Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[MASWE-0001, MASWE-0027, MASWE-0108] MAS Risks and Tests (PREVIEW DRAFT) #2518

Merged
merged 55 commits into from
Feb 14, 2024
Merged

[MASWE-0001, MASWE-0027, MASWE-0108] MAS Risks and Tests (PREVIEW DRAFT) #2518

merged 55 commits into from
Feb 14, 2024

Commits on Oct 13, 2023

  1. first draft

    @cpholguera
    cpholguera committed Oct 13, 2023
    Configuration menu
    Copy the full SHA
    b65abc8 View commit details
    Browse the repository at this point in the history

  2. add mitigation

    @cpholguera
    cpholguera committed Oct 13, 2023
    Configuration menu
    Copy the full SHA
    2eb330e View commit details
    Browse the repository at this point in the history

Commits on Oct 14, 2023

  1. update mitigations and risks

    @cpholguera
    cpholguera committed Oct 14, 2023
    Configuration menu
    Copy the full SHA
    db1b5df View commit details
    Browse the repository at this point in the history

Commits on Oct 27, 2023

  1. fixes for Sensitive Data in Network Traffic

    @cpholguera
    cpholguera committed Oct 27, 2023
    Configuration menu
    Copy the full SHA
    87693b9 View commit details
    Browse the repository at this point in the history

  2. add new sample tests

    @cpholguera
    cpholguera committed Oct 27, 2023
    Configuration menu
    Copy the full SHA
    844af15 View commit details
    Browse the repository at this point in the history

Commits on Dec 9, 2023

  1. new structure for risks and tests

    @cpholguera
    cpholguera committed Dec 9, 2023
    Configuration menu
    Copy the full SHA
    93b3555 View commit details
    Browse the repository at this point in the history

  2. Add content to all risk.md files and delete unused risk files

    @cpholguera
    cpholguera committed Dec 9, 2023
    Configuration menu
    Copy the full SHA
    79c2d4d View commit details
    Browse the repository at this point in the history

Commits on Jan 5, 2024

  1. remove tests folders

    @cpholguera
    cpholguera committed Jan 5, 2024
    Configuration menu
    Copy the full SHA
    c6c9b12 View commit details
    Browse the repository at this point in the history

  2. rename mitigation files

    @cpholguera
    cpholguera committed Jan 5, 2024
    Configuration menu
    Copy the full SHA
    7232276 View commit details
    Browse the repository at this point in the history

  3. remove mappings/owasp-masvs for all risks. It will be automatically g… 

    …enerated.
    @cpholguera
    cpholguera committed Jan 5, 2024
    Configuration menu
    Copy the full SHA
    f12dcb7 View commit details
    Browse the repository at this point in the history

Commits on Jan 9, 2024

  1. remove mappings/owasp-masvs for all risks. It will be automatically g… 

    …enerated.
    @cpholguera
    cpholguera committed Jan 9, 2024
    Configuration menu
    Copy the full SHA
    0fdb602 View commit details
    Browse the repository at this point in the history

Commits on Jan 12, 2024

  1. First draft - Risk and Test update for Android logging

    @sushi2k
    sushi2k committed Jan 12, 2024
    Configuration menu
    Copy the full SHA
    30967a4 View commit details
    Browse the repository at this point in the history

Commits on Jan 13, 2024

  1. fix test aliases and add missing

    @cpholguera
    cpholguera committed Jan 13, 2024
    Configuration menu
    Copy the full SHA
    452a1a4 View commit details
    Browse the repository at this point in the history

  2. Add secure random number generation and update insecure random usage … 

    …test. Examples and rules were separated into folders.
    @cpholguera
    cpholguera committed Jan 13, 2024
    Configuration menu
    Copy the full SHA
    6a5af6b View commit details
    Browse the repository at this point in the history

  3. Merge branch 'mastg-risks-and-tests' of https://github.com/OWASP/owas… 

    …p-mastg into mastg-risks-and-tests
    @cpholguera
    cpholguera committed Jan 13, 2024
    Configuration menu
    Copy the full SHA
    8ffffd0 View commit details
    Browse the repository at this point in the history

  4. Remove "Modes of Introduction" section from risk.md files

    @cpholguera
    cpholguera committed Jan 13, 2024
    Configuration menu
    Copy the full SHA
    a5fa9c8 View commit details
    Browse the repository at this point in the history

  5. Update method tracing in Android techniques

    @cpholguera
    cpholguera committed Jan 13, 2024
    Configuration menu
    Copy the full SHA
    25d9660 View commit details
    Browse the repository at this point in the history

  6. Fix method trace link in test.md

    @cpholguera
    cpholguera committed Jan 13, 2024
    Configuration menu
    Copy the full SHA
    42c6b3a View commit details
    Browse the repository at this point in the history

  7. Update CWE mappings in risk.md files to be a list of IDs

    @cpholguera
    cpholguera committed Jan 13, 2024
    Configuration menu
    Copy the full SHA
    65348aa View commit details
    Browse the repository at this point in the history

  8. Update test type to be a list. Updated platform specific mitigations … 

    …links to be only in tests.
    @cpholguera
    cpholguera committed Jan 13, 2024
    Configuration menu
    Copy the full SHA
    f30bc9c View commit details
    Browse the repository at this point in the history

  9. Add prerequisites folder with 2 examples

    @cpholguera
    cpholguera committed Jan 13, 2024
    Configuration menu
    Copy the full SHA
    d133445 View commit details
    Browse the repository at this point in the history

  10. Refactor insecure random API test case. Link to existing prerequisite… 

    …s in test and minor content updates.
    @cpholguera
    cpholguera committed Jan 13, 2024
    Configuration menu
    Copy the full SHA
    ca13fb0 View commit details
    Browse the repository at this point in the history

  11. Add content to the static analysis technique for Android apps

    @cpholguera
    cpholguera committed Jan 13, 2024
    Configuration menu
    Copy the full SHA
    d93ccfd View commit details
    Browse the repository at this point in the history

  12. Update insecure random API link and method trace links to techniques

    @cpholguera
    cpholguera committed Jan 13, 2024
    Configuration menu
    Copy the full SHA
    7c1fc10 View commit details
    Browse the repository at this point in the history

Commits on Jan 14, 2024

  1. Update insecure random number generator rule in MASVS-CRYPTO

    @cpholguera
    cpholguera committed Jan 14, 2024
    Configuration menu
    Copy the full SHA
    4226549 View commit details
    Browse the repository at this point in the history

  2. Update content in insecure random test examples and add SARIF. Add su… 

    …mmary to code samples.
    @cpholguera
    cpholguera committed Jan 14, 2024
    Configuration menu
    Copy the full SHA
    b7e5084 View commit details
    Browse the repository at this point in the history

Commits on Jan 15, 2024

  1. update with example

    @sushi2k
    sushi2k committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    086d0b9 View commit details
    Browse the repository at this point in the history

  2. Merge branch 'mastg-risks-and-tests' of https://github.com/OWASP/owas… 

    …p-mastg into mastg-risks-and-tests
    @sushi2k
    sushi2k committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    a638776 View commit details
    Browse the repository at this point in the history

  3. Update test case

    @sushi2k
    sushi2k committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    40be282 View commit details
    Browse the repository at this point in the history

  4. update frida-trace

    @sushi2k
    sushi2k committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    6c4abef View commit details
    Browse the repository at this point in the history

  5. add example for frida-trace

    @sushi2k
    sushi2k committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    c8a0a62 View commit details
    Browse the repository at this point in the history

  6. updated tests according to the latest guidelines

    @cpholguera
    cpholguera committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    1263af8 View commit details
    Browse the repository at this point in the history

  7. delete empty risk files

    @cpholguera
    cpholguera committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    80c2d88 View commit details
    Browse the repository at this point in the history

  8. fix for android-data-in-logs-semgrep

    @cpholguera
    cpholguera committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    03d4e96 View commit details
    Browse the repository at this point in the history

  9. remove mstg- rules

    @cpholguera
    cpholguera committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    ae25710 View commit details
    Browse the repository at this point in the history

  10. delete empty test files

    @cpholguera
    cpholguera committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    e9366b7 View commit details
    Browse the repository at this point in the history

Commits on Jan 16, 2024

  1. Move the test android-data-in-traffic-capture from NETWORK-1 to PRIVA… 

    …CY-1. Include mitmproxy example and updated technique. Added mitmtproxy as a tool.
    @cpholguera
    cpholguera committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    7034415 View commit details
    Browse the repository at this point in the history

Commits on Jan 19, 2024

  1. update insecure network comm risk

    @cpholguera
    cpholguera committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    ab8ecd0 View commit details
    Browse the repository at this point in the history

  2. update current example risks

    @cpholguera
    cpholguera committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    9e95276 View commit details
    Browse the repository at this point in the history

  3. fix other risks metadata

    @cpholguera
    cpholguera committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    3e5a694 View commit details
    Browse the repository at this point in the history

  4. leave only 3 example risks

    @cpholguera
    cpholguera committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    4b03f0e View commit details
    Browse the repository at this point in the history

  5. rm initial tests

    @cpholguera
    cpholguera committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    0fe2c5c View commit details
    Browse the repository at this point in the history

  6. add privacy risk

    @cpholguera
    cpholguera committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    c3e48f5 View commit details
    Browse the repository at this point in the history

  7. remove initial examples

    @cpholguera
    cpholguera committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    8ceb0b6 View commit details
    Browse the repository at this point in the history

  8. update privacy example

    @cpholguera
    cpholguera committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    186d731 View commit details
    Browse the repository at this point in the history

  9. update privacy example

    @cpholguera
    cpholguera committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    9b2e9cd View commit details
    Browse the repository at this point in the history

  10. update example and technique

    @cpholguera
    cpholguera committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    0a04b97 View commit details
    Browse the repository at this point in the history

Commits on Jan 21, 2024

  1. Merge branch 'master' of https://github.com/OWASP/owasp-mastg into ma… 

    …stg-risks-and-tests
    @cpholguera
    cpholguera committed Jan 21, 2024
    Configuration menu
    Copy the full SHA
    689d06d View commit details
    Browse the repository at this point in the history

Commits on Jan 24, 2024

  1. Update android-data-in-logs-frida/example-1

    @cpholguera
    cpholguera committed Jan 24, 2024
    Configuration menu
    Copy the full SHA
    6d80dc7 View commit details
    Browse the repository at this point in the history

Commits on Feb 2, 2024

  1. rm -q option

    @cpholguera
    cpholguera committed Feb 2, 2024
    Configuration menu
    Copy the full SHA
    374b9ab View commit details
    Browse the repository at this point in the history

Commits on Feb 7, 2024

  1. Merge branch 'master' of https://github.com/OWASP/owasp-mastg into ma… 

    …stg-risks-and-tests
    @cpholguera
    cpholguera committed Feb 7, 2024
    Configuration menu
    Copy the full SHA
    05f2112 View commit details
    Browse the repository at this point in the history

Commits on Feb 14, 2024

  1. add test overviews

    @cpholguera
    cpholguera committed Feb 14, 2024
    Configuration menu
    Copy the full SHA
    96dd1c5 View commit details
    Browse the repository at this point in the history

  2. Update .vscode/settings.json to disable GitHub code scanning

    @cpholguera
    cpholguera committed Feb 14, 2024
    Configuration menu
    Copy the full SHA
    8a239b3 View commit details
    Browse the repository at this point in the history

  3. Remove example-2 for logging APIs

    @cpholguera
    cpholguera committed Feb 14, 2024
    Configuration menu
    Copy the full SHA
    74ec6e8 View commit details
    Browse the repository at this point in the history

  4. fix 400 link

    @cpholguera
    cpholguera committed Feb 14, 2024
    Configuration menu
    Copy the full SHA
    d62ff0a View commit details
    Browse the repository at this point in the history