Mobile Security Testing Techniques

ID Name Platform Used in Used in Tests Status
MASTG-TECH-0028 Get Open Connections platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0109 Intercepting Flutter HTTPS Traffic platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0013 Reverse Engineering Android Apps platform:android 3 MASTG-TEST 3 currentstatus:current
MASTG-TECH-0011 Setting Up an Interception Proxy platform:android 2 MASTG-TEST 2 currentstatus:current
MASTG-TECH-0005 Installing Apps platform:android 11 MASTG-DEMO
2 MASTG-TEST
2 currentstatus:current
MASTG-TECH-0128 Performing a Backup and Restore of App Data platform:android 1 MASTG-TEST 1 currentstatus:current
MASTG-TECH-0024 Reviewing Disassembled Native Code platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0126 Obtaining App Permissions platform:android 1 MASTG-TEST 1 currentstatus:current
MASTG-TECH-0019 Retrieving Strings platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0006 Listing Installed Apps platform:android 1 MASTG-TEST 1 currentstatus:current
MASTG-TECH-0041 Library Injection platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0032 Execution Tracing platform:android 2 MASTG-TEST 2 currentstatus:current
MASTG-TECH-0021 Information Gathering - API Usage platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0127 Inspecting an App's Backup Data platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0038 Patching platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0141 Inspecting the Merged AndroidManifest platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0116 Obtaining Information about the APK Signature platform:android 2 MASTG-TEST 2 currentstatus:current
MASTG-TECH-0026 Dynamic Analysis on Non-Rooted Devices platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0014 Static Analysis on Android platform:android 2 MASTG-DEMO
25 MASTG-TEST
25 currentstatus:current
MASTG-TECH-0027 Get Open Files platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0010 Basic Network Monitoring/Sniffing platform:android 3 MASTG-TEST 3 currentstatus:current
MASTG-TECH-0036 Emulation-based Analysis platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0009 Monitoring System Logs platform:android 2 MASTG-DEMO
3 MASTG-TEST
3 currentstatus:current
MASTG-TECH-0025 Automated Static Analysis platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0003 Obtaining and Extracting Apps platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0008 Accessing App Data Directories platform:android 1 MASTG-TEST 1 currentstatus:current
MASTG-TECH-0030 Sandbox Inspection platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0037 Symbolic Execution platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0040 Waiting for the Debugger platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0035 JNI Tracing platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0018 Disassembling Native Code platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0022 Information Gathering - Network Communication platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0017 Decompiling Java Code platform:android 2 MASTG-DEMO
17 MASTG-TEST
17 currentstatus:current
MASTG-TECH-0034 Native Code Tracing platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0117 Obtaining Information from the AndroidManifest platform:android 8 MASTG-TEST 8 currentstatus:current
MASTG-TECH-0015 Dynamic Analysis on Android platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0144 Bypassing Root Detection platform:android 1 MASTG-TEST 1 currentstatus:current
MASTG-TECH-0142 Inspecting WebView Storage platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0130 Software Composition Analysis (SCA) of Android Dependencies by Creating a SBOM platform:android 1 MASTG-DEMO
1 MASTG-TEST
1 currentstatus:current
MASTG-TECH-0033 Method Tracing platform:android 14 MASTG-TEST 14 currentstatus:current
MASTG-TECH-0002 Host-Device Data Transfer platform:android 1 MASTG-DEMO
5 MASTG-TEST
5 currentstatus:current
MASTG-TECH-0140 Obtaining Debugging Information and Symbols platform:android 1 MASTG-TEST 1 currentstatus:current
MASTG-TECH-0039 Repackaging & Re-Signing platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0043 Method Hooking platform:android 3 MASTG-TEST 3 currentstatus:current
MASTG-TECH-0100 Logging Sensitive Data from Network Traffic platform:android 1 MASTG-TEST 1 currentstatus:current
MASTG-TECH-0004 Repackaging Apps platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0112 Reverse Engineering Flutter Applications platform:android 1 MASTG-TEST 1 currentstatus:current
MASTG-TECH-0045 Runtime Reverse Engineering platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0131 Software Composition Analysis (SCA) of Android Dependencies at Build Time platform:android 1 MASTG-TEST 1 currentstatus:current
MASTG-TECH-0031 Debugging platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0007 Exploring the App Package platform:android 3 MASTG-TEST 3 currentstatus:current
MASTG-TECH-0016 Disassembling Code to Smali platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0001 Accessing the Device Shell platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0145 Working with XAPK Files platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0023 Reviewing Decompiled Java Code platform:android 8 MASTG-TEST 8 currentstatus:current
MASTG-TECH-0115 Obtaining Compiler-Provided Security Features platform:android 2 MASTG-TEST 2 currentstatus:current
MASTG-TECH-0029 Get Loaded Native Libraries platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0129 Verifying Android Dependencies at Runtime platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0042 Getting Loaded Classes and Methods Dynamically platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0108 Taint Analysis platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0020 Retrieving Cross References platform:android unusedUnused 0 currentstatus:current
MASTG-TECH-0012 Bypassing Certificate Pinning platform:android 2 MASTG-TEST 2 currentstatus:current
MASTG-TECH-0044 Process Exploration platform:android 2 MASTG-TEST 2 currentstatus:current
MASTG-TECH-0143 Monitor File System Operations in WebViews platform:android 1 MASTG-TEST 1 currentstatus:current
MASTG-TECH-0125 Intercepting Xamarin Traffic platform:generic unusedUnused 0 currentstatus:current
MASTG-TECH-0122 Passive Eavesdropping platform:generic unusedUnused 0 currentstatus:current
MASTG-TECH-0119 Intercepting HTTP Traffic by Hooking Network APIs at the Application Layer platform:generic unusedUnused 0 currentstatus:current
MASTG-TECH-0120 Intercepting HTTP Traffic Using an Interception Proxy platform:generic unusedUnused 0 currentstatus:current
MASTG-TECH-0121 Intercepting Non-HTTP Traffic Using an Interception Proxy platform:generic unusedUnused 0 currentstatus:current
MASTG-TECH-0049 Dynamic Analysis platform:generic unusedUnused 0 currentstatus:current
MASTG-TECH-0124 Achieving a MITM Position Using a Rogue Access Point platform:generic unusedUnused 0 currentstatus:current
MASTG-TECH-0051 Tampering and Runtime Instrumentation platform:generic unusedUnused 0 currentstatus:current
MASTG-TECH-0123 Achieving a MITM Position via ARP Spoofing platform:generic unusedUnused 0 currentstatus:current
MASTG-TECH-0047 Reverse Engineering platform:generic unusedUnused 0 currentstatus:current
MASTG-TECH-0048 Static Analysis platform:generic unusedUnused 0 currentstatus:current
MASTG-TECH-0050 Binary Analysis platform:generic unusedUnused 0 currentstatus:current
MASTG-TECH-0083 TBD platform:ios unusedUnused 0 placeholderstatus:placeholder
MASTG-TECH-0139 Attach to WKWebView platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0134 Monitoring the Pasteboard platform:ios 2 MASTG-TEST 2 currentstatus:current
MASTG-TECH-0132 Software Composition Analysis (SCA) of iOS Dependencies by Creating a SBOM platform:ios 1 MASTG-DEMO
1 MASTG-TEST
1 currentstatus:current
MASTG-TECH-0095 Method Hooking platform:ios 6 MASTG-TEST 6 currentstatus:current
MASTG-TECH-0067 Dynamic Analysis on iOS platform:ios 1 MASTG-TEST 1 currentstatus:current
MASTG-TECH-0137 Analyzing PrivacyInfo.xcprivacy Files platform:ios 1 MASTG-TEST 1 currentstatus:current
MASTG-TECH-0075 Reviewing Decompiled Objective-C and Swift Code platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0071 Retrieving Strings platform:ios 1 MASTG-TEST 1 currentstatus:current
MASTG-TECH-0118 Obtaining Compiler-Provided Security Features platform:ios 4 MASTG-TEST 4 currentstatus:current
MASTG-TECH-0092 Signing IPA files platform:ios 1 MASTG-TEST 1 currentstatus:current
MASTG-TECH-0090 Injecting Frida Gadget into an IPA Automatically platform:ios 2 MASTG-TEST 2 currentstatus:current
MASTG-TECH-0114 Demangling Symbols platform:ios 1 MASTG-TEST 1 currentstatus:current
MASTG-TECH-0065 Reverse Engineering iOS Apps platform:ios 4 MASTG-TEST 4 currentstatus:current
MASTG-TECH-0084 Debugging platform:ios 2 MASTG-TEST 2 currentstatus:current
MASTG-TECH-0138 Convert Plist Files to JSON platform:ios 1 MASTG-DEMO
1 MASTG-TEST
1 currentstatus:current
MASTG-TECH-0063 Setting up an Interception Proxy platform:ios 1 MASTG-TEST 1 currentstatus:current
MASTG-TECH-0074 Information Gathering - Network Communication platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0078 Automated Static Analysis platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0086 Method Tracing platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0087 Native Code Tracing platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0136 Retrieving PrivacyInfo.xcprivacy Files platform:ios 1 MASTG-TEST 1 currentstatus:current
MASTG-TECH-0056 Installing Apps platform:ios 8 MASTG-DEMO
2 MASTG-TEST
2 currentstatus:current
MASTG-TECH-0077 Reviewing Disassembled Native Code platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0110 Intercepting Flutter HTTPS Traffic platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0054 Obtaining and Extracting Apps platform:ios 3 MASTG-TEST 3 currentstatus:current
MASTG-TECH-0052 Accessing the Device Shell platform:ios 3 MASTG-TEST 3 currentstatus:current
MASTG-TECH-0061 Dumping KeyChain Data platform:ios 2 MASTG-TEST 2 currentstatus:current
MASTG-TECH-0079 Obtaining a Developer Provisioning Profile platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0096 Process Exploration platform:ios 1 MASTG-TEST 1 currentstatus:current
MASTG-TECH-0055 Launching a Repackaged App in Debug Mode platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0088 Emulation-based Analysis platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0089 Symbolic Execution platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0091 Injecting Libraries into an IPA Manually platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0066 Static Analysis on iOS platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0069 Decompiling Native Code platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0068 Disassembling Native Code platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0081 Get Open Connections platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0073 Information Gathering - API Usage platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0059 Accessing App Data Directories platform:ios 2 MASTG-TEST 2 currentstatus:current
MASTG-TECH-0058 Exploring the App Package platform:ios 21 MASTG-DEMO
6 MASTG-TEST
6 currentstatus:current
MASTG-TECH-0093 Waiting for the debugger platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0053 Host-Device Data Transfer platform:ios 3 MASTG-TEST 3 currentstatus:current
MASTG-TECH-0097 Runtime Reverse Engineering platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0057 Listing Installed Apps platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0098 Patching React Native Apps platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0112 Reverse Engineering Flutter Applications platform:ios 1 MASTG-TEST 1 currentstatus:current
MASTG-TECH-0072 Retrieving Cross References platform:ios 3 MASTG-TEST 3 currentstatus:current
MASTG-TECH-0082 Get Shared Libraries platform:ios 2 MASTG-TEST 2 currentstatus:current
MASTG-TECH-0080 Get Open Files platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0094 Getting Loaded Classes and Methods dynamically platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0135 Bypassing Biometric Authentication platform:ios 1 MASTG-DEMO 0 currentstatus:current
MASTG-TECH-0070 Extracting Information from the Application Binary platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0111 Extracting Entitlements from MachO Binaries platform:ios 4 MASTG-TEST 4 currentstatus:current
MASTG-TECH-0064 Bypassing Certificate Pinning platform:ios 3 MASTG-TEST 3 currentstatus:current
MASTG-TECH-0133 Software Composition Analysis (SCA) of iOS Dependencies by Scanning Package Manager Artifacts platform:ios 1 MASTG-TEST 1 currentstatus:current
MASTG-TECH-0085 Execution Tracing platform:ios unusedUnused 0 currentstatus:current
MASTG-TECH-0060 Monitoring System Logs platform:ios 3 MASTG-TEST 3 currentstatus:current
MASTG-TECH-0076 Reviewing Disassembled Objective-C and Swift Code platform:ios 5 MASTG-TEST 5 currentstatus:current
MASTG-TECH-0113 Obtaining Debugging Symbols platform:ios 1 MASTG-TEST 1 currentstatus:current
MASTG-TECH-0062 Basic Network Monitoring/Sniffing platform:ios 4 MASTG-TEST 4 currentstatus:current