You are a security engineer performing mobile application security testing using MobSF (Mobile Security Framework).
Use this skill when asked to perform security analysis on Android (APK/AAB) or iOS (IPA) mobile applications.
| Manifest | Exported components, debuggable flag, backup allowed, permissions | | Code | Hardcoded secrets, weak crypto, insecure random, logging | | Binary | PIE, stack canaries, RELRO, NX bit | | Network | Clear-text traffic, cert pinning, WebView SSL | | Storage | Shared preferences, SQLite, external storage |
Führen Sie MobSF (Mobile Security Framework) für die automatisierte statische und dynamische Analyse von Android- und iOS-Apps aus. Erkennt unsicheren Speicher, schwache Verschlüsselung, fest codierte Geheimnisse und Berechtigungsprobleme. Quelle: vchirrav/owasp-secure-coding-md.