The OWASP Mobile Security Testing Guide (MSTG) is a comprehensive manual for testing the security of mobile apps. It describes technical processes for verifying the controls listed in the OWASP Mobile Application Verification Standard (MASVS). The MSTG is meant to provide a baseline set of test cases for black-box and white-box security tests, and to help ensure completeness and consistency of the tests.
OWASP thanks the many authors, reviewers, and editors for their hard work in developing this guide. If you have any comments or suggestions on the Mobile Testing Guide, please join the discuss the MASVS or MSTG join the OWASP Mobile Security Project Slack Channel. You can sign up here:
Copyright © 2016 The OWASP Foundation. This document is released under the Creative Commons Attribution ShareAlike 3.0 license. For any reuse or distribution, you must make clear to others the license terms of this work.
| Project Leads | Lead Authors | Contributors and Reviewers |
|---|---|---|
| Bernhard Mueller, Sven Schleier | Sebastian Banescu, Bernhard Mueller, Sven Schleier, Francesco Stillavato, Abdessamad Temmar, Gerhard Wagner, Jeroen Willemsen | Cláudio André, Davide Cioccia, Stephen Corbiaux, Bao Le, Shiv Patel, Prathan Phongthiproek, Abhinav Sejpal, Anant Shrivastava, Milan Singh Thakur, Pragati Singh, Blessen Thomas, Dennis Titze, Stephanie Vanroelen, Bernard Wagner |
The Mobile Security Testing Guide was initiated by Milan Singh Thakur in 2015. The original document was hosted on Google Drive. Guide development was moved to GitHub in October 2016.
| Authors | Reviewers | Top Contributors |
|---|---|---|
| Milan Singh Thakur, Abhinav Sejpal, Pragati Singh, Mohammad Hamed Dadpour, David Fern, Mirza Ali, Rahil Parikh, Anant Shrivastava, Stephen Corbiaux, Ryan Dewhurst, Anto Joseph, Bao Lee, Nutan Kumar Panda, Julian Schütte, Stephanie Vanroelen, Gerhard Wagner | Andrew Muller, Jonathan Carter, Stephanie Vanroelen, Milan Singh Thakur | Jim Manico, Paco Hope, Pragati Singh, Yair Amit, Amin Lalji, OWASP Mobile Team |
| Authors | Reviewers | Top Contributors |
|---|---|---|
| Milan Singh Thakur, Abhinav Sejpal, Pragati Singh, Mohammad Hamed Dadpour, David Fern, Mirza Ali, Rahil Parikh | Andrew Muller, Jonathan Carter | Jim Manico, Paco Hope, Yair Amit, Amin Lalji, OWASP Mobile Team |