Release 1.1.1

Author: commjoen

CHANGELOG.md

@@ -1,5 +1,26 @@
 This document is automatically generated at {{gitbook.time}}
 
+1.1.1 7 May 2019:
+
+- Improvements on various tool related parts, such as how to use ondeviceconsole, adb, nscurl, Frida & Needle
+- Updated 0x4e regarding SMS communication
+- Many grammer/style updates
+- Added Android description regarding MASVS requirement 7.8
+- Updated contributorlist
+- Various updates on instructions regarding TLS & encryption
+- Removed some erroneous Information
+- Fixed parts of the allignment of the MASVS requirements with the MSTG
+- Updated information on various topics such as jailbreaking & network Interception on both iOS and Android
+- Added some steps for Frida detection
+- Added writeups on Android changes, regarding permissions, application signing, device identifiers, key-attestation, and more.
+- Extended guidance on Safetynet attestation
+- Added information on Magisk
+- Added Firebase misconfiguration information
+- Added references to more testing tools
+- Updated contributorlist
+- Added a lot of information to iOS platform testing
+- Added a lot of fixes for our book-release
+
 1.1.0 30 Nov 2018:
 
 - Added more samples in Kotlin.

Document/0x02-Frontispiece.md

@@ -10,7 +10,7 @@ OWASP thanks the many authors, reviewers, and editors for their hard work in dev
 
 Copyright © 2018 The OWASP Foundation. This work is licensed under a [Creative Commons Attribution-ShareAlike 4.0 International License](https://creativecommons.org/licenses/by-sa/4.0/). For any reuse or distribution, you must make clear to others the license terms of this work.
 
-<img src="Images/CC-license.png" alt="drawing" width="250">
+<img src="Images/CC-license.png" alt="drawing" width="150">
 
 ## Acknowledgments
 

Document/CHANGELOG.md

@@ -1,5 +1,26 @@
 This document is automatically generated at {{gitbook.time}}
 
+1.1.1 7 May 2019:
+
+- Improvements on various tool related parts, such as how to use ondeviceconsole, adb, nscurl, Frida & Needle
+- Updated 0x4e regarding SMS communication
+- Many grammer/style updates
+- Added Android description regarding MASVS requirement 7.8
+- Updated contributorlist
+- Various updates on instructions regarding TLS & encryption
+- Removed some erroneous Information
+- Fixed parts of the allignment of the MASVS requirements with the MSTG
+- Updated information on various topics such as jailbreaking & network Interception on both iOS and Android
+- Added some steps for Frida detection
+- Added writeups on Android changes, regarding permissions, application signing, device identifiers, key-attestation, and more.
+- Extended guidance on Safetynet attestation
+- Added information on Magisk
+- Added Firebase misconfiguration information
+- Added references to more testing tools
+- Updated contributorlist
+- Added a lot of information to iOS platform testing
+- Added a lot of fixes for our book-release
+
 1.1.0 30 Nov 2018:
 
 - Added more samples in Kotlin.

Generated/MSTG-EN.docx

@@ -22,9 +22,10 @@ Files:
 ## Release process:
 1. Sync @sushi2k's repository
 2. Update the Changelog.md
-3. Commit the changes (with message "Release <version>")
-4. Push a tag with the new version (git tag -a <version> -m "Release message that will be on github")
-5. Update the Leanpub Files at Leanpub
-6. Update OWASP Wiki if necessary
-7. Update the book at lulu.com (Ask @sushi2k)
-8. Tweet about it with @OWASP-MSTG.
+3. Generate new PDFS with the new version
+4. Commit the changes (with message "Release <version>")
+5. Push a tag with the new version (git tag -a <version> -m "Release message that will be on github")
+6. Update the Leanpub Files at Leanpub
+7. Update OWASP Wiki if necessary
+8. Update the book at lulu.com (Ask @sushi2k)
+9. Tweet about it with @OWASP-MSTG.

Generated/MSTG-EN.epub

@@ -5,9 +5,9 @@
   "structure": {
     "readme": "Foreword.md"
   },
-  "title" : "OWASP Mobile Security Testing Guide 1.1.3",
+  "title" : "OWASP Mobile Security Testing Guide 1.1.1",
   "language": "en",
-  "description" : "The MSTG is a comprehensive manual for mobile app security testing and reverse engineering for iOS and Android mobile security testers with the following content: 1. Mobile platform internals 2. Security testing in the mobile app development life cycle 3. Basic static and dynamic security testing 4. Mobile app reverse engineering and tampering 5. Assessing software protections 6. Detailed test cases that map to the requirements in the MASVS."
+  "description" : "the MSTG is a comprehensive manual for mobile app security testing and reverse engineering for iOS and Android mobile security testers with the following content: 1. Mobile platform internals 2. Security testing in the mobile app development life cycle 3. Basic static and dynamic security testing 4. Mobile app reverse engineering and tampering 5. Assessing software protections 6. Detailed test cases that map to the requirements in the MASVS."
 
 
 }