Mobile-Security-Framework-MobSF

# Mobile Security Framework (MobSF)

![](https://assets.kitploit.com/production/public/readmes/254/541a878ad0eaec0f3fe3aee31a0e841b4b771899b3f686611a1a471a5fbd8960.png)

Mobile Security Framework (MobSF) è una piattaforma di ricerca sulla sicurezza per applicazioni mobili su Android, iOS e Windows Mobile. MobSF può essere utilizzata per vari casi d'uso come la sicurezza delle applicazioni mobili, test di penetrazione, analisi malware e analisi della privacy. L'Analizzatore Statico supporta i binari delle app mobili più comuni come APK, IPA, APPX e codice sorgente. Nel frattempo, l'Analizzatore Dinamico supporta sia applicazioni Android che iOS e offre una piattaforma per test interattivi strumentati, analisi dei dati in esecuzione e del traffico di rete. MobSF si integra perfettamente con il tuo pipeline DevSecOps o CI/CD, facilitato da API REST e strumenti CLI, migliorando il tuo flusso di lavoro di sicurezza con facilità.

Realizzato con ![Love](https://assets.kitploit.com/production/public/readmes/254/b3821ff3e9618f0eddb3e737339f0573d7ab0a2e4a3d0fdccf80925bdd5cf319.png) in India

[![Docker Pulls](https://img.shields.io/docker/pulls/opensecurity/mobile-security-framework-mobsf?style=social)](https://hub.docker.com/r/opensecurity/mobile-security-framework-mobsf/) [![python](https://img.shields.io/badge/python-3.12+-blue.svg?logo=python&labelColor=yellow)](https://www.python.org/downloads/)
[![PyPI version](https://badge.fury.io/py/mobsf.svg)](https://badge.fury.io/py/mobsf)
[![platform](https://img.shields.io/badge/platform-osx/linux/windows-green.svg)](https://github.com/MobSF/Mobile-Security-Framework-MobSF/)
[![License](https://img.shields.io/:license-GPL--3.0--only-blue.svg)](https://www.gnu.org/licenses/gpl-3.0.html)
[![MobSF tests](https://github.com/MobSF/Mobile-Security-Framework-MobSF/workflows/MobSF%20tests/badge.svg?branch=master)](https://github.com/MobSF/Mobile-Security-Framework-MobSF/actions)
[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=MobSF_Mobile-Security-Framework-MobSF&metric=alert_status)](https://sonarcloud.io/dashboard?id=MobSF_Mobile-Security-Framework-MobSF)
![GitHub closed issues](https://img.shields.io/github/issues-closed/MobSF/Mobile-Security-Framework-MobSF)
[![CII Best Practices](https://bestpractices.coreinfrastructure.org/projects/6392/badge)](https://bestpractices.coreinfrastructure.org/projects/6392)


[![ToolsWatch Best Security Tools 2016](https://img.shields.io/badge/ToolsWatch-Rank%205%20%7C%20Year%202016-red.svg)](http://www.toolswatch.org/2017/02/2016-top-security-tools-as-voted-by-toolswatch-org-readers/)
[![ToolsWatch Best Security Tools 2017](https://img.shields.io/badge/ToolsWatch-Rank%209%20%7C%20Year%202017-red.svg)](http://www.toolswatch.org/2018/01/black-hat-arsenal-top-10-security-tools/)
[![Blackhat Arsenal Asia 2015](https://img.shields.io/badge/Black%20Hat%20Arsenal-Asia%202015-blue.svg)](https://www.blackhat.com/asia-15/arsenal.html#yso-mobile-security-framework)
[![Blackhat Arsenal Asia 2018](https://img.shields.io/badge/Black%20Hat%20Arsenal-Asia%202018-blue.svg)](https://www.blackhat.com/asia-18/arsenal.html#mobile-security-framework-mobsf)
[![Blackhat Arsenal Europe 2023](https://img.shields.io/badge/Black%20Hat%20Arsenal-Europe%202023-blue.svg)](https://www.blackhat.com/eu-23/arsenal/schedule/index.html#mobile-security-framework---mobsf-35327)


MobSF è anche incluso in [Android Tamer](https://tamerplatform.com), [BlackArch](https://blackarch.org/mobile.html) e [Pentoo](https://www.pentoo.ch/).

### Supporta MobSF

[![Donate to MobSF](https://assets.kitploit.com/production/public/readmes/254/a5d3a9f892bfdd9758bc098cc1ddfcef8f08727af30b4dc86002b32e43129f9c.png)](https://opensecurity.in/donate)


> MobSF ha fatto la differenza per te? Mostra il tuo supporto e aiutaci a innovare con una donazione. È facile costruire open source, mantenerlo è un'altra storia. 

*Lunga vita all'open source!*

## Documentazione

Configurazione rapida con Docker

```
docker pull opensecurity/mobile-security-framework-mobsf:latest
docker run -it --rm -p 8000:8000 opensecurity/mobile-security-framework-mobsf:latest

# Default username and password: mobsf/mobsf
```

[![Vedi la documentazione di MobSF](https://assets.kitploit.com/production/public/readmes/254/45a2042fb7b69daf114e9f4a980cdf69d841f54e0c4122489c2080d9fe4723a3.png)](https://mobsf.github.io/docs)

* Prova MobSF Static Analyzer Online: [mobsf.live](https://mobsf.live)
* MobSF in CI/CD: [mobsfscan](https://github.com/MobSF/mobsfscan)
* Presentazioni conferenze: [Slide e Video](https://mobsf.github.io/Mobile-Security-Framework-MobSF/presentations.html)
* Corso online MobSF: [OpSecX MAS](https://opsecx.com/index.php/product/automated-mobile-application-security-assessment-with-mobsf/)
* Novità: [Vedi il changelog](https://mobsf.github.io/Mobile-Security-Framework-MobSF/changelog.html)

## Collaboratori

[Ajin Abraham](https://in.linkedin.com/in/ajinabraham) ![india](https://assets.kitploit.com/production/public/readmes/254/2391b58386bbcf27a8c830aaf9a384b6cf39d9a518bf1d27f1425e398a243c62.png)  | [Magaofei](https://github.com/magaofei) ![china](https://assets.kitploit.com/production/public/readmes/254/3fd961c3488fe749ef87d08b90fc5119bedcbf0a5881a3733dc4de025b5dfd25.png) | [Matan Dobrushin](https://github.com/matandobr) ![israel](https://assets.kitploit.com/production/public/readmes/254/c2090205aa987f9f196b428968323172bf819b7a8cdae49fbd5dbe90b24ab458.png) | [Vincent Nadal](https://github.com/superpoussin22) ![france](https://assets.kitploit.com/production/public/readmes/254/2629de759dd340f44743175bb4510aa6d438a37e3d94e079d2aa4e6032f71de9.png)

## Corsi e-Learning e Certificazioni
![Corso MobSF](https://assets.kitploit.com/production/public/readmes/254/3bdb1ea4d2f9965856d06ca0bedb5c06cc5f990158c81ec6af8b4b9fb997d27d.png) [Valutazione Automatizzata della Sicurezza delle Applicazioni Mobili con MobSF - MAS](https://opsecx.com/index.php/product/automated-mobile-application-security-assessment-with-mobsf/)

![Corso Strumenti di Sicurezza Android](https://assets.kitploit.com/production/public/readmes/254/fccfa4a00132110e57be58647d68a2636c5e163d1091549a7f9b277c72516f98.png) [Esperto in Strumenti di Sicurezza Android - ATX](https://opsecx.com/index.php/product/android-security-tools-expert-atx/)

## Supporto MobSF

* **Supporto gratuito:** Supporto limitato gratuito, domande, aiuto e discussioni, unisciti al nostro canale Slack [![Join_MobSF_Slack](https://img.shields.io/badge/mobsf%20slack-join-green?logo=slack&labelColor=4A154B)](https://join.slack.com/t/mobsf/shared_invite/zt-3ephptj6c-OuDMatJ9z9MT0T_Vb~l2pg)
* **Supporto Enterprise:** Richieste di funzionalità prioritarie, supporto live e formazione in loco, vedi [![MobSF Support Packages](https://img.shields.io/badge/enterprise-support%20package-blue?logo=data:image/png;base64,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)](https://opensecurity.in/#support)


## Contributi, Richieste di Funzionalità e Bug

* Leggi [CONTRIBUTING.md](https://github.com/MobSF/Mobile-Security-Framework-MobSF/blob/master/.github/CONTRIBUTING.md) prima di aprire bug, richieste di funzionalità e pull request.
* Per aggiornamenti e annunci del progetto, segui [@ajinabraham](https://twitter.com/ajinabraham) o [@OpenSecurity_IN](https://twitter.com/OpenSecurity_IN).
* Le Issues di GitHub sono solo per tracciare bug e richieste di funzionalità. Non pubblicare richieste di supporto o aiuto lì. Abbiamo un canale Slack per quello.

### Analisi Statica - Android

![mobsf_android_static_analysis](https://assets.kitploit.com/production/public/readmes/254/92b140f8f5cb47582243fd0bd4b6755f5b899b1be5c65be3e3cc108a5d0c5c58.gif)

### Analisi Statica - iOS

![mobsf_ios_ipa_static_analysis](https://assets.kitploit.com/production/public/readmes/254/6a823f05300f4f8b751603dd79de2f32a5718752a40ce9c9ece8da96c7886773.gif)

### Analisi Dinamica - Android APK

![mobsf_android_dynamic_analysis](https://assets.kitploit.com/production/public/readmes/254/c4ccf45e28284e885ab842cefd0db365e5a11fd77466452c4f5a9bf7f6b6693a.gif)

### Visualizzatore API Web

![mobsf_web_api_fuzzing_with_burp](https://assets.kitploit.com/production/public/readmes/254/4f6344f80318e6a01e9fccd69a64f87c91acea6a765c05a9cef6604de46b8114.gif)

### Analisi Dinamica - iOS IPA

![mobsf_ios_dynamic_analysis](https://assets.kitploit.com/production/public/readmes/254/9a5d69269a242d58b814c6e6666689970484e86505999c759ba2aca6e13ae4e8.gif)

## Ex Collaboratori

* [Dominik Schlecht](https://github.com/sn0b4ll) ![germany](https://assets.kitploit.com/production/public/readmes/254/3f8384a63bb1864db0f883baf0159573ffe7d7e2107ad736423869260cc51262.png)

## Collaboratori Onorevoli e Ringraziamenti

* Amrutha VC - Per il nuovo logo di MobSF
* Dominik Schlecht - Per l'ottimo lavoro nell'aggiunta dell'analisi statica delle app Windows Phone a MobSF
* Esteban - Miglioramento dell'analisi del manifest Android e dell'analisi statica.
* Matan Dobrushin - Per l'aggiunta del supporto dell'emulatore ARM Android a MobSF - Un ringraziamento speciale a cuckoo-droid
* Shuxin - Analisi binaria Android
* Abhinav Saxena - (@xandfury) - Per l'integrazione di Travis CI e del logging
* ![netguru](https://assets.kitploit.com/production/public/readmes/254/24229929fa3d04b8a3b273987f364dc9a24591539386a530a96a22102aa40eb9.png) [Netguru](https://www.netguru.com/) (@karolpiateknet, @mtbrzeski) - Per il supporto di iOS Swift, contributi di regole e refactoring SAST.
* Maxime Fawe - (@Arenash13) - Per l'implementazione della Matching Strategy degli algoritmi di pattern matching SAST.
* Abhinav Sejpal (@Abhinav_Sejpal) - Per avermi stimolato con bug, richieste di funzionalità e suggerimenti UI & UX
* Anant Srivastava (@anantshri) - Per l'idea di Activity Tester
* Anto Joseph (@antojoseph) - Per l'aiuto con SuperSU
* Bharadwaj Machiraju (@tunnelshade) - Per aver scritto pyWebProxy da zero
* Rahul (@c0dist) - Supporto Kali
* MindMac - Per aver scritto Android Blue Pill
* Oscar Alfonso Diaz - (@OscarAkaElvis) - Per i contributi al Dockerfile
* Thomas Abraham - Per gli hack JS nell'interfaccia utente
* Tim Brown (@timb_machine) - Per le regole di analisi binaria iOS
* Shanil Prasad (@Rajuraju14) - Per il miglioramento dell'analisi ATS iOS
* Jovan Petrovic (@JovanPetrovic) - Per aver sponsorizzato un server per ospitare mobsf.live