mobsf

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

Work in progress...

Work in progress...

Android Security Resources.

Modern offline-first Application Security Intelligence Platform for Android, iOS, Flutter and React Native with attack-chain analysis, explainable findings, source exploration, AI-assisted investigation and professional reporting.

A curated list of awesome malware analysis tools and resources

Scripts to set up your own Android 📱 app hacking lab

Easy to use APK/IPA Mobile App Inspector

All that is required to run MobSF in the ci

MobSF Documentation

MobSF related Presentations, Slides and Others.

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing

Android APK static analysis pipeline with a Claude agentic triage layer — APKLeaks + JADX + MobSF → severity-ranked report

A dual platform static vulnerability scanner.

Run repeatable APK security checks without juggling tools. This n8n workflow automation scans Android APKs with MobSF, uses AI to summarize risks into a readable PDF report and stores it in Google Drive for audits and sharing. A security-focused n8n workflow template for AppSec, compliance and release readiness.

Self-contained Mobile & IoT SAST/DAST/pentest toolkit: MobSF + Frida + objection + mitmproxy + rooted emulator, as a desktop app, CLI and MCP server.

AI-powered Android APK malware analyzer — combines MobSF static analysis, VirusTotal threat intel, and GPT-4o-mini to decompile APKs, extract suspicious Java code, and explain exactly what malicious functions do in plain English. Built with FastAPI + React.

Mobile Security, MobSF, OWASP: Analyzing Android APK and iOS IPA packages through static analysis to uncover insecure configurations, exposed components, and hardcoded secrets.

Android malware analysis using static and dynamic techniques with MobSF and Metasploit

Just tell me if it's dodgy! — MobSF + APKiD + Quark-Engine + AI APK security analysis orchestrator