Resources
masvs
OWASP/masvs
The OWASP Mobile Application Security Verification Standard, defining baseline security and privacy requirements for mobile apps and used as guidance, metrics and procurement criteria.
Topics
Related projects
mvt16kMobile Verification Toolkit (MVT) is a collection of command-line utilities for gathering and analyzing forensic traces from iOS and Android devices. It uses indicators of compromise to help investigators detect spyware, and is intended for forensic professionals.
objection9.5kA Frida-powered runtime mobile exploration toolkit for assessing iOS and Android apps, with capabilities such as SSL pinning bypass, memory dumping, and heap object manipulation.
aircrack-ng7.9kAircrack-ng is a complete suite of command-line tools for auditing WiFi security, covering packet capture, injection attacks, adapter testing, and WEP/WPA cracking.
drozer4.7kdrozer is a security testing framework for Android. It assumes the role of an app to interact with the Android runtime, other apps' IPC endpoints and the OS, helping testers find vulnerabilities in apps and devices.
black-hat-rust4.5kApplied offensive security with Rust - https://kerkour.com/black-hat-rust
inspec3.1kChef InSpec is an infrastructure auditing and testing framework with a human-readable Ruby DSL for expressing compliance, security and policy requirements, runnable against local, remote, container and cloud targets.