{"id":15031191,"url":"https://github.com/mobsf/mobile-security-framework-mobsf","last_synced_at":"2026-04-01T22:20:30.226Z","repository":{"id":26646228,"uuid":"30102273","full_name":"MobSF/Mobile-Security-Framework-MobSF","owner":"MobSF","description":"Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.","archived":false,"fork":false,"pushed_at":"2025-09-07T19:35:11.000Z","size":1529521,"stargazers_count":19382,"open_issues_count":15,"forks_count":3464,"subscribers_count":595,"default_branch":"master","last_synced_at":"2025-09-07T21:24:11.792Z","etag":null,"topics":["android-security","api-testing","apk","cwe","devsecops","dynamic-analysis","ios-security","malware-analysis","mastg","masvs","mobile-security","mobsf","mstg","owasp","rest","runtime-security","static-analysis","web-security","windows-mobile-security"],"latest_commit_sha":null,"homepage":"https://opensecurity.in","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/MobSF.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":".github/SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"github":"ajinabraham","custom":["https://opensecurity.in/donate"]}},"created_at":"2015-01-31T04:36:01.000Z","updated_at":"2025-09-07T19:34:09.000Z","dependencies_parsed_at":"2023-02-16T10:16:32.639Z","dependency_job_id":"ed09b39b-3a3f-4981-807d-401ee1a915f2","html_url":"https://github.com/MobSF/Mobile-Security-Framework-MobSF","commit_stats":{"total_commits":1706,"total_committers":100,"mean_commits":17.06,"dds":"0.39917936694021106","last_synced_commit":"39ba3e64be165746219d128a0303ac8cdca0a85c"},"previous_names":[],"tags_count":53,"template":false,"template_full_name":null,"purl":"pkg:github/MobSF/Mobile-Security-Framework-MobSF","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MobSF%2FMobile-Security-Framework-MobSF","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MobSF%2FMobile-Security-Framework-MobSF/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MobSF%2FMobile-Security-Framework-MobSF/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MobSF%2FMobile-Security-Framework-MobSF/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/MobSF","download_url":"https://codeload.github.com/MobSF/Mobile-Security-Framework-MobSF/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MobSF%2FMobile-Security-Framework-MobSF/sbom","scorecard":{"id":95289,"data":{"date":"2025-08-11","repo":{"name":"github.com/MobSF/Mobile-Security-Framework-MobSF","commit":"49537563ccbee34c3c4956d63b087a39c9182b38"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"2 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":2,"reason":"Found 6/30 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'packages' permission set to 'read': .github/workflows/codeql-analysis.yml:20","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Warn: no topLevel permission defined: .github/workflows/auto-comment.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-latest.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-release.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-test.yml:1","Warn: no topLevel permission defined: .github/workflows/mobsf-test.yml:1","Warn: no topLevel permission defined: .github/workflows/python-publish.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: mobsf/StaticAnalyzer/tools/apksigner.jar:1","Warn: binary detected: mobsf/StaticAnalyzer/tools/apktool_2.10.0.jar:1","Warn: binary detected: mobsf/StaticAnalyzer/tools/baksmali-3.0.8-dev-fat.jar:1","Warn: binary detected: mobsf/StaticAnalyzer/tools/bundletool-all-1.17.2.jar:1","Warn: binary detected: mobsf/StaticAnalyzer/tools/ios/CgbiPngFix/CgbiPngFix.exe:1","Warn: binary detected: mobsf/StaticAnalyzer/tools/ios/CgbiPngFix/CgbiPngFix_amd64:1","Warn: binary detected: mobsf/StaticAnalyzer/tools/ios/CgbiPngFix/CgbiPngFix_arm64:1","Warn: binary detected: mobsf/StaticAnalyzer/tools/ios/class-dump:1","Warn: binary detected: mobsf/StaticAnalyzer/tools/ios/class-dump-swift:1","Warn: binary detected: mobsf/StaticAnalyzer/tools/ios/jtool.ELF64:1","Warn: binary detected: mobsf/StaticAnalyzer/tools/vd2svg-0.4.4.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: GNU General Public License v3.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-latest.yml:9"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (17) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/auto-comment.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/auto-comment.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-latest.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/docker-latest.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-latest.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/docker-latest.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-latest.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/docker-latest.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-latest.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/docker-latest.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-latest.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/docker-latest.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-release.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/docker-release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-release.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/docker-release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-release.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/docker-release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/docker-release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/docker-release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-test.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/docker-test.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-test.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/docker-test.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-test.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/docker-test.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-test.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/docker-test.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-test.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/docker-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mobsf-test.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/mobsf-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mobsf-test.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/mobsf-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mobsf-test.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/mobsf-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python-publish.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/python-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python-publish.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/MobSF/Mobile-Security-Framework-MobSF/python-publish.yml/master?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:2: pin your Docker image by updating python:3.12-slim-bookworm to python:3.12-slim-bookworm@sha256:9c1d9ed7593f2552a4ea47362ec0d2ddf5923458a53d0c8e30edf8b398c94a31","Warn: downloadThenRun not pinned by hash: Dockerfile:29-54","Warn: pipCommand not pinned by hash: setup.sh:42","Warn: pipCommand not pinned by hash: .github/workflows/mobsf-test.yml:31","Warn: pipCommand not pinned by hash: .github/workflows/mobsf-test.yml:32","Warn: chocoCommand not pinned by hash: .github/workflows/mobsf-test.yml:57","Warn: pipCommand not pinned by hash: .github/workflows/python-publish.yml:20","Warn: pipCommand not pinned by hash: .github/workflows/python-publish.yml:21","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  13 third-party GitHubAction dependencies pinned","Info:   0 out of   1 chocoCommand dependencies pinned","Info:   0 out of   1 containerImage dependencies pinned","Info:   0 out of   1 downloadThenRun dependencies pinned","Info:   1 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":4,"reason":"6 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-79v4-65xg-pq4g","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: GHSA-wg33-5h85-7q5p","Warn: Project is vulnerable to: GHSA-8qvm-5x2c-j2w7","Warn: Project is vulnerable to: GHSA-7cx3-6m66-7c5m","Warn: Project is vulnerable to: GHSA-8w49-h785-mj3c"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T08:51:45.919Z","repository_id":26646228,"created_at":"2025-08-15T08:51:45.919Z","updated_at":"2025-08-15T08:51:45.919Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":274359049,"owners_count":25270686,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-09T02:00:10.223Z","response_time":80,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["android-security","api-testing","apk","cwe","devsecops","dynamic-analysis","ios-security","malware-analysis","mastg","masvs","mobile-security","mobsf","mstg","owasp","rest","runtime-security","static-analysis","web-security","windows-mobile-security"],"created_at":"2024-09-24T20:15:07.106Z","updated_at":"2026-04-01T22:20:28.596Z","avatar_url":"https://github.com/MobSF.png","language":"JavaScript","readme":"# Mobile Security Framework (MobSF)\n\n![](https://cloud.githubusercontent.com/assets/4301109/20019521/cc61f7fc-a2f2-11e6-95f3-407030d9fdde.png)\n\nMobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile. MobSF can be used for a variety of use cases such as mobile application security, penetration testing, malware analysis, and privacy analysis. The Static Analyzer supports popular mobile app binaries like APK, IPA, APPX and source code. Meanwhile, the Dynamic Analyzer supports both Android and iOS applications and offers a platform for interactive instrumented testing, runtime data and network traffic analysis. MobSF seamlessly integrates with your DevSecOps or CI/CD pipeline, facilitated by REST APIs and CLI tools, enhancing your security workflow with ease.\n\nMade with ![Love](https://cloud.githubusercontent.com/assets/4301109/16754758/82e3a63c-4813-11e6-9430-6015d98aeaab.png) in India\n\n[![Docker Pulls](https://img.shields.io/docker/pulls/opensecurity/mobile-security-framework-mobsf?style=social)](https://hub.docker.com/r/opensecurity/mobile-security-framework-mobsf/) [![python](https://img.shields.io/badge/python-3.12+-blue.svg?logo=python\u0026labelColor=yellow)](https://www.python.org/downloads/)\n[![PyPI version](https://badge.fury.io/py/mobsf.svg)](https://badge.fury.io/py/mobsf)\n[![platform](https://img.shields.io/badge/platform-osx%2Flinux%2Fwindows-green.svg)](https://github.com/MobSF/Mobile-Security-Framework-MobSF/)\n[![License](https://img.shields.io/:license-GPL--3.0--only-blue.svg)](https://www.gnu.org/licenses/gpl-3.0.html)\n[![MobSF tests](https://github.com/MobSF/Mobile-Security-Framework-MobSF/workflows/MobSF%20tests/badge.svg?branch=master)](https://github.com/MobSF/Mobile-Security-Framework-MobSF/actions)\n[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=MobSF_Mobile-Security-Framework-MobSF\u0026metric=alert_status)](https://sonarcloud.io/dashboard?id=MobSF_Mobile-Security-Framework-MobSF)\n![GitHub closed issues](https://img.shields.io/github/issues-closed/MobSF/Mobile-Security-Framework-MobSF)\n[![CII Best Practices](https://bestpractices.coreinfrastructure.org/projects/6392/badge)](https://bestpractices.coreinfrastructure.org/projects/6392)\n\n\n[![ToolsWatch Best Security Tools 2016](https://img.shields.io/badge/ToolsWatch-Rank%205%20%7C%20Year%202016-red.svg)](http://www.toolswatch.org/2017/02/2016-top-security-tools-as-voted-by-toolswatch-org-readers/)\n[![ToolsWatch Best Security Tools 2017](https://img.shields.io/badge/ToolsWatch-Rank%209%20%7C%20Year%202017-red.svg)](http://www.toolswatch.org/2018/01/black-hat-arsenal-top-10-security-tools/)\n[![Blackhat Arsenal Asia 2015](https://img.shields.io/badge/Black%20Hat%20Arsenal-Asia%202015-blue.svg)](https://www.blackhat.com/asia-15/arsenal.html#yso-mobile-security-framework)\n[![Blackhat Arsenal Asia 2018](https://img.shields.io/badge/Black%20Hat%20Arsenal-Asia%202018-blue.svg)](https://www.blackhat.com/asia-18/arsenal.html#mobile-security-framework-mobsf)\n[![Blackhat Arsenal Europe 2023](https://img.shields.io/badge/Black%20Hat%20Arsenal-Europe%202023-blue.svg)](https://www.blackhat.com/eu-23/arsenal/schedule/index.html#mobile-security-framework---mobsf-35327)\n\n\nMobSF is also bundled with [Android Tamer](https://tamerplatform.com), [BlackArch](https://blackarch.org/mobile.html) and [Pentoo](https://www.pentoo.ch/).\n\n### Support MobSF\n\n[![Donate to MobSF](https://user-images.githubusercontent.com/4301109/117404264-7aab5480-aebe-11eb-9cbd-da82d7346bb3.png)](https://opensecurity.in/donate)\n\n\n\u003e Has MobSF made a difference for you? Show your support and help us innovate with a donation. It's easy to build open source, maintaining one is a different story. \n\n*Long live open source!*\n\n## Documentation\n\nQuick setup with docker\n\n```\ndocker pull opensecurity/mobile-security-framework-mobsf:latest\ndocker run -it --rm -p 8000:8000 opensecurity/mobile-security-framework-mobsf:latest\n\n# Default username and password: mobsf/mobsf\n```\n\n[![See MobSF Documentation](https://user-images.githubusercontent.com/4301109/70686099-3855f780-1c79-11ea-8141-899e39459da2.png)](https://mobsf.github.io/docs)\n\n* Try MobSF Static Analyzer Online: [mobsf.live](https://mobsf.live)\n* MobSF in CI/CD: [mobsfscan](https://github.com/MobSF/mobsfscan)\n* Conference Presentations: [Slides \u0026 Videos](https://mobsf.github.io/Mobile-Security-Framework-MobSF/presentations.html)\n* MobSF Online Course: [OpSecX MAS](https://opsecx.com/index.php/product/automated-mobile-application-security-assessment-with-mobsf/)\n* What's New: [See Changelog](https://mobsf.github.io/Mobile-Security-Framework-MobSF/changelog.html)\n\n## Collaborators\n\n[Ajin Abraham](https://in.linkedin.com/in/ajinabraham) ![india](https://user-images.githubusercontent.com/4301109/37564171-6549d678-2ab6-11e8-9b9d-21327c7f5d5b.png)  | [Magaofei](https://github.com/magaofei) ![china](https://user-images.githubusercontent.com/4301109/44515364-00bbe880-a6e0-11e8-944d-5b48a86427da.png) | [Matan Dobrushin](https://github.com/matandobr) ![israel](https://user-images.githubusercontent.com/4301109/37564177-782f1758-2ab6-11e8-91e5-c76bde37b330.png) | [Vincent Nadal](https://github.com/superpoussin22) ![france](https://user-images.githubusercontent.com/4301109/37564175-71d6d92c-2ab6-11e8-89d7-d21f5aa0bda8.png)\n\n## e-Learning Courses \u0026 Certifications\n![MobSF Course](https://user-images.githubusercontent.com/4301109/76344880-ad68b580-62d8-11ea-8cde-9e3475fc92f6.png) [Automated Mobile Application Security Assessment with MobSF -MAS](https://opsecx.com/index.php/product/automated-mobile-application-security-assessment-with-mobsf/)\n\n![Android Security Tools Course](https://user-images.githubusercontent.com/4301109/76344939-c709fd00-62d8-11ea-8208-774f1d5a7c52.png) [Android Security Tools Expert -ATX](https://opsecx.com/index.php/product/android-security-tools-expert-atx/)\n\n## MobSF Support\n\n* **Free Support:** Free limited support, questions, help and discussions, join our Slack channel [![Join_MobSF_Slack](https://img.shields.io/badge/mobsf%20slack-join-green?logo=slack\u0026labelColor=4A154B)](https://join.slack.com/t/mobsf/shared_invite/zt-2umjnqlsm-sNSh9g4GFraPUBPqatwTxw)\n* **Enterprise Support:** Priority feature requests, live support \u0026 onsite training, see [![MobSF Support Packages](https://img.shields.io/badge/enterprise-support%20package-blue?logo=data:image/png;base64,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)](https://opensecurity.in/#support)\n\n\n## Contribution, Feature Requests \u0026 Bugs\n\n* Read [CONTRIBUTING.md](https://github.com/MobSF/Mobile-Security-Framework-MobSF/blob/master/.github/CONTRIBUTING.md) before opening bugs, feature requests and pull request.\n* For Project updates and announcements, follow [@ajinabraham](https://twitter.com/ajinabraham) or [@OpenSecurity_IN](https://twitter.com/OpenSecurity_IN).\n* Github Issues are only for tracking bugs and feature requests. Do not post support or help queries there. We have a slack channel for that.\n\n### Static Analysis - Android\n\n![mobsf_android_static_analysis](https://user-images.githubusercontent.com/4301109/95506503-f9b6c980-097d-11eb-803a-f88321e1feb7.gif)\n\n### Static Analysis - iOS\n\n![mobsf_ios_ipa_static_analysis](https://user-images.githubusercontent.com/4301109/95507865-16540100-0980-11eb-9e4d-887668d46969.gif)\n\n### Dynamic Analysis - Android APK\n\n![mobsf_android_dynamic_analysis](https://user-images.githubusercontent.com/4301109/95514697-5e782100-098a-11eb-8390-47bb3822a2d7.gif)\n\n### Web API Viewer\n\n![mobsf_web_api_fuzzing_with_burp](https://user-images.githubusercontent.com/4301109/95516560-69808080-098d-11eb-9e0b-fb5a25e96585.gif)\n\n### Dynamic Analysis - iOS IPA\n\n![mobsf_ios_dynamic_analysis](https://github.com/MobSF/Mobile-Security-Framework-MobSF/assets/4301109/34014c4d-1535-48ad-9944-a4b1b728a030)\n\n## Past Collaborators\n\n* [Dominik Schlecht](https://github.com/sn0b4ll) ![germany](https://user-images.githubusercontent.com/4301109/37564176-743238ba-2ab6-11e8-9666-5d98f0a1d127.png)\n\n## Honorable Contributors \u0026 Shoutouts\n\n* Amrutha VC - For the new MobSF logo\n* Dominik Schlecht - For the awesome work on adding Windows Phone App Static Analysis to MobSF\n* Esteban - Better Android Manifest Analysis and Static Analysis Improvement.\n* Matan Dobrushin - For adding Android ARM Emulator support to MobSF - Special thanks goes for cuckoo-droid\n* Shuxin - Android Binary Analysis\n* Abhinav Saxena - (@xandfury) - For Travis CI and Logging integration\n* ![netguru](https://user-images.githubusercontent.com/4301109/76340877-a3dc4f00-62d2-11ea-8631-b4cc8d9e42ed.png) [Netguru](https://www.netguru.com/) (@karolpiateknet, @mtbrzeski) - For iOS Swift support, Rule contributions and SAST refactoring.\n* Maxime Fawe - (@Arenash13) - For Matching Strategy implementation of SAST pattern matching algorithms.\n* Abhinav Sejpal (@Abhinav_Sejpal) - For poking me with bugs, feature requests, and UI \u0026 UX suggestions\n* Anant Srivastava (@anantshri) - For Activity Tester Idea\n* Anto Joseph (@antojoseph) - For the help with SuperSU\n* Bharadwaj Machiraju (@tunnelshade) - For writing pyWebProxy from scratch\n* Rahul (@c0dist) - Kali Support\n* MindMac - For writing Android Blue Pill\n* Oscar Alfonso Diaz - (@OscarAkaElvis) - For Dockerfile contributions\n* Thomas Abraham - For JS Hacks on UI\n* Tim Brown (@timb_machine) - For the iOS Binary Analysis Ruleset\n* Shanil Prasad (@Rajuraju14) - For improving iOS ATS Analysis\n* Jovan Petrovic (@JovanPetrovic) - For sponsoring a server to host mobsf.live\n","funding_links":["https://github.com/sponsors/ajinabraham","https://opensecurity.in/donate"],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmobsf%2Fmobile-security-framework-mobsf","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmobsf%2Fmobile-security-framework-mobsf","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmobsf%2Fmobile-security-framework-mobsf/lists"}