Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[MASWE-0007] Sensitive Data Stored Unencrypted in Shared Storage Requiring No User Interaction #2594

Merged
merged 39 commits into from
Jul 3, 2024
Merged

[MASWE-0007] Sensitive Data Stored Unencrypted in Shared Storage Requiring No User Interaction #2594

merged 39 commits into from
Jul 3, 2024

Commits on Mar 5, 2024

  1. Add Risk and Tests for: Sensitive Data Stored Unencrypted in External… 

    … Locations
    @serek8
    serek8 committed Mar 5, 2024
    Configuration menu
    Copy the full SHA
    0bc19a7 View commit details
    Browse the repository at this point in the history

Commits on May 6, 2024

  1. Update risks/MASVS-STORAGE/1-store-sensitive-data-securely/data-unenc… 

    …rypted-external/android-data-unencrypted-external-frida/test.md

Co-authored-by: Carlos Holguera <[email protected]>
    @serek8 @cpholguera
    serek8 and cpholguera committed May 6, 2024
    Configuration menu
    Copy the full SHA
    af50568 View commit details
    Browse the repository at this point in the history

Commits on May 7, 2024

  1. Fix spellings

    @serek8
    serek8 committed May 7, 2024
    Configuration menu
    Copy the full SHA
    dc5a465 View commit details
    Browse the repository at this point in the history

  2. Update tests and examples

    @serek8
    serek8 committed May 7, 2024
    Configuration menu
    Copy the full SHA
    e0ba4e1 View commit details
    Browse the repository at this point in the history

  3. Update the title of a static test

    @serek8
    serek8 committed May 7, 2024
    Configuration menu
    Copy the full SHA
    7d23021 View commit details
    Browse the repository at this point in the history

  4. Update examples and fix spellings

    @serek8
    serek8 committed May 7, 2024
    Configuration menu
    Copy the full SHA
    d2df0de View commit details
    Browse the repository at this point in the history

  5. Added rules from Olivier

    @serek8
    serek8 committed May 7, 2024
    Configuration menu
    Copy the full SHA
    cc126f0 View commit details
    Browse the repository at this point in the history

Commits on Jun 3, 2024

  1. Apply suggestions from code review 

    Co-authored-by: Carlos Holguera <[email protected]>
    @serek8 @cpholguera
    serek8 and cpholguera committed Jun 3, 2024
    Configuration menu
    Copy the full SHA
    3cb96d2 View commit details
    Browse the repository at this point in the history

  2. Rename Sample to Demo

    @serek8
    serek8 committed Jun 3, 2024
    Configuration menu
    Copy the full SHA
    dfb01ff View commit details
    Browse the repository at this point in the history

  3. Update demo-2 with a reversed manifest file

    @serek8
    serek8 committed Jun 3, 2024
    Configuration menu
    Copy the full SHA
    badad99 View commit details
    Browse the repository at this point in the history

Commits on Jun 4, 2024

  1. Mention iOS in Risks

    @serek8
    serek8 committed Jun 4, 2024
    Configuration menu
    Copy the full SHA
    5e5c8dc View commit details
    Browse the repository at this point in the history

  2. Update Demos with the MASTestApp

    @serek8
    serek8 committed Jun 4, 2024
    Configuration menu
    Copy the full SHA
    ac00a36 View commit details
    Browse the repository at this point in the history

  3. Update demo-1

    @serek8
    serek8 committed Jun 4, 2024
    Configuration menu
    Copy the full SHA
    44b625b View commit details
    Browse the repository at this point in the history

Commits on Jun 5, 2024

  1. Add a new demo and refactor existing demos

    @serek8
    serek8 committed Jun 5, 2024
    Configuration menu
    Copy the full SHA
    bdcea87 View commit details
    Browse the repository at this point in the history

  2. Add a demo with listing all files

    @serek8
    serek8 committed Jun 5, 2024
    Configuration menu
    Copy the full SHA
    1d0dbb6 View commit details
    Browse the repository at this point in the history

  3. Fix the spelling errors

    @serek8
    serek8 committed Jun 5, 2024
    Configuration menu
    Copy the full SHA
    9ad1169 View commit details
    Browse the repository at this point in the history

Commits on Jun 7, 2024

  1. fix md lint issues

    @cpholguera
    cpholguera committed Jun 7, 2024
    Configuration menu
    Copy the full SHA
    e8fab33 View commit details
    Browse the repository at this point in the history

  2. fix md lint issues

    @cpholguera
    cpholguera committed Jun 7, 2024
    Configuration menu
    Copy the full SHA
    e8093a9 View commit details
    Browse the repository at this point in the history

Commits on Jun 15, 2024

  1. update rules to remove false positive separating manifest from apis. … 

    …re-run with NO_COLOR to avoid bad characters
    @cpholguera
    cpholguera committed Jun 15, 2024
    Configuration menu
    Copy the full SHA
    d79b2d8 View commit details
    Browse the repository at this point in the history

  2. minor corrections in android-data-unencrypted-shared-storage-no-user-… 

    …interaction-dynamic-file-diff and renamed output file to output.txt to follow convention
    @cpholguera
    cpholguera committed Jun 15, 2024
    Configuration menu
    Copy the full SHA
    e17a638 View commit details
    Browse the repository at this point in the history

Commits on Jun 21, 2024

  1. merge demo-4 into demo-1

    @cpholguera
    cpholguera committed Jun 21, 2024
    Configuration menu
    Copy the full SHA
    e7c2902 View commit details
    Browse the repository at this point in the history

  2. updated kotlin samples to include a password-like and API key-like st… 

    …rings
    @cpholguera
    cpholguera committed Jun 21, 2024
    Configuration menu
    Copy the full SHA
    769257c View commit details
    Browse the repository at this point in the history

  3. Minor update to the risk mitigations paragraph.

    @cpholguera
    cpholguera committed Jun 21, 2024
    Configuration menu
    Copy the full SHA
    709bfd4 View commit details
    Browse the repository at this point in the history

  4. Updated tests titles and consolidated content. Additional content reg… 

    …arding external storage removed as we will include it in the Android Data Storage chapter.
    @cpholguera
    cpholguera committed Jun 21, 2024
    Configuration menu
    Copy the full SHA
    77ddf31 View commit details
    Browse the repository at this point in the history

  5. Consolidated tests sections and linked to relevant techniques.

    @cpholguera
    cpholguera committed Jun 21, 2024
    Configuration menu
    Copy the full SHA
    247a928 View commit details
    Browse the repository at this point in the history

  6. Consolidated demos sections and titles. Added more details to the obs… 

    …ervation in android-data-unencrypted-shared-storage-no-user-interaction-dynamic-frida/demo-1/demo.md
    @cpholguera
    cpholguera committed Jun 21, 2024
    Configuration menu
    Copy the full SHA
    858b4bd View commit details
    Browse the repository at this point in the history

  7. Remove SARIF support for now

    @cpholguera
    cpholguera committed Jun 21, 2024
    Configuration menu
    Copy the full SHA
    81610ae View commit details
    Browse the repository at this point in the history

Commits on Jun 22, 2024

  1. Merge branch 'master' of https://github.com/OWASP/owasp-mastg into pr… 

    …/serek8/2594
    @cpholguera
    cpholguera committed Jun 22, 2024
    Configuration menu
    Copy the full SHA
    665171e View commit details
    Browse the repository at this point in the history

Commits on Jun 23, 2024

  1. Merge branch 'master' of https://github.com/OWASP/owasp-mastg into pr… 

    …/serek8/2594
    @cpholguera
    cpholguera committed Jun 23, 2024
    Configuration menu
    Copy the full SHA
    252ac64 View commit details
    Browse the repository at this point in the history

  2. fix paths to snippets

    @cpholguera
    cpholguera committed Jun 23, 2024
    Configuration menu
    Copy the full SHA
    7f4809c View commit details
    Browse the repository at this point in the history

Commits on Jun 24, 2024

  1. added one CWE and android risk maaping, some additional clarification… 

    …s and some minor fixes for consistency in test files
    @cpholguera
    cpholguera committed Jun 24, 2024
    Configuration menu
    Copy the full SHA
    dff1834 View commit details
    Browse the repository at this point in the history

  2. Merge branch 'master' of https://github.com/OWASP/owasp-mastg into pr… 

    …/serek8/2594
    @cpholguera
    cpholguera committed Jun 24, 2024
    Configuration menu
    Copy the full SHA
    f68d567 View commit details
    Browse the repository at this point in the history

  3. fix links to tools and tech

    @cpholguera
    cpholguera committed Jun 24, 2024
    Configuration menu
    Copy the full SHA
    d61e867 View commit details
    Browse the repository at this point in the history

  4. Merge branch 'master' of https://github.com/OWASP/owasp-mastg into pr… 

    …/serek8/2594
    @cpholguera
    cpholguera committed Jun 24, 2024
    Configuration menu
    Copy the full SHA
    99d0776 View commit details
    Browse the repository at this point in the history

  5. rename risk to weakness

    @cpholguera
    cpholguera committed Jun 24, 2024
    Configuration menu
    Copy the full SHA
    e373dcc View commit details
    Browse the repository at this point in the history

  6. move all to the weaknesses folder

    @cpholguera
    cpholguera committed Jun 24, 2024
    Configuration menu
    Copy the full SHA
    d44da95 View commit details
    Browse the repository at this point in the history

  7. Merge branch 'master' of https://github.com/OWASP/owasp-mastg into pr… 

    …/serek8/2594
    @cpholguera
    cpholguera committed Jun 24, 2024
    Configuration menu
    Copy the full SHA
    b8ad87d View commit details
    Browse the repository at this point in the history

  8. Merge branch 'master' of https://github.com/OWASP/owasp-mastg into pr… 

    …/serek8/2594
    @cpholguera
    cpholguera committed Jun 24, 2024
    Configuration menu
    Copy the full SHA
    b582669 View commit details
    Browse the repository at this point in the history

  9. include link to frida and remove ref to run.sh from test

    @cpholguera
    cpholguera committed Jun 24, 2024
    Configuration menu
    Copy the full SHA
    edeee04 View commit details
    Browse the repository at this point in the history