JADX tool disappear in docker-compose instance

[Antiksec]

JADX installed during Docker build to mobsf_home/tools directory will disappear in docker-compose setup because of mounting docker volume to the mobsf_home directory (

Mobile-Security-Framework-MobSF/docker/docker-compose.yml

Line 48 in d1d3b7a

- $HOME/MobSF/mobsf_data:/home/mobsf/.MobSF

) which is clean at the beggining. If then tools_download.py didn't download it (because of proxy settings, for example) it will crash

[ERROR] 30/Jan/2025 11:36:18 - Decompiling with JADX failed
mobsf-1 | Traceback (most recent call last):
mobsf-1 | File "/home/mobsf/Mobile-Security-Framework-MobSF/mobsf/StaticAnalyzer/views/android/converter.py", line 101, in apk_2_java
mobsf-1 | os.chmod(str(jadx), stat.S_IEXEC)
mobsf-1 | FileNotFoundError: [Errno 2] No such file or directory: '/home/mobsf/.MobSF/tools/jadx/jadx-1.5.0/bin/jadx'

Probable solution is to use different directory for JADX install

[github-actions]

👋 @Antiksec
Issues is only for reporting a bug/feature request. For limited support, questions, and discussions, please join MobSF Slack channel
Please include all the requested and relevant information when opening a bug report. Improper reports will be closed without any response.

[ajinabraham]

JADX is dynamically downloaded at first run, if not found in the volume mount.
If there is a proxy config error, other things in MobSF will fail as well.

Having correct proxy configured is a requirement. There is also a way to define JADX binary path using the environment variable:

Mobile-Security-Framework-MobSF/mobsf/MobSF/settings.py

Line 460 in 05206e7

JADX_BINARY = os.getenv('MOBSF_JADX_BINARY', '')

[Antiksec]

Yep, but download_file func which uses to download Jadx uses system proxy instead of upstream_proxy func here

Mobile-Security-Framework-MobSF/mobsf/MobSF/tools_download.py

Line 24 in ae34f7c

system_proxies = getproxies()

I made PR to fix this