MASTG Chapter
Tools
File Line Number
N/A (new tool proposal)
Context
Tool proposal for the Tools chapter (new testing tool). Author disclosure: I am the author of this tool. Noting this up front per the contribution guidelines on referencing tools you are related to. Tool: ADB Auditor Code (open source): https://github.com/thecybersandeep/adbauditor Hosted, free, no signup: https://adbauditor.com Platform: Android What it is ADB Auditor speaks the ADB protocol directly from the browser over WebUSB. With USB debugging enabled, a tester gets the following with no Android SDK install and no local server, and with no device data leaving the machine: - listing installed apps / app inventory - a device file browser (root supported) - an interactive device shell - screen capture - a set of MASTG-aligned checks Why it may help the MASTG It provides full, transparent device access rather than an automated black-box score, and lets a tester run several existing techniques without a local toolchain (useful for workshops and quick triage on machines without the SDK): - @MASTG-TECH-0001 Accessing the Device Shell - @MASTG-TECH-0006 Listing Installed Apps - @MASTG-TECH-0008 Accessing App Data Directories - @MASTG-TECH-0009 Monitoring System Logs - @MASTG-TECH-0002 Host-Device Data Transfer How it differs from tools already listed adb (@MASTG-TOOL-0004) and Scrcpy (@MASTG-TOOL-0024) require a local install. ADB Auditor runs the ADB transport in the browser over WebUSB, so nothing is installed. It complements those tools rather than replacing them. Maintenance: actively maintained (see repo commit history).
MASTG Chapter
Tools
File Line Number
N/A (new tool proposal)
Context
Tool proposal for the Tools chapter (new testing tool). Author disclosure: I am the author of this tool. Noting this up front per the contribution guidelines on referencing tools you are related to. Tool: ADB Auditor Code (open source): https://github.com/thecybersandeep/adbauditor Hosted, free, no signup: https://adbauditor.com Platform: Android What it is ADB Auditor speaks the ADB protocol directly from the browser over WebUSB. With USB debugging enabled, a tester gets the following with no Android SDK install and no local server, and with no device data leaving the machine: - listing installed apps / app inventory - a device file browser (root supported) - an interactive device shell - screen capture - a set of MASTG-aligned checks Why it may help the MASTG It provides full, transparent device access rather than an automated black-box score, and lets a tester run several existing techniques without a local toolchain (useful for workshops and quick triage on machines without the SDK): - @MASTG-TECH-0001 Accessing the Device Shell - @MASTG-TECH-0006 Listing Installed Apps - @MASTG-TECH-0008 Accessing App Data Directories - @MASTG-TECH-0009 Monitoring System Logs - @MASTG-TECH-0002 Host-Device Data Transfer How it differs from tools already listed adb (@MASTG-TOOL-0004) and Scrcpy (@MASTG-TOOL-0024) require a local install. ADB Auditor runs the ADB transport in the browser over WebUSB, so nothing is installed. It complements those tools rather than replacing them. Maintenance: actively maintained (see repo commit history).