skills.rest
ChiChou
ChiChouCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

mastg

Audit mobile app security against OWASP MASTG v2 using igf dynamic instrumentation.

1.4k|109|Updated Mar 27, 2020
Search Tags:#owasp#reporting#instrumentation#frida#mobile-security#masvs#mastg
One-click install
npx skills add https://github.com/ChiChou/grapefruit --skill mastg
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: mastg
Source: https://github.com/ChiChou/grapefruit/tree/main/skills/mastg
Command: npx skills add https://github.com/ChiChou/grapefruit --skill mastg

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Autonomous mobile security assessment aligned with OWASP MASTG v2, enabling scalable, audit-ready evaluations of Android and iOS apps.

Core Features & Use Cases

  • Checklist-driven MASVS coverage across storage, crypto, network, platform, code, resilience, and privacy.
  • Exports structured MASTG-annotated markdown reports with references to MASTG test IDs for traceability.
  • Use Case: Audit an app to identify credential exposure, insecure storage, and improper network configurations, then generate a comprehensive report for stakeholders.

Quick Start

Launch igf, connect a device, and follow the MASTG workflow to run the security audit.

Frequently Asked Questions about mastg

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a mobile security audit against OWASP MASTG v2?▼

To automate a mobile security audit against OWASP MASTG v2, use a checklist-driven workflow with igf dynamic instrumentation to evaluate MASVS categories and export MASTG-annotated markdown reports for traceability.

Can I use Frida dynamic instrumentation to test MASVS storage and crypto categories?▼

Yes, Frida-based dynamic instrumentation through igf collects evidence across MASVS storage, crypto, network, platform, code, resilience, and privacy categories to identify credential exposure and insecure configurations.

What do I need to run an autonomous mobile security assessment with igf?▼

Running an autonomous mobile security assessment requires a running igf server, a connected mobile device, and a guided session setup to collect evidence and generate audit-ready findings.

How do I generate a MASTG-annotated markdown report for an Android or iOS app?▼

Generate a MASTG-annotated markdown report by executing the igf MASTG workflow on a connected device, which analyzes the app's security posture and exports findings with references to specific MASTG test IDs.

What is the best way to check an app's security posture for improper network configurations?▼

The best way to check an app's security posture for improper network configurations is applying a structured checklist-driven analysis across MASVS network categories using igf dynamic instrumentation to gather evidence.

Does this MASTG audit workflow require a specific connected device setup?▼

Yes, the MASTG audit workflow requires a connected physical device or emulator running alongside an active igf server to successfully collect dynamic instrumentation evidence for the security report.

Related Skills

Explore More Software Engineering Skills→
ChiChouChiChou
1.4k

igf

Enumerate Frida devices and control Grapefruit IGF server hooks via CLI.

Community
Advanced
briiirussellbriiirussell
345

mobile-audit

Audit iOS and Android apps against OWASP MASVS and MASTG.

Community
Advanced
trilwutrilwu
109

testing-mobile-applications

Automates end-to-end mobile app pentesting for Android and iOS.

Community
Advanced
jd-opensourcejd-opensource
299

pentest-mobile-app

Automate Android and iOS mobile app security testing with Frida and MobSF.

Official
Advanced