[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"project-70755":3},{"id":4,"name":5,"fullName":6,"owner":7,"repo":5,"description":8,"homepage":9,"htmlUrl":10,"language":11,"languages":10,"totalLinesOfCode":10,"stars":12,"forks":13,"watchers":14,"openIssues":15,"contributorsCount":16,"subscribersCount":16,"size":16,"stars1d":17,"stars7d":18,"stars30d":19,"stars90d":16,"forks30d":16,"starsTrendScore":20,"compositeScore":21,"rankGlobal":10,"rankLanguage":10,"license":22,"archived":23,"fork":23,"defaultBranch":24,"hasWiki":23,"hasPages":23,"topics":25,"createdAt":10,"pushedAt":10,"updatedAt":44,"readmeContent":45,"aiSummary":46,"trendingCount":16,"starSnapshotCount":16,"syncStatus":47,"lastSyncTime":48,"discoverSource":49},70755,"mastg","OWASP\u002Fmastg","OWASP","The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.","http:\u002F\u002Fmas.owasp.org\u002F",null,"Python",12958,2749,412,188,0,11,31,83,33,113.8,"Creative Commons Attribution Share Alike 4.0 International",false,"master",[26,27,28,29,30,31,32,33,5,34,35,36,37,38,39,40,41,42,43],"android","android-application","compliancy-checklist","dynamic-analysis","hacking","ios","ios-app","mast","mobile-app","mobile-security","mstg","network-analysis","pentesting","reverse-engineering","reverse-enginnering","runtime-analysis","static-analysis","testing-cryptography","2026-06-12 04:00:57","\u003Cimg width=\"180px\" align=\"right\" style=\"float: right;\" src=\"cover.png\">\n\n# OWASP Mobile Application Security Testing Guide (MASTG)\n\n[![OWASP Flagship](https:\u002F\u002Fimg.shields.io\u002Fbadge\u002Fowasp-flagship%20project-48A646.svg)](https:\u002F\u002Fowasp.org\u002Fprojects\u002F)\n[![Creative Commons License](https:\u002F\u002Fimg.shields.io\u002Fgithub\u002Flicense\u002FOWASP\u002Fmastg?color=48A646)](https:\u002F\u002Fcreativecommons.org\u002Flicenses\u002Fby-sa\u002F4.0\u002F \"CC BY-SA 4.0\")\n\n[![Markdown Linter](https:\u002F\u002Fgithub.com\u002FOWASP\u002Fmastg\u002Factions\u002Fworkflows\u002Fmarkdown-linter.yml\u002Fbadge.svg?branch=master)](https:\u002F\u002Fgithub.com\u002FOWASP\u002Fmastg\u002Factions\u002Fworkflows\u002Fmarkdown-linter.yml)\n[![URL Checker](https:\u002F\u002Fgithub.com\u002FOWASP\u002Fmastg\u002Factions\u002Fworkflows\u002Furl-checker.yml\u002Fbadge.svg?branch=master)](https:\u002F\u002Fgithub.com\u002FOWASP\u002Fmastg\u002Factions\u002Fworkflows\u002Furl-checker.yml)\n\nThe **OWASP Mobile Application Security Testing Guide (MASTG)** is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the [OWASP Mobile Security Weakness Enumeration (MASWE)](https:\u002F\u002Fgithub.com\u002FOWASP\u002Fmaswe \"MASWE\") weaknesses, which are in alignment with the controls listed in the [OWASP Mobile Application Verification Standard (MASVS)](https:\u002F\u002Fgithub.com\u002FOWASP\u002Fmasvs \"MASVS\").\n\n> [OWASP MAS](https:\u002F\u002Fmas.owasp.org): [OWASP MASVS](https:\u002F\u002Fmas.owasp.org\u002FMASVS) ➡ [OWASP MASWE](https:\u002F\u002Fmas.owasp.org\u002FMASWE) ➡ [OWASP MASTG](https:\u002F\u002Fmas.owasp.org\u002FMASTG)\n\n\u003Cbr>\n\n\u003Ccenter>\n\u003Ca href=\"https:\u002F\u002Fmas.owasp.org\u002FMASTG\u002F\">\n\u003Cimg width=\"250px\" src=\"Document\u002FImages\u002Fopen_website.png\"\u002F>\n\u003C\u002Fa>\n\u003C\u002Fcenter>\n\n\u003Cbr>\n\n- 🌐 [Access the MASTG Web](https:\u002F\u002Fmas.owasp.org\u002FMASTG\u002F)\n- ✅ [Get the latest Mobile App Security Checklists](https:\u002F\u002Fgithub.com\u002FOWASP\u002Fmastg\u002Freleases\u002Flatest)\n- ⚡ [Contribute!](https:\u002F\u002Fmas.owasp.org\u002Fcontributing)\n- 💥 [Play with our Crackmes](https:\u002F\u002Fmas.owasp.org\u002Fcrackmes)\n- 📞 [Contact Us](https:\u002F\u002Fmas.owasp.org\u002Fcontact)\n\n\u003Cbr>\n\n## Trusted by\n\nThe OWASP MASVS, MASWE and MASTG are trusted by the following platform providers and standardization, governmental and educational institutions. [Learn more](https:\u002F\u002Fmas.owasp.org\u002FMASTG\u002F0x02b-MASVS-MASTG-Adoption\u002F).\n\n\u003Ca href=\"https:\u002F\u002Fmas.owasp.org\u002FMASTG\u002F0x02b-MASVS-MASTG-Adoption\u002F\">\n\u003Cimg src=\"Document\u002FImages\u002FOther\u002Ftrusted-by-logos.png\"\u002F>\n\u003C\u002Fa>\n\n\u003Cbr>\n\n## 🥇 MAS Advocates\n\nMAS Advocates are industry adopters of the OWASP MASVS, MASWE and MASTG who have invested a significant and consistent amount of resources to push the project forward by providing consistent high-impact contributions and continuously spreading the word. [Learn more](https:\u002F\u002Fmas.owasp.org\u002FMASTG\u002F0x02c-Acknowledgements).\n\n\u003Cbr>\n\n\u003Ca href=\"https:\u002F\u002Fmas.owasp.org\u002FMASTG\u002F0x02c-Acknowledgements#our-mastg-advocates\">\n\u003Cimg src=\"Document\u002FImages\u002FOther\u002Fnowsecure-logo.png\" width=\"200px;\" \u002F>\n\u003Cimg src=\"Document\u002FImages\u002FOther\u002Fguardsquare-logo.png\" width=\"200px;\" \u002F>\n\u003C\u002Fa>\n\n\u003Cbr>\n","OWASP Mobile Application Security Testing Guide (MASTG) 是一个全面的手册，用于移动应用的安全测试和逆向工程。它详细介绍了验证 OWASP 移动安全弱点枚举（MASWE）中列出的弱点的技术过程，这些过程与 OWASP 移动应用验证标准（MASVS）中的控制措施保持一致。项目核心功能包括静态分析、动态分析、运行时分析以及网络分析等，旨在帮助开发者和安全专家识别并修复移动应用中的潜在安全问题。该指南适用于需要进行严格安全审查的 iOS 和 Android 应用开发场景，是确保移动应用程序符合行业安全标准的重要工具。",2,"2026-06-11 03:34:00","high_star"]