Android Testing Cheat Sheet - Revision history

Dominique RIGHETTO: Migration to GitHub of the project

2019-02-16T09:40:55Z

Migration to GitHub of the project

2018-05-10T09:12:15Z

Remove TOC

2018-05-10T09:11:41Z

Replace the content by a reference to the MSTG project according to our plan

2017-09-11T06:18:04Z

‎Introduction

2017-09-11T06:17:41Z

2017-03-03T12:18:02Z

‎M7 - Client Code Quality [Client Attacks]

2017-03-03T12:01:18Z

‎Testing Methodology

2017-03-03T12:01:01Z

2017-03-03T11:52:06Z

‎Testing Methodology

2017-03-03T11:50:10Z

‎Testing Methodology

← Older revision		Revision as of 09:40, 16 February 2019
Line 16:		Line 16:

	Consult this [https://github.com/OWASP/owasp-mstg#android-testing-guide section] for information about ANDROID platform.		Consult this [https://github.com/OWASP/owasp-mstg#android-testing-guide section] for information about ANDROID platform.
−
−	~~= Other Cheatsheets =~~
−
−	~~{{Cheatsheet_Navigation_Body}}~~
−
−	\|}
−
−	~~[[Category:Cheatsheets]]~~

@@ Line 5: / Line 5: @@
 | valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |
 Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''
 After an exchange with the leaders of the [https://github.com/OWASP/owasp-mstg OWASP Mobile Security Testing Guide (MSTG)] project, it was decided to replace the content of this cheat sheet by a reference to the dedicated content on the MSTG project.

@@ Line 5: / Line 5: @@
 | valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |
 Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''
 = Introduction  =
 This cheat sheet provides a checklist of tasks to be performed to do a penetration test of an Android application. It follows the [https://www.owasp.org/index.php/OWASP_Mobile_Security_Project OWASP Mobile Top 10 Risks] list.

@@ Line 1: / Line 1: @@
-__NOTOC__
+ __NOTOC__
 <div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:Cheatsheets-header.jpg|link=]]</div>
 {| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
-| valign="top"  style="border-right: 1px dotted gray;padding-right:25px;" |
+| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |
 Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''
 = Introduction  =
 This cheat sheet provides a checklist of tasks to be performed to do a penetration test of an Android application. It follows the [https://www.owasp.org/index.php/OWASP_Mobile_Security_Project OWASP Mobile Top 10 Risks] list.
@@ Line 203: / Line 204: @@
 * Johanna Curiel
-== Other Cheatsheets ==
+= Other Cheatsheets =
 {{Cheatsheet_Navigation_Body}}

@@ Line 150: / Line 150: @@
 == M7 - Client Code Quality [Client Attacks]==
 There are 2 approaches for this part:
-*if you have access to the source code, doing code review on the Client app and the server API.
+*If you have access to the source code, doing code review on the Client app and the server API.
-*IF you don't, you could still check the code by decompiling the APK
+*If you don't, you could still check the code by decompiling the APK
 We strongly recommend a Code Review in this case. This will definitely extract many potential vulnerabilities due to bad implementation

@@ Line 11: / Line 11: @@
 == Testing Methodology ==
 [[File:AndroidPenAssessment.png]]
 A complete android pen testing involves different areas such as the ones described in the above picture

← Older revision		Revision as of 11:52, 3 March 2017
Line 10:		Line 10:

	== Testing Methodology ==		== Testing Methodology ==
−	~~[[File:Screen Shot 2017-03-03 at 10.21.58 AM.png\| 300px]]~~

	A complete android pen testing involves different areas such as the ones described in the above picture		A complete android pen testing involves different areas such as the ones described in the above picture

@@ Line 10: / Line 10: @@
 == Testing Methodology ==
-[[File:Screen Shot 2017-03-03 at 10.21.58 AM.png]]
+[[File:Screen Shot 2017-03-03 at 10.21.58 AM.png| 300px]]
 A complete android pen testing involves different areas such as the ones described in the above picture