OWASP MASTG
A comprehensive manual for mobile app security testing and reverse engineering, covering technical processes for verifying mobile security weaknesses.
0 projects
About OWASP MASTG
The **OWASP Mobile Application Security Testing Guide (MASTG)** is a flagship project providing a comprehensive manual for mobile application security testing and reverse engineering. It serves as the technical implementation layer of the OWASP Mobile Application Security (MAS) project, describing specific technical processes used to verify weaknesses identified in the OWASP Mobile Security Weakness Enumeration (MASWE). These processes are aligned with the security controls defined in the OWASP Mobile Application Verification Standard (MASVS). The guide includes detailed test cases (MASTG-TEST), knowledge files (MASTG-KNOW), and technical documentation (MASTG-TECH) for both Android and iOS platforms. It also provides practical resources such as mobile application security checklists and "crackmes" for hands-on practice with reverse engineering. While the project is a documentation framework, it utilizes automated workflows for maintenance, including Markdown linting and URL checking. Recent updates indicate the integration of AI-assisted maintenance via tools like Copilot SWE-agent for documentation corrections and knowledge file generation.
Summarised from the official page linked above.