search

MobSF / mobsfscan

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.
GNU Lesser General Public License v3.0
607 stars 97 forks source link

No issues found when running scan #60

Closed jgardezy closed 1 year ago

jgardezy commented 1 year ago

Hi I'm running into an issue when running the scan. I have an apk file which I'm trying to scan by using the command

mobsfscan app.apk The response is that there are no issues found, however when I use the MobSF UI it finds a bunch of issues. So I'm not sure what's going wrong here.

ajinabraham commented 1 year ago

mobsfscan does not support APK or any other binaries format, but just source code.