coky-t / owasp-mastg-ja Goto Github PK

improve content and consistency of the Android and iOS sections about MSTG-CODE-9
OWASP/owasp-mastg@4e05093#diff-99bc45bff94367d5441a4fe2e1ed5d4af9f9005b7ba8f44464697295606f7b27

clearText traffic info added
OWASP/owasp-mastg@e3d4ba5#diff-8a0d6010d2a3b90e760a96a6b8905a465bfe80d350ae162afe0376ba6b5b3886

android:

• MASVS-STORAGE
• MASVS-CRYPTO
• MASVS-AUTH
• MASVS-NETWORK
• MASVS-PLATFORM
• MASVS-CODE
• MASVS-RESILIENCE

ios:

• MASVS-STORAGE
• MASVS-CRYPTO
• MASVS-AUTH
• MASVS-NETWORK
• MASVS-PLATFORM
• MASVS-CODE
• MASVS-RESILIENCE

Fix Network Security Testing on Android and iOS
OWASP/owasp-mastg@96b4dec#diff-34448ef4e8b161a066e2a9553c9b2fafc170119c507ae91cd2b899d24f919d54

概要

以下のWebsiteで「テストツール」の項目だけ表示されていないのを発見しました🔍
おそらくリンクが間違っているのではないかと思います 🤔

該当箇所

• https://coky-t.gitbook.io/owasp-mastg-ja/fu-lu/tesutotsru

表示されるべき内容

• https://github.com/coky-t/owasp-mastg-ja/blob/master/Document/0x08-Testing-Tools.md

Add New References to Android API changes
OWASP/owasp-mastg@4519779#diff-093a36d191140727a80883b605bd96590b20d5610ae1d8ee57286b07e2198028

Improve the Android Architecture Section
OWASP/owasp-mastg@51c152b#diff-093a36d191140727a80883b605bd96590b20d5610ae1d8ee57286b07e2198028

Fix Network Security Testing on Android and iOS
OWASP/owasp-mastg@96b4dec#diff-093a36d191140727a80883b605bd96590b20d5610ae1d8ee57286b07e2198028

Proofreading fixes 0x04i Testing-User-Privacy-Protection.md
OWASP/owasp-mastg@526d17e

Technical Writer: made changes to enhance clarity - section in 0x04 ("guide") moved to 0x03
OWASP/owasp-mastg@68cc51a#diff-d52ec1cf572b93ef02b72f9e1ad4df23e5623df315db1639a9d28b921f45d5dc

• 0x04a-Mobile-App-Taxonomy
• 0x04b-Mobile-App-Security-Testing
• 0x04c-Tampering-and-Reverse-Engineering
• 0x04e-Testing-Authentication-and-Session-Management
• 0x04f-Testing-Network-Communication
• 0x04g-Testing-Cryptography
• 0x04h-Testing-Code-Quality
• 0x04i-Testing-User-Privacy-Protection

Hi @coky-t ! Given your hard work on the translation of the MASVS & MSTG, I'dd like to get in touch with you. Are you on OWASP Slack? and otherwise: can you mail me at [email protected]?

improve content and consistency of the Android and iOS sections about MSTG-CODE-9
OWASP/owasp-mastg@4e05093#diff-564effa16929818f66dcd36adff7378e4fca96483b2f3aa25fc0a3e907ca9930

Add Google's ADA MASA
OWASP/owasp-mastg@49be635#diff-0fbfee867a8bc6bde8d6b15df665438ffeac163aaa7765098f0eaa869853ea90

• android
• generic
• ios

Apply suggestions from code review
OWASP/owasp-mastg@d4362f3#diff-8f551893e4dae6b53af43cc3114bfa38065f623e122f9e1974c2e01c25880584

Technical Writer: made changes to enhance clarity - section in 0x04 ("guide") moved to 0x03
OWASP/owasp-mastg@68cc51a#diff-6bf03737043c44ae43f3f726d336589eb7aab5fa794c5d0ac25c642ca2327bcb

add general section about Binary Protection Mechanisms
OWASP/owasp-mastg@3d1d29a#diff-9d01a0921de092872bb87d195dd5215dbdc1d852e2109ab5c530892b1d137c60

Fix Network Security Testing on Android and iOS
OWASP/owasp-mastg@96b4dec#diff-ca736a5e9d16ff736126ab50efb543b412ada87ac0129b42cf19936de6bb3ad5

add general section about obfuscation; update iOS and Android tests for MSTG-RESILIENCE-9 and add APKiD
OWASP/owasp-mastg@efae08d#diff-4b3139f51243db61861f0cdc7291343fcb1ba9265b108bf6cbfe2d9210b67c88

[Phase 1] Refactor 0x06j-Testing-Resiliency-Against-Reverse-Engineering.md

• Add overview theory section
• Extract more theory into overview
• update reference, remove MASVS IDs
• add swiftshield to tools
• second round of refactor
• Apply suggestions from code review
  OWASP/owasp-mastg@b237d18#diff-d3ff65c7d6712ab900ae60a76d1452cc924bf245a9260a5584febc20ea9ec5f2

Replace safetyNey to Play Integrity
OWASP/owasp-mastg@e4b9b5d

• android
• generic
• ios
• network

MASTG Transition Version
OWASP/owasp-mastg@1c363bc#diff-6e06a967b518999817fb2636f6a1e1d3fd31e7910b13fc1439138f5007aa91e2

Fix Network Security Testing on Android and iOS
OWASP/owasp-mastg@96b4dec#diff-8a0d6010d2a3b90e760a96a6b8905a465bfe80d350ae162afe0376ba6b5b3886

Fix chapter outline for 0x04g (Mobile App Cryptography)
OWASP/owasp-mastg@d66f118#diff-8f551893e4dae6b53af43cc3114bfa38065f623e122f9e1974c2e01c25880584

• 0x05-Android-Testing-Guide
• 0x05a-Platform-Overview
• 0x05b-Basic-Security_Testing
• 0x05c-Reverse-Engineering-and-Tampering
• 0x05d-Testing-Data-Storage
• 0x05e-Testing-Cryptography
• 0x05f-Testing-Local-Authentication
• 0x05g-Testing-Network-Communication
• 0x05h-Testing-Platform-Interaction
• 0x05i-Testing-Code-Quality-and-Build-Settings
• 0x05j-Testing-Resiliency-Against-Reverse-Engineering

• 0x00-Header
• 0x02-Frontispiece
• 0x03-Overview
• 0x07-Appendix
• 0x08a-Testing-Tools
• 0x08b-Reference-Apps
• 0x09-Suggested-Reading
• Foreword
• SUMMARY

Review Android platform overview

• add defense-in-depth measures, restructure and update content
• fixing title caps, and fix outline
• fix markdown lint errors
  OWASP/owasp-mastg@d7a6ede

• 0x06-iOS-Testing-Guide
• 0x06a-Platform-Overview
• 0x06b-Basic-Security-Testing
• 0x06c-Reverse-Engineering-and-Tampering
• 0x06d-Testing-Data-Storage
• 0x06e-Testing-Cryptography
• 0x06f-Testing-Local-Authentication
• 0x06g-Testing-Network-Communication
• 0x06h-Testing-Platform-Interaction
• 0x06i-Testing-Code-Quality-and-Build-Settings
• 0x06j-Testing-Resiliency-Against-Reverse-Engineering

• android
• ios