Mobile

Mobile Security Framework (MobSF)

Automated mobile app (Android/iOS) static and dynamic analysis.

beginner

Linux

Docker

macOS

Enumeration

Scanning

Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.

Assessing mobile APK/IPA files in a mobile security engagement.

Upload app to MobSF; review permissions, secrets, tracker findings.

Fast baseline for mobile app risks.

Commands & usage

docker run -it --rm -p 8000:8000 opensecurity/mobile-security-framework-mobsf

Commands are educational examples. Adapt hosts, paths, and rates to your authorized scope.

Frida

Dynamic instrumentation toolkit for apps (mobile & desktop).

Objection

Runtime mobile exploration toolkit powered by Frida.

Apktool

Disassemble and rebuild Android APK resources and smali.

JADX

Dex to Java decompiler with GUI for Android apps.