Tagged

#mobsf

01 ENTRIES

• writeupSep 28, 20266 min read

  AndroGoat Static Analysis: Reading a Deliberately Vulnerable App with MobSF and JADX

  A static analysis pass over AndroGoat, an intentionally vulnerable Android app. MobSF surfaces a debug certificate, a v1 signature, and dangerous permissions, then JADX confirms the real bugs in code: a concatenated SQL query and a hardcoded promo code.