1200字范文,内容丰富有趣,写作的好帮手!
1200字范文 > 移动端安全框架:MobSF:概要与使用

移动端安全框架:MobSF:概要与使用

时间:2024-02-11 14:32:18

相关推荐

移动端安全框架:MobSF:概要与使用

MobSF是Mobile Security Framework的缩写,是一个移动端应用安全问题检出的框架和工具,它适用于Android/iOS/Windows,能够执行动态和静态的恶意软件的分析和检测。支持Android和iOS以及Windows移动应用,无论是二进制方式还是压缩的源代码都可以进行检测。MobSF将数据保持在本地环境之中,所以可以不必担心应用和相关的数据被送至云端。另外,对于ssl链接/简单的加密方式/硬编码的密件信息等MobSF也进行了重点地关注。

MobSF概要信息

开发计划

使用MobSF

本文使用最简单的方式通过官方镜像的方式来使用MobSF。可以使用如下步骤简单进行

执行日志

下载镜像

[root@devops ~]# docker pull opensecurity/mobile-security-framework-mobsfUsing default tag: latestlatest: Pulling from opensecurity/mobile-security-framework-mobsf68393378db12: Pull complete ...省略 Digest: sha256:89df8be7e2991ae6c10fe02d91ce7eff4f976697a34551744c4cd4732a606098Status: Downloaded newer image for opensecurity/mobile-security-framework-mobsf:latest[root@devops ~]#

镜像尺寸较大, 目前版本达2.15G

[root@devops ~]# docker images |grep mobsfopensecurity/mobile-security-framework-mobsf latest b7308c12af38 2 weeks ago 2.15 GB[root@devops ~]#

启动容器

[root@devops ~]# docker run -it -p 8000:8000 opensecurity/mobile-security-framework-mobsf:latest[INFO] Loading User config from: /root/.MobSF/config.py__ __ _ ____ _____ _ ___ | \/ | ___ | |__/ ___|| ___| __ _/ | / _ \ | |\/| |/ _ \| '_ \___ \| |_ \ \ / / || | | || | | | (_) | |_) |__) | _| \ V /| || |_| ||_| |_|\___/|_.__/____/|_| \_/ |_(_)___/ Mobile Security Framework v1.0 BetaREST API Key: d6abbc7a15d6fc66e86c0483a4bc8f1835f82f953c5244f6443d925aeb65b08bOS: LinuxPlatform: Linux-3.10.0-693.el7.x86_64-x86_64-with-Ubuntu-17.10-artfulDist: ('Ubuntu', '17.10', 'artful')[INFO] Finding JDK Location in Linux/MAC....[INFO] JDK 1.7 or above is available[WARNING] Could not find VirtualBox path.[INFO] MobSF Basic Environment Check[INFO] Checking for Update.[INFO] No updates available.No changes detected[INFO] Loading User config from: /root/.MobSF/config.py__ __ _ ____ _____ _ ___ | \/ | ___ | |__/ ___|| ___| __ _/ | / _ \ | |\/| |/ _ \| '_ \___ \| |_ \ \ / / || | | || | | | (_) | |_) |__) | _| \ V /| || |_| ||_| |_|\___/|_.__/____/|_| \_/ |_(_)___/ Mobile Security Framework v1.0 BetaREST API Key: d6abbc7a15d6fc66e86c0483a4bc8f1835f82f953c5244f6443d925aeb65b08bOS: LinuxPlatform: Linux-3.10.0-693.el7.x86_64-x86_64-with-Ubuntu-17.10-artfulDist: ('Ubuntu', '17.10', 'artful')[INFO] Finding JDK Location in Linux/MAC....[INFO] JDK 1.7 or above is available[WARNING] Could not find VirtualBox path.[INFO] MobSF Basic Environment Check[INFO] Checking for Update.[INFO] No updates available.No changes detected in app 'StaticAnalyzer'[INFO] Loading User config from: /root/.MobSF/config.py__ __ _ ____ _____ _ ___ | \/ | ___ | |__/ ___|| ___| __ _/ | / _ \ | |\/| |/ _ \| '_ \___ \| |_ \ \ / / || | | || | | | (_) | |_) |__) | _| \ V /| || |_| ||_| |_|\___/|_.__/____/|_| \_/ |_(_)___/ Mobile Security Framework v1.0 BetaREST API Key: d6abbc7a15d6fc66e86c0483a4bc8f1835f82f953c5244f6443d925aeb65b08bOS: LinuxPlatform: Linux-3.10.0-693.el7.x86_64-x86_64-with-Ubuntu-17.10-artfulDist: ('Ubuntu', '17.10', 'artful')[INFO] Finding JDK Location in Linux/MAC....[INFO] JDK 1.7 or above is available[WARNING] Could not find VirtualBox path.[INFO] MobSF Basic Environment Check[INFO] Checking for Update.[INFO] No updates available.Operations to perform:Apply all migrations: StaticAnalyzer, auth, contenttypes, sessionsRunning migrations:Applying StaticAnalyzer.0001_initial... OKApplying contenttypes.0001_initial... OKApplying contenttypes.0002_remove_content_type_name... OKApplying auth.0001_initial... OKApplying auth.0002_alter_permission_name_max_length... OKApplying auth.0003_alter_user_email_max_length... OKApplying auth.0004_alter_user_username_opts... OKApplying auth.0005_alter_user_last_login_null... OKApplying auth.0006_require_contenttypes_0002... OKApplying auth.0007_alter_validators_add_error_messages... OKApplying auth.0008_alter_user_username_max_length... OKApplying auth.0009_alter_user_last_name_max_length... OKApplying sessions.0001_initial... OK[INFO] Loading User config from: /root/.MobSF/config.py[INFO] Loading User config from: /root/.MobSF/config.pyPerforming system checks...__ __ _ ____ _____ _ ___ | \/ | ___ | |__/ ___|| ___| __ _/ | / _ \ | |\/| |/ _ \| '_ \___ \| |_ \ \ / / || | | || | | | (_) | |_) |__) | _| \ V /| || |_| ||_| |_|\___/|_.__/____/|_| \_/ |_(_)___/ Mobile Security Framework v1.0 BetaREST API Key: d6abbc7a15d6fc66e86c0483a4bc8f1835f82f953c5244f6443d925aeb65b08bOS: LinuxPlatform: Linux-3.10.0-693.el7.x86_64-x86_64-with-Ubuntu-17.10-artfulDist: ('Ubuntu', '17.10', 'artful')[INFO] Finding JDK Location in Linux/MAC....[INFO] JDK 1.7 or above is available[WARNING] Could not find VirtualBox path.[INFO] MobSF Basic Environment Check[INFO] Checking for Update.[INFO] No updates available.System check identified no issues (0 silenced).May 24, - 11:29:06Django version 2.0.5, using settings 'MobSF.settings'Starting development server at http://0.0.0.0:8000/Quit the server with CONTROL-C.

访问服务

上传Android或者iOS应用并确认结果

下载一个Android的apk文件并进行分析,这里我们从Pconline上下载一下工商银行的手机应用并进行上传

稍等片刻,即可确认整体的结果了

本内容不代表本网观点和政治立场,如有侵犯你的权益请联系我们处理。
网友评论
网友评论仅供其表达个人看法,并不表明网站立场。