Skip to content

Commit

Permalink
Port dynamic test
Browse files Browse the repository at this point in the history
  • Loading branch information
serek8 committed Nov 7, 2024
1 parent 3f28605 commit 5fb933c
Showing 1 changed file with 25 additions and 0 deletions.
25 changes: 25 additions & 0 deletions tests-beta/ios/MASVS-STORAGE/MASTG-TEST-0x55-2.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,25 @@
---
platform: ios
title: Sensitive Data Present In Keyboard Cache
id: MASTG-TEST-0x55-2
type: [dynamic]
---

## Overview

This test checks whether the keyboard cache contains sensitive data from our app.

## Steps

1. Jailbreak a device
2. Reset your iOS device keyboard cache by navigating to `Settings > General > Reset > Reset Keyboard Dictionary`.
3. Exercise the application and identify the functionalities that allow users to enter sensitive data.
4. Use MASTG-TECH-0052 to retrieve the keyboard cache file with the extension `.dat` at `/private/var/mobile/Library/Keyboard/` and its subdirectories.

## Observation

The output should contain all cached strings such as username, passwords, email addresses, and credit card numbers.

## Evaluation

The test case fails if you can find any sensitive cached strings in the list.

0 comments on commit 5fb933c

Please sign in to comment.