Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[MASTG-TOOL-0108] Update Corellium tools page with benefits and limitations #2834

Merged
merged 12 commits into from
Aug 8, 2024

Conversation

cpholguera
Copy link
Collaborator

@cpholguera cpholguera commented Jul 20, 2024

Closes #2815

Update tools page for Corellium.

  • Update Tools Page: MASTG-TOOL-0108.md.
  • Update Tampering and Reverse Engineering Document
  • Update iOS Security Testing Document

@cpholguera cpholguera marked this pull request as draft July 22, 2024 09:55
Document/0x06b-iOS-Security-Testing.md Outdated Show resolved Hide resolved
docs/tools/MASTG-TOOL-0105.md Outdated Show resolved Hide resolved
docs/tools/MASTG-TOOL-0105.md Outdated Show resolved Hide resolved

1. **Cost**: Corellium is a commercial solution with a subscription-based pricing model, which may be expensive for some users.
2. **Availability**: Corellium is primarily targeted at enterprise users and may not be accessible to individual researchers or small teams.
3. **Learning Curve**: The platform offers a wide range of features, which may require some time to learn and master.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should we add the specific limitation for App Store / iMessage?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

And that about the camera as well. Anything else? Feel free to submit it as a suggestion

docs/tools/MASTG-TOOL-0105.md Outdated Show resolved Hide resolved
Co-authored-by: Jeroen Beckers <info@dauntless.be>
@cpholguera cpholguera marked this pull request as ready for review July 26, 2024 10:32
docs/tools/MASTG-TOOL-0105.md Outdated Show resolved Hide resolved
docs/tools/MASTG-TOOL-0105.md Outdated Show resolved Hide resolved
docs/tools/MASTG-TOOL-0105.md Outdated Show resolved Hide resolved
docs/tools/MASTG-TOOL-0105.md Outdated Show resolved Hide resolved
docs/tools/MASTG-TOOL-0105.md Outdated Show resolved Hide resolved
docs/tools/MASTG-TOOL-0105.md Outdated Show resolved Hide resolved
docs/tools/MASTG-TOOL-0105.md Outdated Show resolved Hide resolved
@cpholguera cpholguera changed the title Add Corellium tools page with benefits and limitations [MASTG-TOOL-0108] Update Corellium tools page with benefits and limitations Aug 4, 2024
@cpholguera cpholguera merged commit 55bf0fb into master Aug 8, 2024
3 checks passed
@cpholguera cpholguera deleted the cpholguera/add-corellium-tools-page branch August 8, 2024 15:30
serek8 pushed a commit to serek8/owasp-mstg that referenced this pull request Sep 3, 2024
…ations (OWASP#2834)

* Add Corellium tools page with benefits and limitations

* Apply suggestions from code review

Co-authored-by: Jeroen Beckers <info@dauntless.be>

* fix md links

* update corellium content

* update tool id

---------

Co-authored-by: Jeroen Beckers <info@dauntless.be>
Co-authored-by: Jeroen Beckers <me.githbub@dauntless.be>
cpholguera added a commit that referenced this pull request Oct 19, 2024
* Add weakness page

* Update MASWE-0040.md with new links (#2867)

* [MASTG-TOOL-0108] Update Corellium tools page with benefits and limitations (#2834)

* Add Corellium tools page with benefits and limitations

* Apply suggestions from code review

Co-authored-by: Jeroen Beckers <info@dauntless.be>

* fix md links

* update corellium content

* update tool id

---------

Co-authored-by: Jeroen Beckers <info@dauntless.be>
Co-authored-by: Jeroen Beckers <me.githbub@dauntless.be>

* [MASTG-TOOL-0109] Add Nope proxy (by @appknox) (#2868)

* added Nope-proxy tool

* fix spaces

* small fixes

* update tool ID

---------

Co-authored-by: Carlos Holguera <perezholguera@gmail.com>

* [MASTG-TOOL-0110] Add semgrep (#2871)

* add semgrep

* update references to @MASTG-TOOL-0110

* updated donators

* Typo fix (#2874)

Co-authored-by: Jeroen Beckers <dauntless@dauntless.be>

* Fixes #2824 (#2873)

Co-authored-by: Jeroen Beckers <dauntless@dauntless.be>

* Change news link (#2876)

Co-authored-by: Jeroen Beckers <dauntless@dauntless.be>

* Fix news not showing (#2877)

* Update MASWE-0100.md (#2878)

add refs

* Update talks.yaml (#2883)

* [MASWE-0009] Add Weak Cryptographic Key Generation (by appknox) (#2849)

* MASWE-0009

* fix spell

* fix markdown-lint

* updated weakness

* change test ID

* add semgrep as tool

* change demo IDs

* change demo id as duplicate

* Update weaknesses/MASVS-CRYPTO/MASWE-0009.md

* Apply suggestions from code review

* updated changes

* renamed TOOL-0105 -> TOOL-0109

* fix changes

* rm semgrep (will be added separately) and update refs to the tool

* update ios demo to use r2 and the MASTestApp for iOS

* update spell checker ignore words list

* rm ios folder

* add ios folder to correct name and demo based on r2

* update MASTG-TEST-0209 with libraries and references. Extended to consider also dynamic analysis.

* change to modes of introduction

* update DEMO-0011 to be about RSA key size

* Apply suggestions from code review

* add binary for demo 11

* update r2 script and output

* Update weaknesses/MASVS-CRYPTO/MASWE-0009.md

* Update tests-beta/ios/MASVS-CRYPTO/MASTG-TEST-0209.md

Co-authored-by: Carlos Holguera <perezholguera@gmail.com>

* Apply suggestions from code review

Co-authored-by: Carlos Holguera <perezholguera@gmail.com>

* Apply suggestions from code review

Co-authored-by: Sven <sven@bsddaemon.org>

* updated android demo

* changed semgrep rule to standard form

* Apply suggestions from code review

* remove extra line

* fix link

---------

Co-authored-by: Sven <sven@bsddaemon.org>
Co-authored-by: Carlos Holguera <perezholguera@gmail.com>

* fix rule filename (#2885)

* Update MASTG-DEMO-0012.md rule name (#2886)

* Fix title for MASTG-DEMO-0011.md (#2888)

* Update Sensitive Data Not Excluded From Backup

* Add a test and a demo for Android

* Add a test for iOS

* Add a demo for iOS

* Fix markdown files according to the linter

* Fix conflicts in IDs

* Apply suggestions from code review

Co-authored-by: Carlos Holguera <perezholguera@gmail.com>

* Update weaknesses/MASVS-STORAGE/MASWE-0004.md

* Apply suggestions from code review

Co-authored-by: Carlos Holguera <perezholguera@gmail.com>

* Update IDs and rephrase the evaluation sections

* Use r2 script for demo

* Fix the Observations section

* Apply suggestions from code review

* Add AndroidManifest.xml for MASTG-DEMO-0020

* rename demo folder

* Apply suggestions from code review

* Update MASWE-0004.md status to "new"

* Refactor Android backup instructions for MASTG-TEST-0216

* fix typo

---------

Co-authored-by: Carlos Holguera <perezholguera@gmail.com>
Co-authored-by: Jeroen Beckers <info@dauntless.be>
Co-authored-by: Jeroen Beckers <me.githbub@dauntless.be>
Co-authored-by: Prudhv! <58649792+sk3l10x1ng@users.noreply.github.com>
Co-authored-by: Sven <sven@bsddaemon.org>
Co-authored-by: Jeroen Beckers <dauntless@dauntless.be>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[TOOL] Corellium
2 participants