<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# API Reference — Performing Mobile Penetration Testing

## Testing Environment Setup
```bash
# Android emulator with root
emulator -avd test_device -writable-system
adb root && adb remount

# Frida server on device
adb push frida-server /data/local/tmp/
adb shell "chmod 755 /data/local/tmp/frida-server"
adb shell "/data/local/tmp/frida-server &"

# Proxy setup
adb shell settings put global http_proxy HOST:8080
adb shell settings put global http_proxy :0   # Remove proxy
```

## Core Tool Commands
```bash
# apktool
apktool d target.apk -o output/ -f

# jadx
jadx -d output/ --deobf target.apk

# objection
objection -g com.app explore
objection -g com.app explore -s "COMMAND"

# frida
frida -U -f com.app --no-pause
frida -U -f com.app -l script.js

# MobSF
docker run -it -p 8000:8000 opensecurity/mobile-security-framework-mobsf

# nuclei
nuclei -u https://api.target.com -t mobile/
```

## OWASP MASVS Categories
| Category | Focus |
|----------|-------|
| MASVS-STORAGE | Data storage and privacy |
| MASVS-CRYPTO | Cryptographic practices |
| MASVS-AUTH | Authentication and authorization |
| MASVS-NETWORK | Network communication security |
| MASVS-PLATFORM | Platform interaction security |
| MASVS-CODE | Code quality and settings |
| MASVS-RESILIENCE | Reverse engineering resilience |
| MASVS-PRIVACY | User privacy protection |

## Reporting Severity Scale
| Level | CVSS | Example |
|-------|------|---------|
| Critical | 9.0-10.0 | RCE, full data breach |
| High | 7.0-8.9 | Auth bypass, SQLi |
| Medium | 4.0-6.9 | IDOR, weak crypto |
| Low | 0.1-3.9 | Info disclosure |
| Info | 0.0 | Best practice deviation |
