A way to do mobile application security testing on windows with ubuntu on WSL2, avoids having to use virtualbox or vmware. I would like to note that there are several tools for mobile application testing, the ones I am installing here are the ones that get the job done for me.
- Point to Note: I haven't yet figured out what tool I will use for network analysis, but I am going to provide a different gist on that once I find a solution to it.
- I would also love to point out that I do have a linux pc so this setup is for my windows pc.
- GJoy Dex Analyzer (GDA)
Static Analysis
- Installed on
Windows, replaces[jadx-gui](https://github.com/skylot/jadx)
- Genymotion and Android Studio
- Android Studio for App Development and Virtual Devices.
- Genymotion for Virtual Devices.
- All installed on
Windows.
- scrcpy
Helps in displaying and controlling my android test device
- Tried installing it on
WSL2, it worked but the screen was all blank. - I opted to use the native windows release and it works.
- Runtime Mobile Security (RMS)
Dynamic Analysis
- Installed on
WSL2.
-
I am not going to repeate the whole installation check out their installation guide.
-
I will point out the key areas I faced and how to fix incase you face the same issues.
- Install the latest version of npm.
- If you face such an error while installing RMS:
EACCES, permission denied;- First try running that command with sudo.
- If it still fails; run this command first:
sudo chown -R $USER: /usr/local/lib/node_modulesthen try running the install command without sudo.
-
Now you are good to go, make sure you have installed every prerequisites for RMS.
-
Now we need to a browser and a way to get GUI interface for google from WSL2.
-
Follow these guides;
-
Make sure you have placed these in your
.bashrcfile.# make xserver to work export DISPLAY=$(cat /etc/resolv.conf | grep nameserver | awk '{print $2; exit;}'):0.0 export LIBGL_ALWAYS_INDIRECT=1 export GDK_DPI_SCALE=1
-
-
Now to connect RMS with your device, make sure you install WiFi ADB
-
Booom!! now you have a WSL2 Ubuntu instance on steroids.
