-
mastg
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
Here's the Open Web Application Security Project's Mobile Security Testing Guide. Detailed guides for multiple aspects of mobile security testing for both Android & iOS https://github.com/OWASP/owasp-mstg
-
InfluxDB
InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
-
If interested in reversing, you’ll need tools such as (https://ibotpeaches.github.io/Apktool/ ) and dex2jar (https://github.com/pxb1988/dex2jar) and jd-GUI (http://java-decompiler.github.io/) and I also highly recommend using smali (https://github.com/JesusFreke/smali) rather than trying to analyze the machine code if jd-GUI fails to recompile something back to the pseudo-Java. There’s actually a very good LinkedIn learning video on how to use all these tools together called Learning Android Malware Analysis, just get the trial or w/e and do the course then cancel.
-
Leesons-Modding-Instructions
The recordings of my 2 and 1/2 week journey to get a setup running for dynamic testing of Android malware
For dynamic testing, I recommend building your own OS so you can write out logs, here’s a guide https://github.com/n0x-L/Leesons-Modding-Instructions Good luck
Related posts
-
The Case for Standards in Mobile App Security
-
Google Play rolls out an "Independent security review" badge for apps
-
Need Help on Patching
-
The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
-
Mobile game security - how to?