Fast Forwarding Mobile Security With The OWASP Mobile Security Testing Guide
summary
A concrete checklist-backed program: a maintained MASVS + MASTG set of requirements with translations and growing government and industry adoption, plus a runnable crackme playground and automation for builds. Practical demos show TLS and pinning bypasses using Objection/Frida hooks and SSL Kill Switch v2 on iOS and Exposed/objection on Android, and biometric bypasses via runtime method patching. Contribution workflow exists, open issues drop from ~105 toward 90, and tooling and testcases are actively updated and used end-to-end.
AI-written summary · about
chapters (13)
- 0:00Intro
- 1:32Mobile Security - Questions for you!
- 3:30Mobile Security?
- 4:53The solution
- 8:37Mobile AppSec Verification Standard (MASVS)
- 11:22Current status MASVS
- 14:32Mobile Security Testing Guide (MSTG)
- 16:11Current status of MSTG
- 18:20One final note...
- 20:09Network Communication Requirements
- 26:49What happened? SSL killswitch V2
- 28:04What if you don't want to jailbreak?
- 35:12Data Storage & Privacy Requirements
related talks
29mFixing Mobile AppSec
20mMobile Application Security (MAS)
44mHow the latest MASVS & MSTG Specs Make the Best Mobile Pen Testing Cocktails
28mOWASP Mobile Application Security (MAS)
29mInsiders Guide to Mobile AppSec with Latest OWASP MASVS
19mFlagship Projects: Mobile Security Testing Guide
21mSecuring Mobile Apps with OWASP MASVS & MSTG
30mTopics of Interest: Creating an IoT-connected Mobile App Compliance Program... MASVS