MobiSec Files

The MobiSec VM Environment Mobile Testing Framework project is a VM environment for testing mobile environments, including devices, applications, and supporting infrastructure. The purpose is to provide attackers and defenders the ability to test their mobile environments to identify design weaknesses and vulnerabilities. The MobiSec VM Environment provides a single environment for testers to leverage the best of all available open source mobile testing tools, as well as the ability to install additional tools and platforms, that will aid the penetration tester through the testing process as the environment is structured and organized based on an industry-proven testing framework. Using a VM image provides penetration testers the ability to run the test environment within a virtual machine.

MobiSec login password is mobisec

Current Release: v2.0.2 released May 21st, 2015
Format: Virtual Machine
Operating System: Ubuntu Linux LTS 14.04
Project Leads: Tony DeLaGrange, Chris Cuevas, & Kevin Johnson
Email: mobisec@secureideas.net
Twitter: @MobiSecLive

Releases:
5/21/2015 2.0.2 Updates and Bug Fixes
	- Added a Local Proxy on port 8080 to FoxyProxy.
	- Added to path scripts for burp, zap, and w3af
	- Added the raft lists into ZAP’s forced browse list.
	- Updated ZAP to 2.4.0
	- Updated w3af (latest in GitHub)

04/13/2015 2.0.1 Updates and Bug Fixes
	- Installed the missing pytz python library
	- Added to path scripts for wsfuzzer, sqlmap, and nikto
	- Fixed wsfuzzer script to set JAVA_HOME correctly
	- Updated WSFuzzer to latest (1.9.5)
	
02/15/2015 2.0b Complete Rebuild (limited release)
	- The standard version of Java in MobiSec 2.0 is OpenJDK 1.7 (64-bit)
	- Several tools that were previously compiled directly on MobiSec 1.x have been re-installed with apt-get due to availability of these tools in the standard Ubuntu repo.
	- Most tools have been updated to the latest available version as of Feb 1, 2015.
	- Added IntelliJ IDEA (Includes Android Studio functionality + JD-Gui Java Decompiler)
	- Added SQLite Browser
	- Added Recon-ng
	- Added JAD (command line Java Decompiler)
	- Added wsfuzzer to menu(this was actually in previous distros but was missing from the menu)
	- Added bWAPP target
	- Dropped DroidBox - appears to be abandoned project without support for KitKat +
	- Dropped Eclipse IDE - Android Studio has replaced Eclipse as the standard Android development platform.
	- Dropped BitPim - an older tool that is build only for 32-bit architecture
	- Dropped SQLite Spy - Outdated and non-standard tool has been replaced with the better supported “SQLite Browser”
	- Dropped DirBuster - Is now deprecated but its functionality has been rolled into ZAP, which is included in MobiSec 2.0.
	- Dropped JD-Gui - Now installed as IDEA plugin
	- Dropped APKInspector - no longer maintained and does not compile on Ubuntu 14.x.  Use Dex2Jar with IDEA and decompiler plugin instead.
	- Dropped Metasploit - rarely needed for mobile testing.  Recommend using it from a Kali image rather than from MobiSec.
	- Dropped SET - Not specific to mobile testing.  Recommend using it from a Kali image rather than from MobiSec.
	- Dropped Mutillidae

11/06/2014 1.3 Updates
	- Several tools updated

04/25/2012 1.1 Updates and added tools
	- Upgraded Ruby to 1.9.2p318 and installed for root account
	- Installed Ubuntu updates via Update Manager
	- Updated Metasploit to rev 15158
	- Updated SET to rev 1262
	- Added SecurityCompass AndroidLabs apk to emulators
	- Added SecurityCompass LabServer
	- Updated Android SDK Manager to rev 17
	- Updated Eclipse and Android plugin
	- Updated android-emu.sh script to specify emulator to launch
	- Added Ettercap with GUI
	- Added SQLMap
	- Added pptpd, tcpick, tshark
	- Added SSLStrip
	- Added DroidBox with Android 2.1 emulator
	- Added iSniff SSL MitM tool for iPhone
	- Added dsniff
	- Added SQLiteSpy
	- Fixed Ruby install
	- Updated BeEF (from github)
	- Fixed install script on desktop
	- Added support for Lorcon2 msf module
	- Added Aircrack-ng and Airgraph-ng
	- Fixed Kismet install
	- Added Firefox plugins:
		- Cookies Manager+
		- Greasemonkey
		- HackBar
		- HttpFox
		- JSView
		- MitM Me
		- Tamper Data
		- User Agent Quick Switch
		- XSS Me
	- Disabled login sound
	- Changed default user account lockout to 30 mins
	- Updated desktop background image

02/10/2012 v1.0 - Initial Release