Projects/OWASP Mobile Security Project - Mobile Tools - Revision history

Prateek Gianchandani at 18:08, 18 February 2014

2014-02-18T18:08:52Z

Prateek Gianchandani at 18:05, 18 February 2014

2014-02-18T18:05:37Z

Jason Haddix at 02:00, 4 February 2014

2014-02-04T02:00:39Z

Chris Neasbitt: Pluralized feature in GoatDroid description.

2013-10-14T18:16:41Z

Pluralized feature in GoatDroid description.

Ely de TRAVIESO at 16:03, 7 October 2013

2013-10-07T16:03:46Z

Jack Mannino at 14:53, 22 May 2013

2013-05-22T14:53:15Z

Jack Mannino at 14:52, 22 May 2013

2013-05-22T14:52:56Z

Jack Mannino at 14:49, 22 May 2013

2013-05-22T14:49:41Z

Jack Mannino at 14:47, 22 May 2013

2013-05-22T14:47:27Z

Jack Mannino at 14:44, 22 May 2013

2013-05-22T14:44:58Z

@@ Line 52: / Line 52: @@
 * Binary Patching (4 exercises)
-[https://damnvulnerableiosapp.com DVIA Home Page]
+[http://damnvulnerableiosapp.com DVIA Home Page]
 [https://www.owasp.org/index.php/OWASP_DVIA DVIA OWASP Project Page]

← Older revision		Revision as of 18:05, 18 February 2014
Line 52:		Line 52:
	* Binary Patching (4 exercises)		* Binary Patching (4 exercises)

		+	[https://damnvulnerableiosapp.com DVIA Home Page]

	[https://www.owasp.org/index.php/OWASP_DVIA DVIA OWASP Project Page]		[https://www.owasp.org/index.php/OWASP_DVIA DVIA OWASP Project Page]

← Older revision		Revision as of 02:00, 4 February 2014
Line 37:		Line 37:

	The iGoat source code is available on Google Code [http://code.google.com/p/owasp-igoat/ iGoat Source Code]		The iGoat source code is available on Google Code [http://code.google.com/p/owasp-igoat/ iGoat Source Code]
		+
		+	== Damn Vulnerable iOS Application ==
		+
		+	Damn Vulnerable iOS application is a project started by Prateek Gianchandani which gives mobile testers and developers an iOS application to practice attacking/defending skill sets. Each challenge area corresponds to an in-depth article designed to teach the fundamentals of mobile security on the iOS platform. Some challenge categories include multiple challenge types.
		+
		+	The current challenge categories:
		+
		+	* Insecure Data Storage (4 exercises)
		+	* Jailbreak Detection (2 exercises)
		+	* Runtime Manipulation (3 exercises)
		+	* Transport Layer Security (1 exercise)
		+	* Client Side Injection (1 exercise)
		+	* Broken Cryptography (1 exercise)
		+	* Binary Patching (4 exercises)
		+
		+
		+	[https://www.owasp.org/index.php/OWASP_DVIA DVIA OWASP Project Page]
		+
		+	[https://github.com/prateek147/DVIA DVIA Github Source]
		+
		+	[http://damnvulnerableiosapp.com/#learn DVIA Learning Resources]

	== MobiSec ==		== MobiSec ==

@@ Line 9: / Line 9: @@
 == GoatDroid  ==
-OWASP GoatDroid is a fully functional and self-contained training environment for educating developers and testers on Android security. GoatDroid requires minimal dependencies and is ideal for both Android beginners as well as more advanced users. The project currently includes two applications: FourGoats, a location-based social network, and Herd Financial, a mobile banking application. There are also several feature that greatly simplify usage within a training environment or for absolute beginners who want a good introduction to working with the Android platform.
+OWASP GoatDroid is a fully functional and self-contained training environment for educating developers and testers on Android security. GoatDroid requires minimal dependencies and is ideal for both Android beginners as well as more advanced users. The project currently includes two applications: FourGoats, a location-based social network, and Herd Financial, a mobile banking application. There are also several features that greatly simplify usage within a training environment or for absolute beginners who want a good introduction to working with the Android platform.
 As the Android SDK introduces new features, the GoatDroid contributors will strive to implement up-to-date lessons that can educate developers and security testers on new security issues. The project currently provides coverage for most of the OWASP Top 10 Mobile Risks and also includes a bunch of other problems as well.

← Older revision		Revision as of 16:03, 7 October 2013
Line 45:		Line 45:

	MobiSec can be downloaded from Sourceforge: [http://sourceforge.net/p/mobisec/wiki/Home/ MobiSec Download Repository]		MobiSec can be downloaded from Sourceforge: [http://sourceforge.net/p/mobisec/wiki/Home/ MobiSec Download Repository]
		+
		+	== Androick ==
		+
		+	Androick is a collaborative research project from PHONESEC Ltd. With our tool, you can evaluate some risks on Android mobile applications.
		+	Androick is a tool that allows any user to analyze an Android application. It can get the apk file, all the datas and the databases in sqlite3 and csv format.
		+	Only for Pentesters or Researchers.
		+
		+	[https://www.owasp.org/index.php/Projects/OWASP_Androick_Project Androick Project Page]

← Older revision		Revision as of 14:53, 22 May 2013
Line 1:		Line 1:
−	== ~~iMas~~ ==	+	== iMAS ==

	iMAS is a collaborative research project from the MITRE Corporation focused on open source iOS security controls. Today, iOS meets the enterprise security needs of customers, however many security experts cite critical vulnerabilities and have demonstrated exploits, which pushes enterprises to augment iOS deployments with commercial solutions. The iMAS intent is to protect iOS applications and data beyond the Apple provided security model and reduce the adversary’s ability and efficiency to perform recon, exploitation, control and execution on iOS mobile applications. iMAS will transform the effectiveness of the existing iOS security model across major vulnerability areas including the System Passcode, jailbreak, debugger / run-time, flash storage, and the system keychain. Research outcomes include an open source secure application framework, including an application container, developer and validation tools/techniques.		iMAS is a collaborative research project from the MITRE Corporation focused on open source iOS security controls. Today, iOS meets the enterprise security needs of customers, however many security experts cite critical vulnerabilities and have demonstrated exploits, which pushes enterprises to augment iOS deployments with commercial solutions. The iMAS intent is to protect iOS applications and data beyond the Apple provided security model and reduce the adversary’s ability and efficiency to perform recon, exploitation, control and execution on iOS mobile applications. iMAS will transform the effectiveness of the existing iOS security model across major vulnerability areas including the System Passcode, jailbreak, debugger / run-time, flash storage, and the system keychain. Research outcomes include an open source secure application framework, including an application container, developer and validation tools/techniques.

← Older revision		Revision as of 14:49, 22 May 2013
Line 39:		Line 39:

	== MobiSec ==		== MobiSec ==
		+
		+	The MobiSec Live Environment Mobile Testing Framework project is a live environment for testing mobile environments, including devices, applications, and supporting infrastructure. The purpose is to provide attackers and defenders the ability to test their mobile environments to identify design weaknesses and vulnerabilities. The MobiSec Live Environment provides a single environment for testers to leverage the best of all available open source mobile testing tools, as well as the ability to install additional tools and platforms, that will aid the penetration tester through the testing process as the environment is structured and organized based on an industry‐proven testing framework. Using a live environment provides penetration testers the ability to boot the MobiSec Live Environment on any Intel-based system from a DVD or USB flash drive, or run the test environment within a virtual machine.
		+
		+	[https://www.owasp.org/index.php/Projects/OWASP_Mobile_Security_Project_-_MobiSec Project Page]
		+
		+	MobiSec can be downloaded from Sourceforge: [http://sourceforge.net/p/mobisec/wiki/Home/ MobiSec Download Repository]

@@ Line 5: / Line 5: @@
 [https://www.owasp.org/index.php/OWASP_iMAS_iOS_Mobile_Application_Security_Project iMas Project Page]
-The source code for iMAS is available on GitHub: [https://github.com/project-imas/about Source Code]
+The source code for iMAS is available on GitHub: [https://github.com/project-imas/about iMAS Source Code]
 == GoatDroid  ==
@@ Line 13: / Line 13: @@
 GoatDroid requires minimal dependencies, and is ideal for both Android beginners as well as more advanced users. The project currently includes two applications: FourGoats, a location based social network, and Herd Financial, a mobile banking application.
-You can find GoatDroid on GitHub: [https://github.com/jackMannino/OWASP-GoatDroid-Project Source Code]
+You can find GoatDroid on GitHub: [https://github.com/jackMannino/OWASP-GoatDroid-Project GoatDroid Source Code]
 [https://www.owasp.org/index.php/Projects/OWASP_GoatDroid_Project GoatDroid Project Page]
@@ Line 34: / Line 34: @@
 iGoat is free software, released under the GPLv3 license.
-[https://www.owasp.org/index.php/Projects/OWASP_Mobile_Security_Project_-_Dangers_of_Jailbreaking_and_Rooting_Mobile_Devices Dangers of Jailbreaking & Rooting Mobile Devices]
+[https://www.owasp.org/index.php/OWASP_iGoat_Project iGoat Project Page]
 == MobiSec ==