diff --git a/tests-beta/android/MASVS-PLATFORM/MASTG-TEST-0x24.md b/tests-beta/android/MASVS-PLATFORM/MASTG-TEST-0x24.md new file mode 100644 index 0000000000..7bf2a40cf1 --- /dev/null +++ b/tests-beta/android/MASVS-PLATFORM/MASTG-TEST-0x24.md @@ -0,0 +1,33 @@ +--- +platform: android +title: Testing for App Permissions +id: MASTG-TEST-0x24 +--- + +## Overview + +Testing for app permissions in Android involves evaluating how an application requests, uses, and manages permissions to ensure they do not lead to security vulnerabilities. Proper permission management should protect sensitive user data and ensure that the application complies with Android's security model. The test aims to detect misconfigurations and unnecessary permissions. + +## Steps + +### Static analysis + + 1. Decompile the APK using tools like @MASTG-TOOL-0011. + 2. Examine the `AndroidManifest.xml` file for declared permissions by searching for `