search

OWASP / owasp-mastg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
https://mas.owasp.org/
Creative Commons Attribution Share Alike 4.0 International
11.71k stars 2.31k forks source link

New Chapter for Reference Apps #2142

Closed cpholguera closed 2 years ago

cpholguera commented 2 years ago

Rename 0x08-Testing-Tools.md to 0x08a-Testing-Tools.md and fix all related links in the MSTG.

Create a new chapter for "Vulnerable applications": 0x08b-Reference-Apps.md

Each entry should have own markdown headers:

# Reference Applications

The applications listed below can be used as training materials. Note: only the MSTG apps and Crackmes are tested and maintained by the MSTG project.

## Android

### Crackmes
...
### AndroGoat
...

## iOS
...
### DVIA-v2

Ensure that the headers are unique, e.g. ### Crackmes should be ### Android Crackmes and ### iOS Crackmes.

Search for all references in the MSTG and link back to this chapter. For example:

Let's look at bypassing jailbreak detection using the Damn Vulnerable iOS application as an example again.

should be:

Let's look at bypassing jailbreak detection using the [Damn Vulnerable iOS application](0x08b-Reference-Apps.md#dvia-v2) as an example again.
wwwhackcom commented 2 years ago

Thanks @cpholguera, I am happy to start with this "create a new chapter 0x08b".

cpholguera commented 2 years ago

It's now assigned to you. See how to contribute https://github.com/OWASP/owasp-mstg/blob/master/docs/contributing/2_Getting_Started.md#contribute-offline

And here more info about opening your first PR and the review process: https://github.com/OWASP/owasp-mstg/blob/master/docs/contributing/3_PRs_and_Reviews.md

Thanks!