Mobile-Security-Framework-MobSF

# Mobile Security Framework (MobSF)

![](https://assets.kitploit.com/production/public/readmes/254/541a878ad0eaec0f3fe3aee31a0e841b4b771899b3f686611a1a471a5fbd8960.png)

O Mobile Security Framework (MobSF) é uma plataforma de pesquisa em segurança para aplicativos móveis em Android, iOS e Windows Mobile. O MobSF pode ser usado para vários casos de uso, como segurança de aplicativos móveis, testes de penetração, análise de malware e análise de privacidade. O Analisador Estático oferece suporte a binários populares de aplicativos móveis como APK, IPA, APPX e código fonte. Enquanto isso, o Analisador Dinâmico suporta aplicativos Android e iOS e oferece uma plataforma para testes instrumentados interativos, análise de dados em tempo de execução e tráfego de rede. O MobSF integra-se perfeitamente ao seu pipeline DevSecOps ou CI/CD, facilitado por APIs REST e ferramentas de linha de comando, melhorando seu fluxo de trabalho de segurança com facilidade.

Feito com ![Amor](https://assets.kitploit.com/production/public/readmes/254/b3821ff3e9618f0eddb3e737339f0573d7ab0a2e4a3d0fdccf80925bdd5cf319.png) na Índia

[![Docker Pulls](https://img.shields.io/docker/pulls/opensecurity/mobile-security-framework-mobsf?style=social)](https://hub.docker.com/r/opensecurity/mobile-security-framework-mobsf/) [![python](https://img.shields.io/badge/python-3.12+-blue.svg?logo=python&labelColor=yellow)](https://www.python.org/downloads/)
[![PyPI version](https://badge.fury.io/py/mobsf.svg)](https://badge.fury.io/py/mobsf)
[![platform](https://img.shields.io/badge/platform-osx/linux/windows-green.svg)](https://github.com/MobSF/Mobile-Security-Framework-MobSF/)
[![License](https://img.shields.io/:license-GPL--3.0--only-blue.svg)](https://www.gnu.org/licenses/gpl-3.0.html)
[![MobSF tests](https://github.com/MobSF/Mobile-Security-Framework-MobSF/workflows/MobSF%20tests/badge.svg?branch=master)](https://github.com/MobSF/Mobile-Security-Framework-MobSF/actions)
[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=MobSF_Mobile-Security-Framework-MobSF&metric=alert_status)](https://sonarcloud.io/dashboard?id=MobSF_Mobile-Security-Framework-MobSF)
![GitHub closed issues](https://img.shields.io/github/issues-closed/MobSF/Mobile-Security-Framework-MobSF)
[![CII Best Practices](https://bestpractices.coreinfrastructure.org/projects/6392/badge)](https://bestpractices.coreinfrastructure.org/projects/6392)


[![ToolsWatch Best Security Tools 2016](https://img.shields.io/badge/ToolsWatch-Rank%205%20%7C%20Year%202016-red.svg)](http://www.toolswatch.org/2017/02/2016-top-security-tools-as-voted-by-toolswatch-org-readers/)
[![ToolsWatch Best Security Tools 2017](https://img.shields.io/badge/ToolsWatch-Rank%209%20%7C%20Year%202017-red.svg)](http://www.toolswatch.org/2018/01/black-hat-arsenal-top-10-security-tools/)
[![Blackhat Arsenal Asia 2015](https://img.shields.io/badge/Black%20Hat%20Arsenal-Asia%202015-blue.svg)](https://www.blackhat.com/asia-15/arsenal.html#yso-mobile-security-framework)
[![Blackhat Arsenal Asia 2018](https://img.shields.io/badge/Black%20Hat%20Arsenal-Asia%202018-blue.svg)](https://www.blackhat.com/asia-18/arsenal.html#mobile-security-framework-mobsf)
[![Blackhat Arsenal Europe 2023](https://img.shields.io/badge/Black%20Hat%20Arsenal-Europe%202023-blue.svg)](https://www.blackhat.com/eu-23/arsenal/schedule/index.html#mobile-security-framework---mobsf-35327)


O MobSF também é fornecido com [Android Tamer](https://tamerplatform.com), [BlackArch](https://blackarch.org/mobile.html) e [Pentoo](https://www.pentoo.ch/).

### Apoie o MobSF

[![Doar para o MobSF](https://assets.kitploit.com/production/public/readmes/254/a5d3a9f892bfdd9758bc098cc1ddfcef8f08727af30b4dc86002b32e43129f9c.png)](https://opensecurity.in/donate)


> O MobSF fez diferença para você? Mostre seu apoio e nos ajude a inovar com uma doação. É fácil construir código aberto, mantê-lo é uma história diferente. 

*Vida longa ao código aberto!*

## Documentação

Configuração rápida com Docker

```
docker pull opensecurity/mobile-security-framework-mobsf:latest
docker run -it --rm -p 8000:8000 opensecurity/mobile-security-framework-mobsf:latest

# Default username and password: mobsf/mobsf
```

[![Veja a Documentação do MobSF](https://assets.kitploit.com/production/public/readmes/254/45a2042fb7b69daf114e9f4a980cdf69d841f54e0c4122489c2080d9fe4723a3.png)](https://mobsf.github.io/docs)

* Experimente o Analisador Estático do MobSF Online: [mobsf.live](https://mobsf.live)
* MobSF em CI/CD: [mobsfscan](https://github.com/MobSF/mobsfscan)
* Apresentações em Conferências: [Slides e Vídeos](https://mobsf.github.io/Mobile-Security-Framework-MobSF/presentations.html)
* Curso Online MobSF: [OpSecX MAS](https://opsecx.com/index.php/product/automated-mobile-application-security-assessment-with-mobsf/)
* O que há de novo: [Veja o Changelog](https://mobsf.github.io/Mobile-Security-Framework-MobSF/changelog.html)

## Colaboradores

[Ajin Abraham](https://in.linkedin.com/in/ajinabraham) ![india](https://assets.kitploit.com/production/public/readmes/254/2391b58386bbcf27a8c830aaf9a384b6cf39d9a518bf1d27f1425e398a243c62.png)  | [Magaofei](https://github.com/magaofei) ![china](https://assets.kitploit.com/production/public/readmes/254/3fd961c3488fe749ef87d08b90fc5119bedcbf0a5881a3733dc4de025b5dfd25.png) | [Matan Dobrushin](https://github.com/matandobr) ![israel](https://assets.kitploit.com/production/public/readmes/254/c2090205aa987f9f196b428968323172bf819b7a8cdae49fbd5dbe90b24ab458.png) | [Vincent Nadal](https://github.com/superpoussin22) ![france](https://assets.kitploit.com/production/public/readmes/254/2629de759dd340f44743175bb4510aa6d438a37e3d94e079d2aa4e6032f71de9.png)

## Cursos e Certificações de e-Learning
![Curso MobSF](https://assets.kitploit.com/production/public/readmes/254/3bdb1ea4d2f9965856d06ca0bedb5c06cc5f990158c81ec6af8b4b9fb997d27d.png) [Automated Mobile Application Security Assessment with MobSF -MAS](https://opsecx.com/index.php/product/automated-mobile-application-security-assessment-with-mobsf/)

![Curso Android Security Tools](https://assets.kitploit.com/production/public/readmes/254/fccfa4a00132110e57be58647d68a2636c5e163d1091549a7f9b277c72516f98.png) [Android Security Tools Expert -ATX](https://opsecx.com/index.php/product/android-security-tools-expert-atx/)

## Suporte do MobSF

* **Suporte Gratuito:** Suporte gratuito limitado, perguntas, ajuda e discussões, entre no nosso canal do Slack [![Join_MobSF_Slack](https://img.shields.io/badge/mobsf%20slack-join-green?logo=slack&labelColor=4A154B)](https://join.slack.com/t/mobsf/shared_invite/zt-3ephptj6c-OuDMatJ9z9MT0T_Vb~l2pg)
* **Suporte Empresarial:** Solicitações de recursos prioritárias, suporte ao vivo e treinamento no local, veja [![MobSF Support Packages](https://img.shields.io/badge/enterprise-support%20package-blue?logo=data:image/png;base64,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)](https://opensecurity.in/#support)


## Contribuição, Solicitações de Recursos e Bugs

* Leia [CONTRIBUTING.md](https://github.com/MobSF/Mobile-Security-Framework-MobSF/blob/master/.github/CONTRIBUTING.md) antes de abrir bugs, solicitações de recursos e pull requests.
* Para atualizações do projeto e anúncios, siga [@ajinabraham](https://twitter.com/ajinabraham) ou [@OpenSecurity_IN](https://twitter.com/OpenSecurity_IN).
* Issues do Github são apenas para rastrear bugs e solicitações de recursos. Não poste perguntas de suporte ou ajuda lá. Temos um canal no Slack para isso.

### Análise Estática - Android

![mobsf_android_static_analysis](https://assets.kitploit.com/production/public/readmes/254/92b140f8f5cb47582243fd0bd4b6755f5b899b1be5c65be3e3cc108a5d0c5c58.gif)

### Análise Estática - iOS

![mobsf_ios_ipa_static_analysis](https://assets.kitploit.com/production/public/readmes/254/6a823f05300f4f8b751603dd79de2f32a5718752a40ce9c9ece8da96c7886773.gif)

### Análise Dinâmica - Android APK

![mobsf_android_dynamic_analysis](https://assets.kitploit.com/production/public/readmes/254/c4ccf45e28284e885ab842cefd0db365e5a11fd77466452c4f5a9bf7f6b6693a.gif)

### Visualizador de API Web

![mobsf_web_api_fuzzing_with_burp](https://assets.kitploit.com/production/public/readmes/254/4f6344f80318e6a01e9fccd69a64f87c91acea6a765c05a9cef6604de46b8114.gif)

### Análise Dinâmica - iOS IPA

![mobsf_ios_dynamic_analysis](https://assets.kitploit.com/production/public/readmes/254/9a5d69269a242d58b814c6e6666689970484e86505999c759ba2aca6e13ae4e8.gif)

## Colaboradores Anteriores

* [Dominik Schlecht](https://github.com/sn0b4ll) ![germany](https://assets.kitploit.com/production/public/readmes/254/3f8384a63bb1864db0f883baf0159573ffe7d7e2107ad736423869260cc51262.png)

## Contribuidores Honorários e Agradecimentos

* Amrutha VC - Pelo novo logotipo do MobSF
* Dominik Schlecht - Pelo trabalho incrível ao adicionar Análise Estática de Aplicativos do Windows Phone ao MobSF
* Esteban - Melhor Análise de Manifesto Android e Melhoria da Análise Estática.
* Matan Dobrushin - Por adicionar suporte ao emulador Android ARM ao MobSF - Agradecimento especial ao cuckoo-droid
* Shuxin - Análise Binária Android
* Abhinav Saxena - (@xandfury) - Pela integração do Travis CI e Logging
* ![netguru](https://assets.kitploit.com/production/public/readmes/254/24229929fa3d04b8a3b273987f364dc9a24591539386a530a96a22102aa40eb9.png) [Netguru](https://www.netguru.com/) (@karolpiateknet, @mtbrzeski) - Pelo suporte a iOS Swift, contribuições de regras e refatoração SAST.
* Maxime Fawe - (@Arenash13) - Pela implementação da Matching Strategy dos algoritmos de correspondência de padrões SAST.
* Abhinav Sejpal (@Abhinav_Sejpal) - Por me cutucar com bugs, solicitações de recursos e sugestões de UI & UX
* Anant Srivastava (@anantshri) - Pela ideia do Activity Tester
* Anto Joseph (@antojoseph) - Pela ajuda com o SuperSU
* Bharadwaj Machiraju (@tunnelshade) - Por escrever pyWebProxy do zero
* Rahul (@c0dist) - Suporte Kali
* MindMac - Por escrever Android Blue Pill
* Oscar Alfonso Diaz - (@OscarAkaElvis) - Por contribuições ao Dockerfile
* Thomas Abraham - Por hacks de JS na interface do usuário
* Tim Brown (@timb_machine) - Pelo conjunto de regras de Análise Binária iOS
* Shanil Prasad (@Rajuraju14) - Por melhorar a Análise ATS do iOS
* Jovan Petrovic (@JovanPetrovic) - Por patrocinar um servidor para hospedar mobsf.live