Hi all! As promised today I will teach you how to use MobSF.
In folder of MobSF running MobSF by command:
sudo python manage.py runserver
sudo python manage.py runserver port
__ __ _ ____ _____ ___ ___ ____ | \/ | ___ | |__/ ___|| ___| __ __/ _ \ / _ \ |___ \ | |\/| |/ _ \| '_ \___ \| |_ \ \ / / | | | (_) | __) | | | | | (_) | |_) |__) | _| \ V /| |_| |\__, | / __/ |_| |_|\___/|_.__/____/|_| \_/ \___(_) /_(_)_____| [INFO] Loading User config from: /home/manh/.MobSF/config.py [INFO] Finding JDK Location in Linux/MAC.... [INFO] Oracle Java is installed! [INFO] JDK 1.7 or above is available Performing system checks... System check identified no issues (0 silenced). September 06, 2016 - 14:25:31 Django version 1.8, using settings 'MobSF.settings' Starting development server at http://127.0.0.1:8000/ Quit the server with CONTROL-C.
To address http://127.0.0.1:8000/ or http://ip_server:8000/
Mobsf web interface
- Select file you want analyze
In the infomation we have:
– File name
– Hash MD5
You can using infomation check the integrity of files.
Number activities in app
That is the initial information need to know about the sample to be analyzed
You can view and download file:
– Java code
- View file smali
In this section you can choose dynamic analysis by clicking on the button Start Dynamic Analysis
You can view Android Permission.
You can view Android API used in app.
Đưa ra các đánh giá mức độ an toàn cho các phần: Manifest, Code and file
Include information: URLs, Emails, Strings and Malware Check
Details about: Activities, Service….
You can export to PDF file by click to button “Download Report”
To be able to analyze the dynamic we need to enable virtual machine android.
We go to VirtualBox and running Mob_SF_xx installed.
Results received when run successful virtual machines
Step 1: Start Dynamic Analysis
You start dynamic analysis by click to button “Start Dynamic Analysis”
Step 2: Crate Environment
Click to button “Crate Environment” in web interface
Analytical results after completion:
You can view results by click to button “Finish”. If you want to test other properties you can select by click to button.
Below is the result of dynamic analysis
You can export to PDF file by click to button “Download/Print”