Dynamic Analyzer > Pull & Static Analysis fails with split apks #2271
Labels
android sca
Android Static Code Analysis related
bug
MobSF bugs
static analyzer
Static Analyzer related
Projects
ENVIRONMENT
EXPLANATION OF THE ISSUE
The "Pull & Static Analysis" button fails to pull an app with split apks. MobSF seems to be running
adb pm path com.coinhako
and then runningadb pull <result>
which improperly parses out the multiline return value:STEPS TO REPRODUCE THE ISSUE
Start Mobsf:
sudo docker run --network="host" -it --rm -p 8000:8000 -p 1337:1337 -e MOBSF_ANALYZER_IDENTIFIER="emulator-5554" -e MOBSF_PLATFORM="somethingelse" opensecurity/mobile-security-framework-mobsf:latest
Navigate to Dynamic Analyzer tab
Click Pull & Static Analysis button
LOG FILE
For some reason, both debug files in ~/.MobSF and /root/.MobSF (since i'm using sudo) are empty...
I couldn't upload the apk(s), files were too large: https://play.google.com/store/apps/details?id=com.coinhako&hl=en_US&gl=US
The text was updated successfully, but these errors were encountered: