MobSF - Analyser la sécurité d'une application mobile

Introduction

This tutorial guides you through the process of analyzing the security of a mobile application using APK Extractor and the Mobile Security Framework (MobSF). Understanding how to extract and analyze mobile app code is crucial for identifying vulnerabilities, malicious code, and potential security flaws.

Step 1: Install APK Extractor

To start the analysis, you need to install APK Extractor on your Android device. This application allows you to extract APK files from installed apps.

1. Open the Google Play Store on your Android device.
2. Search for "APK Extractor."
3. Download and install the APK Extractor app.
4. Launch the APK Extractor app.
5. Select the app you want to analyze and extract its APK file.

Step 2: Transfer APK to Computer

Once you have extracted the APK file, transfer it to your computer for analysis.

1. Connect your Android device to your computer using a USB cable.
2. Locate the APK file on your device (usually found in the APK Extractor folder).
3. Copy the APK file to your computer.

Step 3: Access MobSF

You can use either a local instance of MobSF or the online version. Here’s how to access both:

Local Instance

1. Download MobSF from its official GitHub repository.
2. Follow the installation instructions provided in the repository.
3. Launch MobSF on your computer.

Online Version

1. Open your web browser and navigate to MobSF Live.

Step 4: Upload APK to MobSF

Now that you have access to MobSF, it's time to upload the APK file for analysis.

1. In MobSF, click on the "Upload APK" button.
2. Select the APK file you transferred from your Android device.
3. Wait for MobSF to process the APK file.

Step 5: Analyze the Results

After uploading the APK, MobSF will perform an automated analysis. Review the results to identify potential security issues.

1. Check for:
   • Malicious Code: Look for any flagged code that may indicate malicious intent.
   • Suspicious Permissions: Review the permissions requested by the app to find any that seem excessive.
   • Vulnerabilities: Examine any reported vulnerabilities that could be exploited.
   • Hardcoded Credentials: Identify any API keys or credentials embedded in the code.

Practical Tips

• Regularly update both APK Extractor and MobSF to ensure you have the latest features and security patches.
• Always analyze apps from trusted sources to minimize the risk of encountering malware.
• Consider comparing different versions of the same app to understand how security may have improved or worsened.

Conclusion

By following these steps, you can effectively analyze the security of mobile applications using APK Extractor and MobSF. This process not only helps in identifying vulnerabilities but also enhances your understanding of mobile app security practices. Next steps may include conducting further analyses on different apps or delving deeper into specific vulnerabilities discovered during your analysis.