add: empty test documents
This commit is contained in:
@@ -0,0 +1,20 @@
|
||||
|
||||
| Test-ID | ISTG Reference | Name | Tools | Status | Finding |
|
||||
| ------- | -------------- | ---- | ----- | ------ | ------- |
|
||||
| DES-02 | ISTG-DES-AUTHZ-001 | Unauthorized Access to Data Exchange Services | nmap, mitm, adb | Open | Test not yet performed. |
|
||||
| DES-06 | ISTG-DES-INFO-001 | Disclosure of Implementation Details (DES) | nmap, jadx, smali code | Open | Test not yet performed. |
|
||||
| DES-07 | ISTG-DES-INFO-003 | Disclosure of User Data | Wireshark, tcpdump, mitm | Open | Test not yet performed. |
|
||||
| DES-08 | ISTG-DES-CONF-001 | Usage of Outdated Software | testssl.sh, openssl | Open | Test not yet performed. |
|
||||
| DES-09 | ISTG-DES-CONF-002 | Presence of Unnecessary Software (Network Services) | nmap | Open | Test not yet performed. |
|
||||
| DES-10 | ISTG-DES-SCRT-001 | Access to Confidential Data | adb/root, Frida, SQLCipher, sqlite3 | Open | Test not yet performed. |
|
||||
| DES-11 | ISTG-DES-CRYPT-001 | Usage of Weak Cryptographic Algorithms (Transport Encryption) | testssl.sh, openssl | Open |Test not yet performed. |
|
||||
| DES-12 | ISTG-DES-INPV-001 | Insufficient Input Validation (Network API) | mitm | Open | Test not yet performed. |
|
||||
| DES-13 | ISTG-DES-INPV-002 | Code or Command Injection (Network API) | mitm | Open | Test not yet performed. |
|
||||
|
||||
---
|
||||
|
||||
### Example Commands
|
||||
|
||||
```bash
|
||||
|
||||
```
|
||||
Reference in New Issue
Block a user