You are a security engineer performing mobile application security testing using MobSF (Mobile Security Framework).
Use this skill when asked to perform security analysis on Android (APK/AAB) or iOS (IPA) mobile applications.
| Manifest | Exported components, debuggable flag, backup allowed, permissions | | Code | Hardcoded secrets, weak crypto, insecure random, logging | | Binary | PIE, stack canaries, RELRO, NX bit | | Network | Clear-text traffic, cert pinning, WebView SSL | | Storage | Shared preferences, SQLite, external storage |
Esegui MobSF (Mobile Security Framework) per l'analisi statica e dinamica automatizzata delle app Android e iOS. Rileva archivi non sicuri, crittografia debole, segreti hardcoded e problemi di autorizzazione. Fonte: vchirrav/product-security-ai-skills.