OWASP / owasp-mastg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
https://mas.owasp.org/
Creative Commons Attribution Share Alike 4.0 International
11.75k stars 2.33k forks source link

Backup Conversion to tar does not work on OSX #905

Closed ghost closed 6 years ago

ghost commented 6 years ago

https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#dynamic-analysis-7

sushi2k commented 6 years ago

What exactly does not work? Is dd not working, or abe.jar, or both?

ghost commented 6 years ago

Sorry for not elaborating! openssl on MacOS does not have a zlib command. There are work-arounds, but they include installing openssl from source and building with zlib.

sushi2k commented 6 years ago

Ok. Usually it should run out of the box, you only need abe.jar. Can you please explain which command wasn't working and what error you were getting?

ghost commented 6 years ago

Right, sorry about the confusion. This may be a non-issue after all. When running dd if=mybackup.ab bs=24 skip=1|openssl zlib -d > mybackup.tar, I get the error openssl:Error: 'zlib' is an invalid command. on Mac OS High Sierra.

sushi2k commented 6 years ago

Ok. Otherwise just try abe.jar, as explained in the test case. I will close this issue now. Let us know if you still face issues. Thanks