MORF – Mobile Reconnaissance Framework

By Amrudesh Balakrishnan , Abhishek Jm on 06 Aug 2025 @ Blackhat : Arsenal
💻 Source Code 🔗 Link
mobile-security app-security mobile-pentesting static-analysis dynamic-analysis android-security ios-security
Focus Areas: Application Security , Malware Analysis , Mobile Security
This Tool Demo covers following tools where the speaker has contributed or authored
MORF

Abstract

MORF is a versatile, lightweight, and platform-independent offensive mobile security tool that aids security professionals and developers in detecting sensitive information within mobile applications. Often referred to as a “Swiss army knife” for mobile app security, MORF utilizes heuristics-based methods to quickly discover keys, secrets, and other crucial data. Its extensible plugin framework accommodates custom rules and integrations, making it adaptable to specific projects or organizational needs for both Android and iOS environments.