OpenSecurity

Security Engineering, Pentest & Code Review, Security Research, Open Source & Online Security Trainings via @OpSecX.

All things AppSec!

[Het Mehta @hetmehtaa]

🧪 iOS Pentesting: Step-by-step guide on "IPA Binary Analysis" using MobSF.

Guide: https://t.co/YLiMMbXYec

#infosec #pentesting

[p3nt3st_guy @pentestguy]

Another DevSecOps Article🤖

Setup Mobsfscan in Azure DevOps
https://t.co/CrIkPCPNkL
#mobsfscan #azuredevops #devsecops

[NEC (公式) @NEC_jp_pr]

／
今週の #セキュリティブログ🔐
＼
今回はモバイルアプリ用の #セキュリティ 診断プラットフォーム「#MobSF」での動的解析についてご紹介✨
#Android で入力した機密情報が内部ストレージに残ってしまう問題を検出できるか確認してみました💡ぜひご一読を❗

詳細はこちら🔽
https://t.co/MdSPRcsJRe

[Ajin Abraham @ajinabraham]

I will be releasing the brand new MobSF iOS Dynamic Analyzer powered by Frida and @CorelliumHQ at @BlackHatEvents Arsenal, London UK.
Here is a sneak peak: https://t.co/BkWOmQTOKR
Catch me live on Thursday, December 7 1.00 PM

[OpenSecurity @OpenSecurity_IN]

Happy Monday!

MobSF v3.7.6 is out! 🎉

* Now supports independent scanning of AAR, JAR, Static Libraries (.a) and Dynamic Libraries (.so, .dylib)
* Improved String extraction for APKs

And a lot more under the hood improvements.

https://t.co/aiS1UMewEg

[Ajin Abraham @ajinabraham]

Recently did a React/Next.js secure code review. Here is a checklist that will help you spot some common vulnerabilities.

https://t.co/gKw56ssKkg

#appsec #nextjs #reactjs #codereview

[Mobile Hacker @androidmalware2]

Analysis of Malicous APK using MobSF (Part 1)
https://t.co/lTyRt9VIv4

[OpenSecurity @OpenSecurity_IN]

Capturing Mobile App Network Traffic with MobSF and Burp.

MobSF takes care of
* Proxy Root CA install
* Generic SSL Pinning/Certificate Transparency bypass
* Generic Root/Debugger check bypass

See Docs: https://t.co/AJuZsIMedD

[OpenSecurity @OpenSecurity_IN]

MobSF v3.6.9 is out! 🎉

The latest docker image now supports quick and easy Dynamic Analysis with Android Studio AVD, Genymotion, and Corellium Android VMs.

See the updated docs: https://t.co/AJuZsIMedD

[Paul Knulst @paulknulst]

Optimize Android App Development With Docker, SonarQube, Detekt, and MobSF
{ by @paulknulst } from @hashnode https://t.co/DhpacMt9kK

#docker #devops #programming #SoftwareEngineer #developer #js #DataScience

[MorterueloCon @morteruelocon]

Queremos anunciar a @TomasIsasia con su charla “MobSF: análisis estático de aplicaciones IOS en Windows” que nos presentará en #MorterueloCON2k23. #Hacking #Ciberseguridad #Cuenca

[OpenSecurity @OpenSecurity_IN]

mobsfscan with @codemagicio

https://t.co/LsVL6BAzDy

[OpenSecurity @OpenSecurity_IN]

Shoutout to the folks at @AlgoSecure for their generous donation towards the MobSF open source project 🎉
#HappyHolidays

[Ajin Abraham @ajinabraham]

LambdaSpy is a neat PoC, an MITM proxy style lambda extension to intercept/modify lambda events.

The trick: Overwrite the environment variable in Rapid’s heap memory.

https://t.co/BQCvKzzV1s

https://t.co/xqYGRsli5y

Great work @clearvectorhq

[NEC (公式) @NEC_jp_pr]

／
今週の #セキュリティブログ 🔐
＼
#モバイルアプリケーション (Android/iOS/Windows)の解析ができるフレームワーク #MobSF (Mobile-Security-Framework) を用いたiOSアプリのセキュリティ診断をご紹介✨

解析した結果、どんな問題が検出されるか❓ぜひご覧ください🔽
https://t.co/lZ0W6kzXe8

[Grzegorz Tworek @0gtweet]

Oh, a #LOLbin again? 🙄
1. Set HV_SSH_COMMAND to your exe
2. Launch "hvc.exe ssh dummyparam"
3. Enjoy!

[Paul Knulst @paulknulst]

Just published an article that explains how to use #Docker to improve your #Android app #security and code quality by using @SonarQube, Detekt, and MobSF (@OpenSecurity_IN) combined in a software-quality-chain!

https://t.co/xcb2nsT7sj

#opensource #programming #100DaysOfCode

[OpenSecurity @OpenSecurity_IN]

MobSF v3.6.0 Released 🚀

False Positive Triaging support + new REST APIs just landed in. Feel free to play with our demo instance: https://t.co/ZCM36RVNCl

#mobsf #MobileSecurity

[Daniel Alonso @Cyb3rH0rr0r]

Terminado la jornada en #RootedConValencia por todo lo alto con @tisasia y su charla “MobSF & IPA vs Windows” Agárrame la horchata!🥛@rootedcon

[Bitrise @bitrise]

Testing security is crucial. 🛡 Let us walk you through the steps of setting up the #MobSF Scan tool on an #AWS EC2 machine with #Docker and Bitrise to be able to run your static analysis tests easily! ✅
https://t.co/vT7sUGzbbx