MobSF: Mobile application security analysis framework

Automated pen-testing for Android, iOS, and Windows applications.

LIVE RANKINGS • 12:16 PM • STEADY

OVERALL

#205

SECURITY

#20

30 DAY RANKING TREND

ovr#205

·Secur#20

STARS

20.5K

FORKS

3.6K

7D STARS

+66

7D FORKS

Tags:

Security

See Repo:

Learn more about Mobile-Security-Framework-MobSF

Mobile Security Framework is a security research platform written in Python that analyzes mobile applications across multiple platforms. It combines static analysis capabilities for APK, IPA, APPX binaries and source code with dynamic analysis through instrumented testing environments for Android and iOS. The framework integrates with CI/CD pipelines via REST APIs and command-line tools, allowing security checks to be embedded in development workflows. Common applications include penetration testing, malware analysis, privacy assessment, and compliance validation of mobile applications.

Multi-Platform Analysis

Analyzes Android, iOS, and Windows mobile applications through a single framework. Eliminates the need to maintain separate security tools for each platform, reducing operational complexity for security teams.

Dual Analysis Approach

Combines static binary and source code analysis with dynamic runtime instrumentation and network traffic capture. Identifies both code-level vulnerabilities and behavioral security issues that manifest only during execution.

DevSecOps Integration

Integrates with CI/CD pipelines for automated mobile app security scanning. REST API enables triggering scans from Jenkins, GitLab CI, or GitHub Actions, embedding security testing into the development workflow automatically.

import requests

api_url = "http://localhost:8000/api/v1/scan"
api_key = "your_api_key_here"

with open("app.apk", "rb") as apk_file:
    files = {"file": apk_file}
    headers = {"Authorization": api_key}
    response = requests.post(api_url, files=files, headers=headers)
    
scan_hash = response.json()["hash"]
print(f"Scan initiated: {scan_hash}")