The Mobile Security Testing Guide (MSTG) is a manual for testing the security of mobile apps. It describes technical processes for verifying the controls listed in the OWASP Mobile Application Verification Standard (MASVS). The MSTG is meant to provide a baseline set of test cases for black-box and white-box security tests, and to help ensure c…
☆35Dec 22, 2016Updated 9 years ago
Alternatives and similar repositories for owasp-mstg
Users that are interested in owasp-mstg are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The OWASP Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and…☆19Aug 10, 2019Updated 7 years ago
- An automated wrapper script for patching iOS applications (IPA files) and work on non-jailbroken device☆122Oct 6, 2017Updated 9 years ago
- Icahn Graduate School of Medicine: Systems Biology & Biotechnology Specialization☆11Jun 17, 2017Updated 9 years ago
- A small script for my recon during bug hunting. Needs some modifications☆18Mar 5, 2020Updated 6 years ago
- Bug Bounty Recon Script☆19Aug 14, 2020Updated 6 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Just some bash scripting to help your recon.☆16Feb 4, 2026Updated 8 months ago
- Learn 101 is a challenge to keep the learning spirit going on and challenge myself to learn something daily for 101 days.☆30Jun 7, 2022Updated 4 years ago
- The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application pen…☆5,318Feb 8, 2024Updated 2 years ago
- ☆21Feb 19, 2025Updated last year
- ☆27Feb 28, 2023Updated 3 years ago
- List of bug bounty programs of companies/organisations in Switzerland☆14Oct 28, 2021Updated 5 years ago
- A simple Cherry Tree template that can be used to organize bug bounties☆40Aug 13, 2019Updated 7 years ago
- ☆13Aug 15, 2017Updated 9 years ago
- ASYRV es una aplicación escrita en PHP/MySQL, con Servicios Web mal desarrollados(SOAP/REST/XML), esperando ayudar a los entusiastas de l…☆23Oct 13, 2018Updated 8 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- An automated, reliable scanner for the Log4Shell (CVE-2021-44228) vulnerability.☆47Jan 22, 2025Updated last year
- Threat Hunt Investigation Methodology and Procedure☆15Jul 11, 2022Updated 4 years ago
- Yet another collection of Frida scripts.☆21Mar 6, 2022Updated 4 years ago
- This simple tool helps save a lot of time when gathering information about geolocation. Enter latitude and longitude once and click the b…☆28Mar 25, 2024Updated 2 years ago
- Ruby ARP Toolkit☆14Apr 15, 2021Updated 5 years ago
- ☆15Feb 5, 2026Updated 8 months ago
- The vulnerability management guide should help to breakdown vulnerability management process into a manageable repeatable cycles tailored…☆17Jul 23, 2020Updated 6 years ago
- Some of my bug bounty tools☆52Oct 23, 2019Updated 7 years ago
- This Burp extension helps you to find usages of postMessage and recvMessage☆14Feb 20, 2020Updated 6 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- OSCP tools and notes☆40Jan 21, 2019Updated 7 years ago
- Bash script to automate Bug Bounty Reconnaissance☆46Jan 3, 2021Updated 5 years ago
- Documentation of vmc☆16May 19, 2026Updated 5 months ago
- ☆13Mar 27, 2011Updated 15 years ago
- Converts DER certificates from Burp to store into Android cert store☆10Jul 7, 2016Updated 10 years ago
- Recon for Department of Defense HackerOne program☆49Sep 27, 2018Updated 8 years ago
- All kind of frida stuff when needed in pentesting or reverse engineering of an android app - The perfect starter kit☆18Jun 2, 2020Updated 6 years ago
- Useful Windows and AD tools☆15Feb 20, 2022Updated 4 years ago
- Linux SocketCAN kernel module for the CANalyst II USB CAN adapter☆12Jun 10, 2019Updated 7 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Implementation of Max Kellermann's exploit for CVE-2022-0847☆13Mar 8, 2022Updated 4 years ago
- Exploit XXE Out-Of-Band Vulnerability Easily☆16Jul 28, 2016Updated 10 years ago
- Most of the Google Acquisitions for Bug Bounty Hunter.☆67Sep 3, 2022Updated 4 years ago
- My gfPatterns☆15Aug 31, 2021Updated 5 years ago
- A Java web knocking tool for sending a single HTTP/S request to your web server in order to authorise the execution of a premeditated Ope…☆15May 19, 2015Updated 11 years ago
- Exploitation Script for CVE-2020-0688 "Microsoft Exchange default MachineKeySection deserialize vulnerability"☆11Apr 1, 2020Updated 6 years ago
- ☆18Dec 8, 2022Updated 3 years ago