Scanning Mobile Apps with MobSF

In this video, I go over the Mobile Security Framework, aka MobSF. This a free and open source tool that be used to automate a lot of the preliminary analysis that you might be doing manually when performing a security assessment on an Android or iOS application.
You can check out an online demo of MobSF here:
mobsf.live/
And if you want to install MobSF yourself, their GitHub is here:
github.com/MobSF/Mobile-Secur...
Check out my new website:
corsecure.blog
Use my referral link to sign up for TryHackMe:
tryhackme.com/signup?referrer...

[@wareeq]

Bro, I love your work.

[@wardellcastles]

Huge fan of MobSF. It's a lot easier to use now that there's a Docker implementation. Ajin is very responsive in the MobSF Slack Channel.

[@mic2838]

Thanks for video but we are looking into more detailed video on static part. These api keys how we can exploit it, and any vulnerable function or method is used then how to report because sometime developer are not ready to accept that vulnerable function is being used.

[@cmosses]

What are the better enterprise tools?

[@CorSecure]

Here's a list from Gartner with several tools listed: www.gartner.com/reviews/market/mobile-application-security-testing I have only used a couple of those, so I can't really vouch for which ones are better than others though.