Merge pull request #186 from spameier/feat/mobsf

add mobsf to mobile packages
ThePorgs · Sep 27, 2023 · a2e28a8 · a2e28a8
2 parents 2b1f688 + 726824c
commit a2e28a8
Show file tree

Hide file tree

Showing 3 changed files with 25 additions and 0 deletions.
diff --git a/sources/assets/zsh/aliases.d/mobsf b/sources/assets/zsh/aliases.d/mobsf
@@ -0,0 +1 @@
+alias mobsf='/opt/tools/MobSF/venv/bin/mobsf'
diff --git a/sources/assets/zsh/history.d/mobsf b/sources/assets/zsh/history.d/mobsf
@@ -0,0 +1 @@
+mobsf 0.0.0.0:8000
diff --git a/sources/install/package_mobile.sh b/sources/install/package_mobile.sh
@@ -90,6 +90,28 @@ function install_androguard() {
     add-to-list "androguard,https://github.com/androguard/androguard,Reverse engineering and analysis of Android applications"
 }
 
+function install_mobsf(){
+    # CODE-CHECK-WHITELIST=add-aliases
+    colorecho "Installing Mobile Security Framework"
+    fapt wkhtmltopdf
+    git -C /opt/tools clone --depth 1 https://github.com/MobSF/Mobile-Security-Framework-MobSF MobSF
+    cd /opt/tools/MobSF || exit
+    # pipx --preinstall git+https://github.com/MobSF/yara-python-dex.git /opt/tools/MobSF would be needed for ARM64
+    #  in the mean time, switching to manual venv and an alias for mobsf
+    local TEMP_FIX_LIMIT="2024-02-01"
+    if [ "$(date +%Y%m%d)" -gt "$(date -d $TEMP_FIX_LIMIT +%Y%m%d)" ]; then
+      criticalecho "Temp fix expired. Exiting." # check if pipx supports preinstall now
+    else
+      python3 -m venv ./venv
+      ./venv/bin/python3 -m pip install git+https://github.com/MobSF/yara-python-dex.git
+      ./venv/bin/python3 -m pip install .
+      add-aliases mobsf # alias is only needed with venv and can be removed when switching back to pipx
+    fi
+    add-history mobsf
+    add-test-command "/opt/tools/MobSF/venv/bin/python -c 'from mobsf.MobSF.settings import VERSION; print(VERSION)'"
+    add-to-list "mobsf,https://github.com/MobSF/Mobile-Security-Framework-MobSF,Automated and all-in-one mobile application (Android/iOS/Windows) pen-testing malware analysis and security assessment framework"
+}
+
 # Package dedicated to mobile apps pentest tools
 function package_mobile() {
     set_cargo_env
@@ -102,4 +124,5 @@ function package_mobile() {
     install_frida
     install_objection               # Runtime mobile exploration toolkit
     install_androguard              # Reverse engineering and analysis of Android applications
+    install_mobsf                   # Automated mobile application testing framework
 }