MobSF for penetration testers

Comments, chapters, ... Slides Search
Loading Click here to add:
Subscribe to notifications

When subscribed to notifications, an email will be sent to you for all added annotations.

Your user account has no email address.

Information on this media

84 views

MobSF is a free and OpenSource security scanner for mobile application. First, this talk will introduce MobSF and its different features. Then, the talk will present how MobSF can be used during a penetration test or a red team. After presenting how to setup the tool for penetration testing, different use cases will be presented, regarding two different points of view: - a security review of a mobile application (or an SDK), in this case, the mobile application or the specific SDK is the target. - an assessment where the mobile application is not directly the target, in this case, the mobile application is used for recon (and more). - a quick use case of usage for every penetration tester who don't want to dig into complex android methods These use cases will also point MobSF limits and how to handle them by using the API and homemade scripts. For some cases, a comparison with other tools (such as apkleaks) will be done. At last, a quick review of how bug report and feature requests are handled by the MobSF team.

 

 
Antoine Cervoise

Antoine is a penetration tester at Synacktiv. He enjoys computer science, electronics and D.I.Y., beers (drinking and making) by night… and he’s fond of cigars!

 
Mickael Benassouli

Pentester at Synacktiv

Creation date: July 6, 2022
Speakers: Antoine Cervoise
License: CC BY-SA v4
Links:

Other media in the channel "2022"