2

Is there any iOS online analysis tool?

The only thing I have seen so far is VirusTotal. Are there other tools that can provide online reports?

My main issue is that I do not have any Apple hardware right now, so I can not use desktop-based tools or run an app on an iPhone.

I use Ubuntu, so I need some web service or a Linux-based tool that can give me insight into app functionality and a verdict about its maliciousness.

Improve this question

1 Answer 1

Reset to default
2
+25

There is a Chinese online application security scanner (VisualThreat: Mobile Application Security Credit Evaluation System) at http://www.visualthreat.com/index.action

The followings are the main features of the service (in machine translated):

  • comprehensive safety analysis program: static behavior, dynamic behavior, malicious behavior characteristic resolve family related and inter-family resolve
  • measurable (0-100) to assess the credibility of mobile application security system
  • comprehensive application of risk analysis matrix, including but not limited to loss of privacy, SMS monitoring, behavior monitoring.
  • Automatic mobile application security vulnerability scanning accurate malicious behavior and advanced persistent threat of attack detection
  • real-time mobile applications industry's most authoritative safety analysis report
Improve this answer
6
  • Thanks for the response. The link you have shared seems quite helpful, but it requires iTunes url, while I have bunch of IPA files from random sources. Some of these IPA might not even be on itunes, do you happen to know service that lets user upload app?
    – blackfyre
    Feb 3, 2016 at 1:24
  • 1
    Hello Gürol'Ca, could you please describe in details how your solution targets iOS in particular? Thanks!
    – Nicolas Raoul ♦
    Feb 4, 2016 at 6:20
  • As @blackfyre says the online service scans iOS apps by providing their iTunes URL (e.g. itunes.apple.com/app/id#########). The report is not as informational as in Android.
    – Gürol Canbek
    Feb 5, 2016 at 8:49
  • In static analysis scope: The reports list the following information: - The 'risky' actions (Phone Call, Keyboard cache, InApp Purchasing, Audio input/record, Location Tracking, Camera, Photo Gallery, WiFi connection, Address Book, Email account, Mobile Safari Setting and history, Youtube application, Ads Networks, Accelerometer, Calendar)
    – Gürol Canbek
    Feb 5, 2016 at 8:50
  • - The screenshot and artwork URLs (shown in iTunes) - The developer's URL (shown in iTunes) - Features (iosUniversal??) - Supported Devices (shown in iTunes) - Content Rating (shown in iTunes) - Supported languages (shown in iTunes) - Genres (shown in iTunes) - Description (shown in iTunes) - Minimum OS version - User rating and average rating (shown in iTunes) (shown in iTunes)
    – Gürol Canbek
    Feb 5, 2016 at 8:51

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.