This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Android Testing Cheat Sheet"
From OWASP
(Created page with " __NOTOC__ <div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">link=</div> {| style="padding: 0;margin:0;margin-top:10px;...") |
m |
||
| Line 6: | Line 6: | ||
Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}''' | Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}''' | ||
= Introduction = | = Introduction = | ||
| − | This | + | This cheat sheet provides a checklist of tasks to be performed to do a penetration test of an Android application. It follows the [https://www.owasp.org/index.php/OWASP_Mobile_Security_Project OWASP Mobile Top 10 Risks] list. |
| − | = | + | = Introduction = |
| − | ??? | + | |
| + | == Testing Methodology == | ||
| + | |||
| + | At the device level, there are 2 ways in which the application shall be tested. | ||
| + | # With Android device running in a factory default or normal mode | ||
| + | # With Android device running in a rooted mode | ||
| + | |||
| + | At the application level, there are 2 ways in which it shall be tested | ||
| + | # Application running on the device (to take benefits of touch related features) | ||
| + | # Application running on the emulator (to ease the task of testing using wider screen of desktop or laptop) | ||
| + | |||
| + | == Application Mapping == | ||
| + | |||
| + | Map the application for possible security vectors | ||
| + | # What is the application genre ? (Game, business, productivity etc) | ||
| + | # Does the application connect to backend web services? | ||
| + | # Is the application purely native or incorporates readymade frameworks? | ||
| + | # Does the application store data on the device? | ||
| + | # What all features of the device are used by the application? (camera, gyroscope, contacts etc) | ||
| + | |||
| + | Following high level steps are to be performed | ||
= Authors and Primary Editors = | = Authors and Primary Editors = | ||
Revision as of 02:15, 2 March 2016
|
Last revision (mm/dd/yy): 03/2/2016 IntroductionThis cheat sheet provides a checklist of tasks to be performed to do a penetration test of an Android application. It follows the OWASP Mobile Top 10 Risks list. IntroductionTesting MethodologyAt the device level, there are 2 ways in which the application shall be tested.
At the application level, there are 2 ways in which it shall be tested
Application MappingMap the application for possible security vectors
Following high level steps are to be performed Authors and Primary Editors? Other Cheatsheets |
