MobSF 框架 安装及使用

移动安全框架(MobSF)是一种自动、一体化的移动应用(Android / iOS / Windows)静态和动态分析的测试,恶意软件分析和安全评估框架。

https://github.com/MobSF/Mobile-Security-Framework-MobSF

安装

环境依赖

安装命令

git clone https://github.com/MobSF/Mobile-Security-Framework-MobSF.git
cd Mobile-Security-Framework-MobSF
setup.bat

使用

[INFO] 28/Mar/2020 10:10:21 -
  __  __       _    ____  _____       
 |  \/  | ___ | |__/ ___||  ___| 
 | |\/| |/ _ \| '_ \___ \| |_    
 | |  | | (_) | |_) |__) |  _|    
 |_|  |_|\___/|_.__/____/|_|     

[INFO] 28/Mar/2020 10:10:21 - Mobile Security Framework 
REST API Key: 651111c53053477a433b9fd01009f92fd27b940e6645661ccd3f1ed83b4b5fcd
[INFO] 28/Mar/2020 10:10:21 - OS: Windows
[INFO] 28/Mar/2020 10:10:21 - Platform: Windows-10-10.0.22000-SP0
[INFO] 28/Mar/2020 10:10:21 - Dist:
[INFO] 28/Mar/2020 10:10:21 - MobSF Basic Environment Check

运行

run.bat 127.0.0.1:8000

Untitled

命令行中可查看进度

Untitled

静态分析

Untitled

动态分析

安装VirturalBox https://www.virtualbox.org/wiki/Downloads

Genymotion https://www.genymotion.com/download/

账号[boypuoym@chapedia.org](mailto:boypuoym@chapedia.org)密码[boypuoym@chapedia.org](mailto:boypuoym@chapedia.org)

Untitled

需要在 <user_home_dir>/.MobSF/config.py 中手动配置 ANALYZER_IDENTIFIER

ANALYZER_IDENTIFIER = '192.168.56.101:5555'. 你可以从Genymotion标题栏中找到Android设备IP,默认端口为“ 5555”。

此处由于虚拟机安装,更换为雷电模拟器,调用adb

comments powered by Disqus