Skip to content

Port MASTG-TEST-0089 to v2: Testing Anti-Debugging Detection (ios) (by @Vulnit) - #3907

Merged
cpholguera merged 10 commits into
OWASP:masterfrom
sgIOlas:port-MASTG-TEST-0089
Jun 29, 2026
Merged

Port MASTG-TEST-0089 to v2: Testing Anti-Debugging Detection (ios) (by @Vulnit)#3907
cpholguera merged 10 commits into
OWASP:masterfrom
sgIOlas:port-MASTG-TEST-0089

Conversation

@sgIOlas

@sgIOlas sgIOlas commented Jun 23, 2026

Copy link
Copy Markdown
Collaborator

This PR closes #3005

Description

Briefly describe what changed and why. Reference the related issue where applicable.

This PR ports MASTG-TEST-0089 and related documents to v2. As an overview, here are the list of things changed:

  • Added two new tests:
    • MASTG-TEST-0x89-1: References to Debugging Detection APIs (Static)
    • MASTG-TEST-0x89-2: Runtime Use of Debugging Detection APIs (Dynamic)
  • Adds MASTG-BEST-0x89: Recommendations in line with what was done for the Android counterpart.
  • Deprecates MASTG-TEST-0089
  • Updates MASTG-KNOW-0085: Removes old writeup-style bypass techniques from the document to align it with v2 guidelines. All the knowledge included here is still relevant, I will also be adding the use of task_get_exception_ports for detecting debuggers.

AI Tool Disclosure

Check exactly one option.

  • This contribution does not include AI-generated content.
  • This contribution includes AI-generated content.

If AI tools were used to generate or substantially modify code or text, complete the following.

  • AI tools used: ChatGPT.
  • Models and versions: GPT-5.5.
  • Prompt summary: N/A
  • Your mobile security expertise level: high.

Contributor Checklist

  • I have read and understood the contributing guidelines.
  • I followed the project style guide.
  • I validated the technical correctness of my changes and understand the topic.
  • This PR adds clear value and is not spam or low-effort content.

Relevant documentation.

Contributors are expected to understand basic git and GitHub workflows, including forks, branches, commits, and pull requests. The project does not provide training. Pull requests that do not meet these minimum requirements may be closed without review.

@sgIOlas sgIOlas changed the title DRAFT: Port MASTG-TEST-0089 to v2 WIP: Port MASTG-TEST-0089 to v2 Jun 23, 2026
@sgIOlas

sgIOlas commented Jun 23, 2026

Copy link
Copy Markdown
Collaborator Author

Demos will be added in a followup PR due to time constraints

@sgIOlas sgIOlas changed the title WIP: Port MASTG-TEST-0089 to v2 Port MASTG-TEST-0089 to v2 Jun 23, 2026
@sgIOlas
sgIOlas marked this pull request as ready for review June 23, 2026 16:05
@cpholguera
cpholguera requested a review from TheDauntless June 23, 2026 16:22
Comment thread knowledge/ios/MASVS-RESILIENCE/MASTG-KNOW-0085.md Outdated

@TheDauntless TheDauntless left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@TheDauntless
TheDauntless self-requested a review June 26, 2026 10:45
@cpholguera
cpholguera merged commit 990472d into OWASP:master Jun 29, 2026
5 checks passed
@cpholguera cpholguera changed the title Port MASTG-TEST-0089 to v2 Port MASTG-TEST-0089 to v2: Testing Anti-Debugging Detection (ios) (by @Vulnit) Jun 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

MASTG v1->v2 MASTG-TEST-0089: Testing Anti-Debugging Detection (ios)

4 participants