Flutter/Dart security scans

Question

I'm looking for software/method to perform a security scan (looking for security vulnerabilities) on my apps being developed in Flutter. I'm having troubles find one that supports Dart. Has anyone been doing security scans and have any recommendations for what to use? Thanks.

Solution 1

I would suggest the open source framework called mobsf. It's great at scanning a mobile app. I have been using it ever since and I could start patching up my security vulnerability right away.

link : https://github.com/MobSF/Mobile-Security-Framework-MobSF

Solution 2

There's no great security scanning support at the moment although there are some discussions. The first step would be for Google to start to track Dart vulnerabilities in their existing Open Source Vulnerability (OSV) database, you could watch or get involved here: https://github.com/google/osv/issues/62

Solution 3

Mobile-Security-Framework-MobSF Great Tools For Doing Mobile Applications Security Test

Comments

[Ashwin Balani]

If you have a new question, please ask it by clicking the Ask Question button. Include a link to this question if it helps provide context. - From Review

[jlan]

There's no new question in my post - it was a suggestion.

[Luan Si Ho]

Hi jilan, I've check CheckMarx document and can not find flutter support. They only support native android and iOS. Could you give me some information about Flutter Support with CheckMarx please? Many thanks

[jlan]

Hi Luan Si Ho, I don't have that much information because it was set up by my organisation, but looking into the scan logs, the tool scans the native Android portion of the project. Presumably a separate project would need to be set up to scan the IOS part. Sorry