Pentest & Bug Bounty Resources and Techniques
  • Pentest & Bug Bounty Resources and Techniques
    • Introduction
    • Tests Checklist
    • OSINT
    • Communications Security
      • SSL/TLS
    • Networking
      • Subdomains Discovery
        • DNS & OSINT
        • DNS Brute force
          • Second DNS Brute-Force Round
      • Subdomain Takeover
      • Network Host Scan/Discovery
        • External/Internal
        • Internal only
      • Network Vulnerability Scanning
      • Network Hacking
      • Parsing
      • Reporting
    • Brute Force
      • Wordlists
      • Databases
      • SSH
    • Web
      • Endpoint Discovery
      • Infrastructure & Configuration
        • Headers
        • WAF Detection/ Evasion
      • Injection
        • GraphQL
        • Cross-Site Scripting (XSS)
        • SQL Injection
        • Payloads
      • SSRF & XXE
        • Labs & Resources
        • Tools
        • SVG SSRF Cheatsheet
        • XXE - XEE - XML External Entity
      • JWT Vulnerabilities (Json Web Tokens)
      • HTTP/S DoS
    • Mobile
      • Both
        • SAST
          • MobSF
        • DAST
          • Installing Frida and Objection
      • Android
        • Create a Lab
          • Rooting Android Emulator
          • Rooting Android Emulator Cheat Sheet
        • APK Certificates
        • SAST
          • APKs
            • Get Information from APK
            • GDA (GJoy Dex Analysizer)
            • Scanning APK for URIs, endpoints & secrets
            • Google Maps API Scanner
        • DAST
          • Rooting the Android Studio AVDs
          • non-Rooted devices
            • Bypass SSL Pinning - non-rooted devices
              • Method 1: apk-mitm
              • Instrumentation with Frida and Objection
                • Bypass SSL Pinning - Method 2: With Objection Explore
                • Bypass SSL Pinning - Method 3: With root_bypass.js
          • Rooted Devices
            • Run frida-server in the emulator or device
            • Inject Frida
            • Bypass SSL Pinning - rooted devices
              • Install Burp CA as a system-level CA on the device
      • iOS
        • SAST
          • Building a reverse iOS engineering environment for free
          • Test Vulnerabilities
  • Lets Practice
    • Virtual Machines
    • Vulnerable App
    • Guided Labs
    • CTFs
  • Group 1
    • AI
Powered by GitBook
On this page
  • Prebuilt Docker image from DockerHub
  • Last Version
  • Specific Version
  1. Pentest & Bug Bounty Resources and Techniques
  2. Mobile
  3. Both
  4. SAST

MobSF

PreviousSASTNextDAST

Last updated 2 years ago

Prebuilt Docker image from DockerHub

Dynamic Analysis is not supported with Docker

The latest prebuilt image from .

Last Version

#With Persistence
sudo docker run -it --rm --name mobsf -p 8000:8000 -v ~/MobSFlocal:/root/.MobSF opensecurity/mobile-security-framework-mobsf:latest

#Without Persistence
sudo docker run -it --rm --name mobsf -p 8000:8000 opensecurity/mobile-security-framework-mobsf:latest
#With Persistence
mkdir $env:USERPROFILE\MobSF ; docker run -it --rm --name mobsf -p 8000:8000 -v $env:USERPROFILE\MobSF opensecurity/mobile-security-framework-mobsf:latest

#Without Persistence
docker run -it --rm --name mobsf -p 8000:8000 opensecurity/mobile-security-framework-mobsf:latest
#With Persistence
sudo docker run -it --rm --name mobsf -p 8000:8000 -v ~/MobSFlocal:/root/.MobSF opensecurity/mobile-security-framework-mobsf:arm

#Without Persistence
sudo docker run -it --rm --name mobsf -p 8000:8000 opensecurity/mobile-security-framework-mobsf:arm

Then access to

Specific Version

#With Persistence
sudo docker run -it --rm --name mobsf -p 8000:8000 -v ~/MobSFlocal:/root/.MobSF opensecurity/mobile-security-framework-mobsf:v3.4.3
#With Persistence
mkdir $env:USERPROFILE\MobSF ; docker run -it --rm --name mobsf -p 8000:8000 -v $env:USERPROFILE\MobSF opensecurity/mobile-security-framework-mobsf:v3.4.3

#Without Persistence
docker run -it --rm --name mobsf -p 8000:8000 opensecurity/mobile-security-framework-mobsf:v3.4.3

Then access to

DockerHub
http://127.0.0.1:8000/
http://127.0.0.1:8000/