Mobile-Security-Framework-MobSF

# 모바일 보안 프레임워크 (MobSF)

![](https://assets.kitploit.com/production/public/readmes/254/541a878ad0eaec0f3fe3aee31a0e841b4b771899b3f686611a1a471a5fbd8960.png)

모바일 보안 프레임워크(MobSF)는 Android, iOS 및 Windows Mobile 플랫폼의 모바일 애플리케이션을 위한 보안 연구 플랫폼입니다. MobSF는 모바일 애플리케이션 보안, 침투 테스트, 악성코드 분석 및 개인정보 분석과 같은 다양한 사용 사례에 활용될 수 있습니다. 정적 분석기는 APK, IPA, APPX 및 소스 코드와 같은 널리 사용되는 모바일 앱 바이너리를 지원합니다. 한편 동적 분석기는 Android 및 iOS 애플리케이션을 모두 지원하며, 대화형 계측 테스트, 런타임 데이터 및 네트워크 트래픽 분석을 위한 플랫폼을 제공합니다. MobSF는 REST API 및 CLI 도구를 통해 DevSecOps 또는 CI/CD 파이프라인과 원활하게 통합되어 보안 워크플로우를 쉽게 개선합니다.

![Love](https://assets.kitploit.com/production/public/readmes/254/b3821ff3e9618f0eddb3e737339f0573d7ab0a2e4a3d0fdccf80925bdd5cf319.png)와 함께 인도에서 제작되었습니다

[![Docker Pulls](https://img.shields.io/docker/pulls/opensecurity/mobile-security-framework-mobsf?style=social)](https://hub.docker.com/r/opensecurity/mobile-security-framework-mobsf/) [![python](https://img.shields.io/badge/python-3.12+-blue.svg?logo=python&labelColor=yellow)](https://www.python.org/downloads/)
[![PyPI version](https://badge.fury.io/py/mobsf.svg)](https://badge.fury.io/py/mobsf)
[![platform](https://img.shields.io/badge/platform-osx/linux/windows-green.svg)](https://github.com/MobSF/Mobile-Security-Framework-MobSF/)
[![License](https://img.shields.io/:license-GPL--3.0--only-blue.svg)](https://www.gnu.org/licenses/gpl-3.0.html)
[![MobSF tests](https://github.com/MobSF/Mobile-Security-Framework-MobSF/workflows/MobSF%20tests/badge.svg?branch=master)](https://github.com/MobSF/Mobile-Security-Framework-MobSF/actions)
[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=MobSF_Mobile-Security-Framework-MobSF&metric=alert_status)](https://sonarcloud.io/dashboard?id=MobSF_Mobile-Security-Framework-MobSF)
![GitHub closed issues](https://img.shields.io/github/issues-closed/MobSF/Mobile-Security-Framework-MobSF)
[![CII Best Practices](https://bestpractices.coreinfrastructure.org/projects/6392/badge)](https://bestpractices.coreinfrastructure.org/projects/6392)


[![ToolsWatch Best Security Tools 2016](https://img.shields.io/badge/ToolsWatch-Rank%205%20%7C%20Year%202016-red.svg)](http://www.toolswatch.org/2017/02/2016-top-security-tools-as-voted-by-toolswatch-org-readers/)
[![ToolsWatch Best Security Tools 2017](https://img.shields.io/badge/ToolsWatch-Rank%209%20%7C%20Year%202017-red.svg)](http://www.toolswatch.org/2018/01/black-hat-arsenal-top-10-security-tools/)
[![Blackhat Arsenal Asia 2015](https://img.shields.io/badge/Black%20Hat%20Arsenal-Asia%202015-blue.svg)](https://www.blackhat.com/asia-15/arsenal.html#yso-mobile-security-framework)
[![Blackhat Arsenal Asia 2018](https://img.shields.io/badge/Black%20Hat%20Arsenal-Asia%202018-blue.svg)](https://www.blackhat.com/asia-18/arsenal.html#mobile-security-framework-mobsf)
[![Blackhat Arsenal Europe 2023](https://img.shields.io/badge/Black%20Hat%20Arsenal-Europe%202023-blue.svg)](https://www.blackhat.com/eu-23/arsenal/schedule/index.html#mobile-security-framework---mobsf-35327)


MobSF는 또한 [Android Tamer](https://tamerplatform.com), [BlackArch](https://blackarch.org/mobile.html) 및 [Pentoo](https://www.pentoo.ch/)와 함께 번들로 제공됩니다.

### MobSF 지원

[![Donate to MobSF](https://assets.kitploit.com/production/public/readmes/254/a5d3a9f892bfdd9758bc098cc1ddfcef8f08727af30b4dc86002b32e43129f9c.png)](https://opensecurity.in/donate)


> MobSF가 여러분에게 도움이 되었나요? 기부를 통해 지원을 보여주시고 혁신에 도움을 주세요. 오픈소스를 구축하는 것은 쉽지만, 유지보수는 별개의 이야기입니다. 

*오픈소스 만세!*

## 문서

Docker를 통한 빠른 설정

```
docker pull opensecurity/mobile-security-framework-mobsf:latest
docker run -it --rm -p 8000:8000 opensecurity/mobile-security-framework-mobsf:latest

# Default username and password: mobsf/mobsf
```

[![See MobSF Documentation](https://assets.kitploit.com/production/public/readmes/254/45a2042fb7b69daf114e9f4a980cdf69d841f54e0c4122489c2080d9fe4723a3.png)](https://mobsf.github.io/docs)

* MobSF 정적 분석기 온라인 사용해보기: [mobsf.live](https://mobsf.live)
* CI/CD에서 MobSF: [mobsfscan](https://github.com/MobSF/mobsfscan)
* 컨퍼런스 발표 자료: [슬라이드 및 동영상](https://mobsf.github.io/Mobile-Security-Framework-MobSF/presentations.html)
* MobSF 온라인 강좌: [OpSecX MAS](https://opsecx.com/index.php/product/automated-mobile-application-security-assessment-with-mobsf/)
* 새로운 기능: [변경 로그 보기](https://mobsf.github.io/Mobile-Security-Framework-MobSF/changelog.html)

## 협력자

[Ajin Abraham](https://in.linkedin.com/in/ajinabraham) ![india](https://assets.kitploit.com/production/public/readmes/254/2391b58386bbcf27a8c830aaf9a384b6cf39d9a518bf1d27f1425e398a243c62.png)  | [Magaofei](https://github.com/magaofei) ![china](https://assets.kitploit.com/production/public/readmes/254/3fd961c3488fe749ef87d08b90fc5119bedcbf0a5881a3733dc4de025b5dfd25.png) | [Matan Dobrushin](https://github.com/matandobr) ![israel](https://assets.kitploit.com/production/public/readmes/254/c2090205aa987f9f196b428968323172bf819b7a8cdae49fbd5dbe90b24ab458.png) | [Vincent Nadal](https://github.com/superpoussin22) ![france](https://assets.kitploit.com/production/public/readmes/254/2629de759dd340f44743175bb4510aa6d438a37e3d94e079d2aa4e6032f71de9.png)

## e-러닝 강좌 및 자격증
![MobSF Course](https://assets.kitploit.com/production/public/readmes/254/3bdb1ea4d2f9965856d06ca0bedb5c06cc5f990158c81ec6af8b4b9fb997d27d.png) [MobSF를 이용한 자동화된 모바일 애플리케이션 보안 평가 -MAS](https://opsecx.com/index.php/product/automated-mobile-application-security-assessment-with-mobsf/)

![Android Security Tools Course](https://assets.kitploit.com/production/public/readmes/254/fccfa4a00132110e57be58647d68a2636c5e163d1091549a7f9b277c72516f98.png) [Android 보안 도구 전문가 -ATX](https://opsecx.com/index.php/product/android-security-tools-expert-atx/)

## MobSF 지원

* **무료 지원:** 무료 제한 지원, 질문, 도움 및 토론, Slack 채널 참여 [![Join_MobSF_Slack](https://img.shields.io/badge/mobsf%20slack-join-green?logo=slack&labelColor=4A154B)](https://join.slack.com/t/mobsf/shared_invite/zt-3ephptj6c-OuDMatJ9z9MT0T_Vb~l2pg)
* **엔터프라이즈 지원:** 우선 기능 요청, 실시간 지원 및 현장 교육, 참조 [![MobSF Support Packages](https://img.shields.io/badge/enterprise-support%20package-blue?logo=data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAGMAAABaCAMAAACbkBjCAAAAAXNSR0IB2cksfwAAAAlwSFlzAAALEwAACxMBAJqcGAAAAkNQTFRFAAAA////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////o1yoNQAAAMF0Uk5TAAQ1YH6IXzYFAUqq9P/1rU4CPdHWQ4X+jgOkro+hVWYR6vIajJvz+XN/z9sjLW6lrNPX+PsGHyE5TE9XWV1hW0k6LC7hs7SEhgr2sGRiFBCXJf38sgwOtmpoIiDf68vSGS+Z9yeR70RNvUEVfOa/WgdCR8XuUeeA8Du7Vporrx66SwlcqWV92g2HY+2Ki/GQJjxpM8TVcIGodjJ3ybETJOjUyiop4sxYkkVSGJ/pD6cdwlTOHNnIZ+B13bXkKL7NMOC0/xQAAAPPSURBVHic7dn5PxVRFADwY0sPN0t4Uj0vLQq9lkelRVFRKklZs+RRiiTtSbRoD9GuhdK+Ky3S9qf1Zu68bczcO5rjhz4f5yfnOud9mTszd+Y+gLH4f8PL28fXz893nP/4UQIMAYFBRIoJwSGho0CETSQeER6BLYRGGoksjFGTcIlouSDEZNRpmaJEEDIVkTApE4TEoBHmaWpG7HQsY4YaQchMJMI8S92IQ/pHZqsThMzBMeJZRgIKkcgiCJmLYcSwDQuGMY9tzMcwFrCNhQiEl5VtJCXrNxaxCUIW6zf8ecYS/UYKz1iq31jGM5brN1bwDB/9RirPQFhDuMdqpX5jFc9I0W+k8Yww/UY6z1it3zDzDLN+A9awiTUIBKxlGxkYRibbWIdhLGUbCLcrgPUTWETWegyDPSEbUAjYyDI24RjZWepE7GYcA3LUjSlIBGzJVSO2JmIZsG2UZ1wI1TUEYZ11RJ7KrFvz8Qy1S6QAkYBCZaMI0yhWNrZjGlCiRJSiElCmZJSPGWOGrtiheKFjGhW2yiVVO+XL+i6bz9pqHCB09x77B9YA1O6tcwHGffX7oYGQsnr9+2R5MeHiZx4QkmTTQSocsqUL+WHh5yNHs3UJxVHHpL87RBo5HphkbDwhvS770N9lNZ38Z6Gm2bXGmpyjLa7l1eI8cqdO/8tW7JmNHnutZ6XhtJzA1nOOx7bzbgUXLBdHKLRcKvU8iS4Lo2YL3de4cpXe1Ns8Sto7ro1A6AxMkl8KXQDXbc5tapLbuNsA0CSvumHy0gTkF96Ut9rjFtyWjRwFuDO8ruRuLVfoblLePLwH4bKRmwAFSpXW6E4WYC66rwjYw3fYY8MDgIMqxeWWh8qAobq1Uk0gJBJ6ej0GensAHqmWW1urDQoH6bE6YI82gD53pPeJvecpq+OZt5x4ztkJewEeSG+f0NTObIlL9SReDjtZZWEDd4QSoaqP2jRyX7kTr49wCPJGrKuqE5O34h0R3vGaYqvcjAxeNXlPC+k7biZNPnC7+l1EA7eYBNPKVjG5QxPuLgchH51GP79YetP/JCbxNDnOb5voIE7ya0kjvYboTSCInvsBGvocG5odGmrpkR2QsgF6vmvos0nGZw21X8TKCClrELOvGvq+UYK7SSwEnYIiKesSs0EtjXSl6dZSGi6WOr5ei3I7kTnRrd34LpYOSdmQmL1ANn6IpQlSRr+8mYpsiK9MyY672lbx4acZ2WgXKp84059C+gvZsAqVrt0ycWPsN7JhNHicrIPus6PBMJu0hPAcWOHM/giNKVr6zDAWI4i/nmw15nhs85kAAAAASUVORK5CYII=)](https://opensecurity.in/#support)


## 기여, 기능 요청 및 버그

* 버그, 기능 요청 및 풀 리퀘스트를 열기 전에 [CONTRIBUTING.md](https://github.com/MobSF/Mobile-Security-Framework-MobSF/blob/master/.github/CONTRIBUTING.md)를 읽어주세요.
* 프로젝트 업데이트 및 공지사항은 [@ajinabraham](https://twitter.com/ajinabraham) 또는 [@OpenSecurity_IN](https://twitter.com/OpenSecurity_IN)을 팔로우하세요.
* GitHub 이슈는 버그 및 기능 요청 추적 전용입니다. 지원이나 도움 질문을 게시하지 마십시오. 이를 위한 Slack 채널이 있습니다.

### 정적 분석 - Android

![mobsf_android_static_analysis](https://assets.kitploit.com/production/public/readmes/254/92b140f8f5cb47582243fd0bd4b6755f5b899b1be5c65be3e3cc108a5d0c5c58.gif)

### 정적 분석 - iOS

![mobsf_ios_ipa_static_analysis](https://assets.kitploit.com/production/public/readmes/254/6a823f05300f4f8b751603dd79de2f32a5718752a40ce9c9ece8da96c7886773.gif)

### 동적 분석 - Android APK

![mobsf_android_dynamic_analysis](https://assets.kitploit.com/production/public/readmes/254/c4ccf45e28284e885ab842cefd0db365e5a11fd77466452c4f5a9bf7f6b6693a.gif)

### 웹 API 뷰어

![mobsf_web_api_fuzzing_with_burp](https://assets.kitploit.com/production/public/readmes/254/4f6344f80318e6a01e9fccd69a64f87c91acea6a765c05a9cef6604de46b8114.gif)

### 동적 분석 - iOS IPA

![mobsf_ios_dynamic_analysis](https://assets.kitploit.com/production/public/readmes/254/9a5d69269a242d58b814c6e6666689970484e86505999c759ba2aca6e13ae4e8.gif)

## 이전 협력자

* [Dominik Schlecht](https://github.com/sn0b4ll) ![germany](https://assets.kitploit.com/production/public/readmes/254/3f8384a63bb1864db0f883baf0159573ffe7d7e2107ad736423869260cc51262.png)

## 명예로운 기여자 및 감사 인사

* Amrutha VC - 새로운 MobSF 로고 제작
* Dominik Schlecht - MobSF에 Windows Phone 앱 정적 분석 추가를 위한 훌륭한 작업
* Esteban - 향상된 Android Manifest 분석 및 정적 분석 개선
* Matan Dobrushin - MobSF에 Android ARM 에뮬레이터 지원 추가 - cuckoo-droid에 특별 감사
* Shuxin - Android 바이너리 분석
* Abhinav Saxena - (@xandfury) - Travis CI 및 로깅 통합
* ![netguru](https://assets.kitploit.com/production/public/readmes/254/24229929fa3d04b8a3b273987f364dc9a24591539386a530a96a22102aa40eb9.png) [Netguru](https://www.netguru.com/) (@karolpiateknet, @mtbrzeski) - iOS Swift 지원, 규칙 기여 및 SAST 리팩토링
* Maxime Fawe - (@Arenash13) - SAST 패턴 매칭 알고리즘의 매칭 전략 구현
* Abhinav Sejpal (@Abhinav_Sejpal) - 버그, 기능 요청 및 UI/UX 제안으로 저를 계속 자극해줌
* Anant Srivastava (@anantshri) - Activity Tester 아이디어 제공
* Anto Joseph (@antojoseph) - SuperSU 관련 도움
* Bharadwaj Machiraju (@tunnelshade) - pyWebProxy를 처음부터 작성
* Rahul (@c0dist) - Kali 지원
* MindMac - Android Blue Pill 작성
* Oscar Alfonso Diaz - (@OscarAkaElvis) - Dockerfile 기여
* Thomas Abraham - UI의 JS 해킹
* Tim Brown (@timb_machine) - iOS 바이너리 분석 규칙 세트
* Shanil Prasad (@Rajuraju14) - iOS ATS 분석 개선
* Jovan Petrovic (@JovanPetrovic) - mobsf.live 호스팅 서버 후원