OWASP/mastg

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

Python

13,241

8,852 commits

updated Oct 10, 2026

See the code

README

OWASP Mobile Application Security Testing Guide (MASTG)

OWASP Flagship Creative Commons License

Markdown Linter URL Checker

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the controls listed in the OWASP Mobile Application Verification Standard (MASVS).

OWASP MAS: OWASP MASVS ➡ OWASP MASWE ➡ OWASP MASTG




Trusted by

The OWASP MASVS, MASWE and MASTG are trusted by the following platform providers and standardization, governmental and educational institutions. Learn more.


🥇 MAS Advocates

MAS Advocates are industry adopters of the OWASP MASVS, MASWE and MASTG who have invested a significant and consistent amount of resources to push the project forward by providing consistent high-impact contributions and continuously spreading the word. Learn more.



android
android-application
compliancy-checklist
dynamic-analysis
hacking
ios
ios-app
mast
mastg
mobile-app
mobile-security
mstg
network-analysis
pentesting
reverse-engineering
reverse-enginnering
runtime-analysis
static-analysis
testing-cryptography

OWASP/mastg

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

Python

13,241

8,852 commits

updated Oct 10, 2026

See the code

README

OWASP Mobile Application Security Testing Guide (MASTG)

OWASP Flagship Creative Commons License

Markdown Linter URL Checker

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the controls listed in the OWASP Mobile Application Verification Standard (MASVS).

OWASP MAS: OWASP MASVS ➡ OWASP MASWE ➡ OWASP MASTG




Trusted by

The OWASP MASVS, MASWE and MASTG are trusted by the following platform providers and standardization, governmental and educational institutions. Learn more.


🥇 MAS Advocates

MAS Advocates are industry adopters of the OWASP MASVS, MASWE and MASTG who have invested a significant and consistent amount of resources to push the project forward by providing consistent high-impact contributions and continuously spreading the word. Learn more.



android
android-application
compliancy-checklist
dynamic-analysis
hacking
ios
ios-app
mast
mastg
mobile-app
mobile-security
mstg
network-analysis
pentesting
reverse-engineering
reverse-enginnering
runtime-analysis
static-analysis
testing-cryptography

Significant stargazers

(top 24 of 61)

Keith Smiley

1,716 followers · starred Oct 2022

Sandeep Singh

1,936 followers · starred Jun 2023

Piero Toffanin

606 followers · starred Oct 2019

Raz Luvaton

158 followers · starred Feb 2022