Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/OWASP/owasp-mstg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
https://github.com/OWASP/owasp-mstg

android android-application compliancy-checklist dynamic-analysis hacking ios ios-app mast mastg mobile-app mobile-security mstg network-analysis pentesting reverse-engineering reverse-enginnering runtime-analysis static-analysis testing-cryptography

Last synced: 3 months ago
JSON representation

Host: GitHub
URL: https://github.com/OWASP/owasp-mstg
Owner: OWASP
License: cc-by-sa-4.0
Created: 2016-09-30T08:22:29.000Z (about 8 years ago)
Default Branch: master
Last Pushed: 2024-04-10T08:45:00.000Z (7 months ago)
Last Synced: 2024-04-13T21:52:48.655Z (7 months ago)
Topics: android, android-application, compliancy-checklist, dynamic-analysis, hacking, ios, ios-app, mast, mastg, mobile-app, mobile-security, mstg, network-analysis, pentesting, reverse-engineering, reverse-enginnering, runtime-analysis, static-analysis, testing-cryptography
Language: Python
Homepage: https://mas.owasp.org/
Size: 396 MB
Stars: 11,248
Watchers: 427
Forks: 2,222
Open Issues: 155
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: .github/CONTRIBUTING.md
- Funding: .github/FUNDING.yml
- License: License.md
- Code of conduct: .github/CODE_OF_CONDUCT.md
- Citation: CITATION.cff
- Security: .github/SECURITY.md

Awesome Lists containing this project

README

        

# OWASP Mobile Application Security Testing Guide (MASTG)

[![OWASP Flagship](https://img.shields.io/badge/owasp-flagship%20project-48A646.svg)](https://owasp.org/projects/)

[![Creative Commons License](https://img.shields.io/github/license/OWASP/owasp-mastg)](https://creativecommons.org/licenses/by-sa/4.0/ "CC BY-SA 4.0")

[![Document Build](https://github.com/OWASP/owasp-mastg/workflows/Documents%20Build/badge.svg)](https://github.com/OWASP/owasp-mastg/actions?query=workflow%3A%22Document+Build%22)

[![Markdown Linter](https://github.com/OWASP/owasp-mastg/workflows/Markdown%20Linter/badge.svg)](https://github.com/OWASP/owasp-mastg/actions?query=workflow%3A%22Markdown+Linter%22)

[![URL Checker](https://github.com/OWASP/owasp-mastg/workflows/URL%20Checker/badge.svg)](https://github.com/OWASP/owasp-mastg/actions?query=workflow%3A%22URL+Checker%22)

This is the official GitHub Repository of the OWASP Mobile Application Security Testing Guide (MASTG). The MASTG is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the controls listed in the [OWASP Mobile Application Verification Standard (MASVS)](https://github.com/OWASP/owasp-masvs "MASVS").













- ⬇️ [Download the latest PDF](https://github.com/OWASP/owasp-mastg/releases/latest)

- ✅ [Get the latest Mobile App Security Checklists](https://github.com/OWASP/owasp-mastg/releases/latest)

- ⚡ [Contribute!](https://mas.owasp.org/contributing)

- 💥 [Play with our Crackmes](https://mas.owasp.org/crackmes)




## Trusted by

The OWASP MASVS and MASTG are trusted by the following platform providers and standardization, governmental and educational institutions. [Learn more](https://mas.owasp.org/MASTG/0x02b-MASVS-MASTG-Adoption/).










## 🥇 MAS Advocates

MAS Advocates are industry adopters of the OWASP MASVS and MASTG who have invested a significant and consistent amount of resources to push the project forward by providing consistent high-impact contributions and continuously spreading the word. [Learn more](https://mas.owasp.org/MASTG/0x02c-Acknowledgements).














## Connect with Us



 GitHub Discussions



  #project-mobile-app-security (Get Invitation)



 @OWASP_MAS  (Official Account)



 @bsd_daemon  (Sven Schleier, Project Lead)  @grepharder  (Carlos Holguera, Project Lead)






## Other Formats

- Get the [printed version via lulu.com](https://www.lulu.com/shop/jeroen-willemsen-and-sven-schleier-and-bernhard-müller-and-carlos-holguera/owasp-mobile-security-testing-guide/paperback/product-1kw4dp4k.html)

- Get the [e-book on leanpub.com](https://leanpub.com/owasp-mastg) (please consider purchasing it to support our project or [make a donation](https://mas.owasp.org/donate/#make-your-donation))

- Check our [Document generation scripts](src/pandocker/README.md)