Safe Mode Demo Labs - Ajin Abraham - Mobile App Security Testing with MobSF
A demonstration of Mobile Security Framework (MobSF) for performing automated static and dynamic security analysis of mobile apps.
Summary
In this hands-on tool demonstration from DEF CON Safe Mode Demo Labs, security researcher and project creator Ajin Abraham presents Mobile Security Framework (MobSF), an open-source automated security assessment platform for Android and iOS applications. Opening at 00:00, Ajin introduces MobSF's dual capabilities in static and dynamic analysis.
At 07:00, he demonstrates static binary analysis, showing how MobSF parses application manifests, decompiles binaries, identifies hardcoded secrets, and maps exported components and permissions to pinpoint attack surfaces.
Moving to dynamic testing at 14:00 and 21:00, Ajin executes applications on an instrumented emulator, demonstrating real-time API hooking via Frida scripts to bypass certificate pinning, intercept encrypted HTTPS traffic using MobSF's root CA, and inspect local SQLite databases at 28:00 for leaked sensitive data. (AI summary — Gemini Flash)
Related talks
XR Village·28 min
Whitney Phillips
Examines the security and privacy implications of augmented reality sensor frameworks and camera feeds on mobile operating systems.
Main Stage·21 min
Patrick Wardle · Tom McGuire
Patrick Wardle and Tom McGuire expose commercial security vendors who covertly copied open-source macOS security tools into commercial enterprise products.
Red Team Village·1 hr 1 min
Kyle Benac
Kyle Benac presents a structured methodology for auditing Android applications, analyzing hybrid frameworks, IPC intent vulnerabilities, and insecure storage.