Repolode
Submit
MobSF

MobSF/Mobile-Security-Framework-MobSF

Open-source all-in-one framework for static and dynamic security analysis, pen-testing and malware analysis of Android, iOS and Windows mobile apps.

View on GitHubWebsite
Stars
22,153
Forks
3,803
Open issues
3
Last commit
yesterday

What is it?

MobSF is a security research platform for mobile applications on Android, iOS and Windows Mobile. It is used for mobile application security testing, penetration testing, malware analysis and privacy analysis.

The static analyzer accepts APK, IPA, APPX and source code. The dynamic analyzer supports Android and iOS apps and provides an interactive instrumented testing environment with runtime data and network traffic analysis. It exposes REST APIs and CLI tools so it can be wired into DevSecOps and CI/CD pipelines.

MobSF can be run quickly with Docker, and the project provides a web interface for uploading and reviewing results.

Key features

  • 01Static analysis of APK, IPA, APPX and source code
  • 02Dynamic analysis of Android and iOS apps with runtime and network traffic inspection
  • 03REST APIs and CLI tools for pipeline integration
  • 04Docker image for quick setup

Use cases

  • Security teams performing penetration tests on mobile apps
  • Malware and privacy analysis of suspicious app binaries
  • Adding automated mobile security scans to a CI/CD pipeline

Quick start

  1. 1

    Pull the official Docker image

    docker pull opensecurity/mobile-security-framework-mobsf:latest
  2. 2

    Run the container and open it on port 8000 (default login mobsf/mobsf)

    docker run -it --rm -p 8000:8000 opensecurity/mobile-security-framework-mobsf:latest

Things to know

  • Licensed under GPL-3.0, a copyleft license that requires derivative works to be distributed under the same terms.
  • Free support is limited; the README directs help requests to Slack rather than GitHub Issues.

In collections

Android apps & phone tools

Topics

#mobile-security#android-security#ios-security#static-analysis#dynamic-analysis#malware-analysis#penetration-testing#devsecops#api-testing#apk

FAQ

What is Mobile-Security-Framework-MobSF?
Open-source all-in-one framework for static and dynamic security analysis, pen-testing and malware analysis of Android, iOS and Windows mobile apps. MobSF is a security research platform for mobile applications on Android, iOS and Windows Mobile. It is used for mobile application security testing, penetration testing, malware analysis and privacy analysis.
Is Mobile-Security-Framework-MobSF free to use? What license does it have?
Mobile-Security-Framework-MobSF is open source under the GPL-3.0 license. Check the license terms before using it in commercial products.
Is Mobile-Security-Framework-MobSF still maintained?
Actively maintained. The last commit to Mobile-Security-Framework-MobSF was on Nov 6, 2026.
What can I use Mobile-Security-Framework-MobSF for?
Security teams performing penetration tests on mobile apps Malware and privacy analysis of suspicious app binaries Adding automated mobile security scans to a CI/CD pipeline
How do I install Mobile-Security-Framework-MobSF?
Pull the official Docker image: docker pull opensecurity/mobile-security-framework-mobsf:latest Run the container and open it on port 8000 (default login mobsf/mobsf): docker run -it --rm -p 8000:8000 opensecurity/mobile-security-framework-mobsf:latest
Where can I get Mobile-Security-Framework-MobSF?
The source code and installation instructions are on GitHub: https://github.com/MobSF/Mobile-Security-Framework-MobSF

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects