on UI
Tim Brown (@timb_machine) - For the iOS Binary Analysis Ruleset
Shanil Prasad (@Rajuraju14) - For improving iOS ATS Analysis
Jovan Petrovic (@JovanPetrovic) - For sponsoring a server to host mobsf.live

FAQs

What is mobsf?

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, mal... Visit Snyk Advisor to see a full health score report for mobsf, including popularity, security, maintenance & community analysis.

Is mobsf popular?

The python package mobsf receives a total of 1,241 weekly downloads. As such, mobsf popularity was classified as a recognized. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is mobsf well maintained?

We found that mobsf demonstrated a healthy version release cadence and project activity. It has a community of 90 open source contributors collaborating on the project. See the full package health analysis to learn more about the package maintenance status.

Is mobsf safe to use?

Security issues were found while scanning the latest version of mobsf, and a total of 0 vulnerabilities were detected. It is highly advised to conduct a security review before using this package. View the full security scan results.

Last updated on 23 December-2024, at 22:35 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP