OWASP / owasp-mastg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
https://mas.owasp.org/
Creative Commons Attribution Share Alike 4.0 International
11.66k stars 2.3k forks source link

Add missing reverse engineering testcases for iOS #1116

Open commjoen opened 5 years ago

commjoen commented 5 years ago

Add missing reverse engineering testcases for iOS given the following MASVS requirements:

sushi2k commented 5 years ago

let me work on the following two: 8.4 The app detects, and responds to, the presence of widely used reverse engineering tools and frameworks on the device. 8.5 The app detects, and responds to, being run in an emulator.

cpholguera commented 5 years ago

For 8.9 take a look at https://github.com/rockbruno/swiftshield

cpholguera commented 5 years ago

We should split this one into several smaller tickets. Easier to track and follow. What do you think?

commjoen commented 5 years ago

yes please :D

sushi2k commented 4 years ago

We should also consider now https://github.com/securing/IOSSecuritySuite It implements a few of the RE checks in Swift