Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing framework capable of performing static, dynamic and malware analysis. It can be used for effective and fast security analysis of Android, iOS and Windows mobile applications and support both binaries (APK, IPA APPX ) and zipped source code. MobSF can do dynamic application testing at runtime for Android apps and has Web API fuzzing capabilities powered by CapFuzz, a Web API specific security scanner. MobSF is designed to make your CI/CD or DevSecOps pipeline integration seamless.移动安全框架（Mobile Security Framework，简称MobSF）是一款自动化、一体化的移动应用（Android/iOS/Windows）渗透测试框架，可开展静态分析、动态分析与恶意软件分析。该框架可用于对Android、iOS及Windows移动应用进行高效快捷的安全分析，支持二进制文件（APK、IPA、APPX）与压缩源代码包。MobSF可对Android应用实施运行时动态应用测试，同时配备由专用Web API安全扫描器CapFuzz驱动的Web API模糊测试功能。MobSF的设计目标是实现与CI/CD（持续集成/持续交付）或DevSecOps（开发安全运维）流水线的无缝集成。