Automated security scanning with MobSF

The mobile Security Framework (MobSF) provides security analysis for the iOS, Windows, and Android applications. It can also do dynamic analysis based on runtime behaviors of the application. The MobSF provides an easy to use UI for users to drag and drop the mobile applications for analysis and also includes rest API interface to do further CI/CD integration with your automation framework. In our demonstration, we will show how to use MobSF API to analyze a sample vulnerable Android application, goatdroid.apk.

Step 1 – set up the MobSF

The easiest way to set up the MobSF is by using docker. The following setup will enable the MobSF running with 8000 port. Once the setup is ready...