Mobile RASP · Mobil uygulama güvenliği için Türkçe teknik kaynak
Mobile RASPTÜRKÇE BİLGİ MERKEZİ

Bilgi merkezi

Kaynağına kadar izlenebilir bilgi.

Her makalenin kendi kaynak bağlantıları bulunur. Bu dizin teknik başvuru noktalarını tek yerde toplar.

Resmî belgeler ve proje sayfaları

  1. https://angr.io/
  2. https://apktool.org/
  3. https://appium.io/docs/en/latest/
  4. https://approov.io/knowledge/how-does-approov-work
  5. https://attack.mitre.org/matrices/mobile/
  6. https://bandit.readthedocs.io/en/latest/
  7. https://binary.ninja/
  8. https://capacitorjs.com/docs
  9. https://cheatsheetseries.owasp.org/
  10. https://cheatsheetseries.owasp.org/cheatsheets/Authorization_Cheat_Sheet.html
  11. https://cheatsheetseries.owasp.org/cheatsheets/Key_Management_Cheat_Sheet.html
  12. https://cheatsheetseries.owasp.org/cheatsheets/Logging_Cheat_Sheet.html
  13. https://cheatsheetseries.owasp.org/cheatsheets/REST_Security_Cheat_Sheet.html
  14. https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html
  15. https://codeql.github.com/docs/
  16. https://cordova.apache.org/docs/en/latest/guide/appdev/security/
  17. https://cryptography.io/en/latest/
  18. https://csrc.nist.gov/pubs/sp/800/218/final
  19. https://csrc.nist.gov/pubs/sp/800/61/r3/final
  20. https://cutter.re/
  21. https://cwe.mitre.org/
  22. https://cyclonedx.org/
  23. https://developer.android.com/build/shrink-code
  24. https://developer.android.com/develop/sensors-and-location/location
  25. https://developer.android.com/google/play/integrity/classic
  26. https://developer.android.com/google/play/integrity/overview
  27. https://developer.android.com/google/play/integrity/standard
  28. https://developer.android.com/google/play/integrity/verdicts
  29. https://developer.android.com/guide/app-bundle
  30. https://developer.android.com/guide/topics/ui/accessibility
  31. https://developer.android.com/identity/data/autobackup
  32. https://developer.android.com/identity/user-data-ids
  33. https://developer.android.com/media/media3/exoplayer/drm
  34. https://developer.android.com/ndk/guides
  35. https://developer.android.com/privacy-and-security/keystore
  36. https://developer.android.com/privacy-and-security/risks/android-exported
  37. https://developer.android.com/privacy-and-security/risks/dynamic-code-loading
  38. https://developer.android.com/privacy-and-security/risks/insecure-webview-native-bridges
  39. https://developer.android.com/privacy-and-security/risks/pending-intent
  40. https://developer.android.com/privacy-and-security/risks/secure-clipboard-handling
  41. https://developer.android.com/privacy-and-security/risks/tapjacking
  42. https://developer.android.com/privacy-and-security/risks/webview-unsafe-file-inclusion
  43. https://developer.android.com/privacy-and-security/security-config
  44. https://developer.android.com/privacy-and-security/security-key-attestation
  45. https://developer.android.com/reference/android/view/WindowManager.LayoutParams#FLAG_SECURE
  46. https://developer.android.com/studio/publish/app-signing
  47. https://developer.android.com/studio/run/emulator
  48. https://developer.android.com/tools/adb
  49. https://developer.android.com/tools/apksigner
  50. https://developer.android.com/topic/performance/benchmarking/benchmarking-overview
  51. https://developer.android.com/topic/performance/power
  52. https://developer.android.com/topic/performance/vitals/anr
  53. https://developer.android.com/topic/performance/vitals/launch-time
  54. https://developer.android.com/training/app-links
  55. https://developer.android.com/training/location
  56. https://developer.android.com/training/testing/espresso
  57. https://developer.android.com/training/testing/other-components/ui-automator
  58. https://developer.android.com/work
  59. https://developer.apple.com/app-extensions/
  60. https://developer.apple.com/documentation/backgroundtasks
  61. https://developer.apple.com/documentation/bundleresources/entitlements
  62. https://developer.apple.com/documentation/bundleresources/privacy-manifest-files
  63. https://developer.apple.com/documentation/devicecheck
  64. https://developer.apple.com/documentation/devicecheck/establishing-your-app-s-integrity
  65. https://developer.apple.com/documentation/devicecheck/validating-apps-that-connect-to-your-server
  66. https://developer.apple.com/documentation/localauthentication
  67. https://developer.apple.com/documentation/network
  68. https://developer.apple.com/documentation/objectivec/objective-c-runtime
  69. https://developer.apple.com/documentation/security
  70. https://developer.apple.com/documentation/security/preventing-insecure-network-connections
  71. https://developer.apple.com/documentation/uikit/uiscreen
  72. https://developer.apple.com/documentation/webkit/wkwebview
  73. https://developer.apple.com/documentation/xcode
  74. https://developer.apple.com/documentation/xcode/adding-identifiable-symbol-names-to-a-crash-report
  75. https://developer.apple.com/documentation/xcode/configuring-app-groups
  76. https://developer.apple.com/documentation/xcode/distributing-your-app-for-beta-testing-and-releases
  77. https://developer.apple.com/documentation/xcode/running-your-app-in-simulator-or-on-a-device
  78. https://developer.apple.com/documentation/xcode/supporting-universal-links-in-your-app
  79. https://developer.apple.com/documentation/xctest
  80. https://developer.apple.com/xcode/
  81. https://digital.ai/products/application-security/
  82. https://docs.astral.sh/ruff/
  83. https://docs.aws.amazon.com/devicefarm/latest/developerguide/welcome.html
  84. https://docs.fastlane.tools/
  85. https://docs.flutter.dev/deployment/obfuscate
  86. https://docs.github.com/en/actions
  87. https://docs.gradle.org/current/userguide/userguide.html
  88. https://docs.maestro.dev/
  89. https://docs.projectdiscovery.io/opensource/nuclei/overview
  90. https://docs.pwntools.com/en/latest/
  91. https://docs.pytest.org/en/stable/
  92. https://docs.semgrep.dev/
  93. https://docs.sonarsource.com/sonarqube-server
  94. https://docs.unity3d.com/Manual/scripting-backends-il2cpp.html
  95. https://doverunner.com/
  96. https://eur-lex.europa.eu/eli/reg/2016/679/oj
  97. https://firebase.google.com/docs/test-lab
  98. https://frida.re/docs/home/
  99. https://github.com/Genymobile/scrcpy
  100. https://github.com/JesusFreke/smali
  101. https://github.com/MobSF/Mobile-Security-Framework-MobSF
  102. https://github.com/NationalSecurityAgency/ghidra
  103. https://github.com/OWASP/ASVS
  104. https://github.com/anchore/grype
  105. https://github.com/anchore/syft
  106. https://github.com/androguard/androguard
  107. https://github.com/datatheorem/TrustKit
  108. https://github.com/eliben/pyelftools
  109. https://github.com/gitleaks/gitleaks
  110. https://github.com/google/bundletool
  111. https://github.com/libimobiledevice/libusbmuxd
  112. https://github.com/openvex/spec
  113. https://github.com/pxb1988/dex2jar
  114. https://github.com/pypa/pip-audit
  115. https://github.com/radareorg/radare2
  116. https://github.com/radareorg/radare2-r2pipe
  117. https://github.com/scottyab/rootbeer
  118. https://github.com/securing/IOSSecuritySuite
  119. https://github.com/sensepost/objection
  120. https://github.com/skylot/jadx
  121. https://github.com/talsec/Free-RASP-Community
  122. https://github.com/the-tcpdump-group/tcpdump
  123. https://github.com/trufflesecurity/trufflehog
  124. https://google.github.io/osv-scanner/
  125. https://hex-rays.com/ida-pro
  126. https://httptoolkit.com/
  127. https://hypothesis.readthedocs.io/en/latest/
  128. https://kotlinlang.org/docs/multiplatform.html
  129. https://libimobiledevice.org/
  130. https://lief.re/
  131. https://mas.owasp.org/MASTG-KNOW-0118/
  132. https://mas.owasp.org/MASTG/
  133. https://mas.owasp.org/MASVS/
  134. https://mas.owasp.org/MASVS/05-MASVS-STORAGE/
  135. https://mas.owasp.org/MASVS/06-MASVS-CRYPTO/
  136. https://mas.owasp.org/MASVS/07-MASVS-AUTH/
  137. https://mas.owasp.org/MASVS/08-MASVS-NETWORK/
  138. https://mas.owasp.org/MASVS/11-MASVS-RESILIENCE/
  139. https://mas.owasp.org/MASVS/12-MASVS-PRIVACY/
  140. https://mas.owasp.org/MASVS/controls/MASVS-RESILIENCE-1/
  141. https://mas.owasp.org/MASVS/controls/MASVS-RESILIENCE-2/
  142. https://mas.owasp.org/MASVS/controls/MASVS-RESILIENCE-3/
  143. https://mas.owasp.org/MASVS/controls/MASVS-RESILIENCE-4/
  144. https://mas.owasp.org/MASWE/
  145. https://mas.owasp.org/checklists/
  146. https://opentelemetry.io/docs/collector/
  147. https://opentelemetry.io/docs/concepts/signals/
  148. https://ostorlab.co/
  149. https://oversecured.com/
  150. https://owasp.org/API-Security/
  151. https://owasp.org/www-community/Fail_securely
  152. https://owasp.org/www-community/Source_Code_Analysis_Tools
  153. https://owasp.org/www-community/Threat_Modeling
  154. https://owasp.org/www-community/Vulnerability_Scanning_Tools
  155. https://owasp.org/www-community/Web_Application_Firewall
  156. https://owasp.org/www-project-automated-threats-to-web-applications/
  157. https://owasp.org/www-project-dependency-check/
  158. https://owasp.org/www-project-mobile-top-10/
  159. https://owasp.org/www-project-software-component-verification-standard/
  160. https://perfetto.dev/docs/
  161. https://portswigger.net/burp
  162. https://promon.io/
  163. https://promon.io/resources/security-software-glossary/white-box-cryptography
  164. https://protobuf.dev/
  165. https://proxyman.com/
  166. https://reactnative.dev/docs/security
  167. https://requests.readthedocs.io/en/latest/
  168. https://rizin.re/
  169. https://scapy.net/
  170. https://slsa.dev/
  171. https://source.android.com/docs/security/features/verifiedboot
  172. https://spdx.dev/
  173. https://sre.google/sre-book/handling-overload/
  174. https://sre.google/sre-book/monitoring-distributed-systems/
  175. https://sre.google/sre-book/postmortem-culture/
  176. https://sre.google/sre-book/release-engineering/
  177. https://sre.google/sre-book/service-level-objectives/
  178. https://sre.google/sre-book/testing-reliability/
  179. https://support.apple.com/guide/security/app-code-signing-process-sec7c917bf14/web
  180. https://support.apple.com/guide/security/keychain-data-protection-secb0694df1a/web
  181. https://support.apple.com/guide/security/secure-enclave-sec59b0b31ff/web
  182. https://support.apple.com/guide/security/welcome/web
  183. https://trivy.dev/
  184. https://virustotal.github.io/yara/
  185. https://wix.github.io/Detox/
  186. https://www.aicpa-cima.com/resources/landing/system-and-organization-controls-soc-suite-of-services
  187. https://www.appdome.com/
  188. https://www.appknox.com/
  189. https://www.caido.io/
  190. https://www.capstone-engine.org/
  191. https://www.charlesproxy.com/
  192. https://www.corellium.com/
  193. https://www.first.org/cvss/v4.0/specification-document
  194. https://www.guardsquare.com/appsweep-mobile-application-security-testing
  195. https://www.guardsquare.com/dexguard
  196. https://www.guardsquare.com/introducing-mobile-app-attestation
  197. https://www.guardsquare.com/ixguard
  198. https://www.guardsquare.com/manual/home
  199. https://www.guardsquare.com/mobile-application-shielding
  200. https://www.guardsquare.com/proguard
  201. https://www.guardsquare.com/threatcast-mobile-threat-defense
  202. https://www.hopperapp.com/
  203. https://www.iso.org/standard/27001
  204. https://www.kvkk.gov.tr/Icerik/2040/Veri-Guvenligine-Iliskin-Yukumlulukler
  205. https://www.mitmproxy.org/
  206. https://www.nist.gov/cyberframework
  207. https://www.nowsecure.com/
  208. https://www.pcisecuritystandards.org/standards/mobile-payments-on-cots-mpoc/
  209. https://www.pcisecuritystandards.org/standards/pci-dss/
  210. https://www.pnfsoftware.com/jeb/
  211. https://www.quokka.io/
  212. https://www.talsec.app/appicrypt
  213. https://www.talsec.app/rasp
  214. https://www.unicorn-engine.org/
  215. https://www.wireshark.org/
  216. https://www.zaproxy.org/
  217. https://zimperium.com/

Bilgi merkezinde ara