The mobile security testing guide mstg is a comprehensive manual for mobile app security development testing and reverse engineering.
Mobile app security testing github.
4aee18f83afdeb23 learn about signing commits.
If you find a broken tool or example please search or file an issue in the tool original page e g.
The mstg does not take any responsibility over the working status of the tools.
Terms such as mobile app penetration testing and mobile app security review are used somewhat inconsistently in the security industry but these terms refer to roughly the same thing.
This is the official github repository of the owasp mobile security testing guide mstg.
It also contains additional technical test cases that are os independent such as authentication and session management network communications and cryptography.
Throughout the guide we use mobile app security testing as a catchall phrase to refer to the evaluation of mobile app security via static and dynamic analysis.
Mobile security framework mobsf is an automated all in one mobile application android ios windows pen testing malware analysis and security assessment framework capable of performing static and dynamic analysis.
Mobile application penetration testing cheat sheet.
The mstg is a comprehensive manual for mobile app security testing and reverse engineering.
In procurement as a measuring stick for mobile app security e g.
In mobile app penetration tests to ensure completeness and consistency in mobile app penetration tests.
In the github issues page.
The mobile app pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics and checklist which is mapped owasp mobile risk top 10 for conducting pentest.
The mobile security testing guide mstg provides verification instructions for each requirement in the masvs as well as security best practices for apps on each supported mobile operating system currently android and ios.
It is also useful as a standalone learning resource and reference guide for mobile application security testers.
The general testing guide contains a mobile app security testing methodology and general vulnerability analysis techniques as they apply to mobile app security.
Mobile security framework mobsf version.
Owasp mobile security testing guide.
The masvs is a sister project of the owasp mobile security testing guide.
It describes technical processes for verifying the controls listed in the owasp mobile application verification standard masvs.
Mobile application security testing distributions.