Tests are organized into categories based on theOWASP MASVS and have a weakness assigned from theOWASP MASWE.

Each test includes:

• Overview: A brief description of the test.
• Steps: A set of steps to follow to identify the weakness in a mobile application.
• Observation: A description of the results of running the test against an application.
• Evaluation: Specific instructions for evaluating the results of the test.

Each test comes with a collection of demos that demonstrate the weakness in a sample application. These demos are written in markdown and are located in theDemos section of the MASTG.