-
MASWE supports CWE mappings already:
https://github.com/search?q=repo%3AOWASP%2Fowasp-mastg%20%22cwe%3A%22&type=code
For example, in MASWE-0041:
```yaml
mappings:
masvs-v1: [MSTG-AUTH-1]
…
-
Does the open-source version of myscaledb v1.4 support multi node cluster deployment?
Is scalability currently only supported for single machine deployment?
Additionally, does the open source …
-
Hi, thanks for all your packages.
I have been trying to run frida from r2 and it does not work. Is there something wrong with the installation process?
``` sh
$r2 frida://spawn/usb//owasp.mstg.…
-
## Description
Create a new risk for "Weak Cryptographic Key Generation (MASVS-CRYPTO-2)" using the following information:
e.g. 1024-bit RSA keys, 128-bit AES keys*, 160-bit ECDSA keys, 80-bit…
-
I prepared my bootstrap.tgz with Cydia and openssh, removed patcyh files, and fixed the zcat error using gzcat instead, since OSX doesn't seem to like zcat
Trying this on an iPhone 5 (so, 32 bit), I …
-
**Describe the bug**
Cannot dump a whole Android app.
**To Reproduce**
Steps to reproduce the behavior:
https://github.com/OWASP/owasp-mstg/raw/master/Samples/Android/01_HelloWorld-JNI/Hello…
-
The tests described in the new MASTG v1.6 does not have an unique identifier associated. In other words, the only way to refer a MASTG test is through the title. Will you provide unique identifiers fo…
-
at first the error is private framework not found .Then I download the sdk and put into theos/sdks/
and add command export SYSROOT = $(THEOS)/sdks/iPhoneOS9.3.sdk to my makefile
and make.
> Making …
-
**Describe the issue**
The test case for "Making Sure that the App Is Properly Signed (MSTG‑CODE‑1)" for iOS is only an overview without much information on what to do with the codesign output.
…
-
## Description
Create a new risk for "Sensitive Data Stored Unencrypted in Shared Storage Requiring No User Interaction (MASVS-STORAGE-1)" using the following information:
Sensitive data may be …