Available at: https://github.com/owasp-dep-scan/blint

MASTG-TOOL-0130: blint

BLint is a Binary Linter that checks the security properties and capabilities of an executable. Since version 2, blint can generate Software Bill-of-Materials (SBOM) for supported binaries, which includes Android (APK and AAB), but not iOS (IPA) apps.

The creation of an SBOM out of an Android App (APK or AAB) is supported, but limited. Due to stripping out meta-information of the libraries used in an app, a SBOM created ouf of an Android app will always be incomplete.

BLint can be a choice in a black-box security assessment, but other tools should be preferred during a grey/white-box test, like:

• dependency-check
• dependency-track
• cdxgen