{"action":"created","comment":{"url":"https://api.github.com/repos/OWASP/owasp-mstg/pulls/comments/287836967","pull_request_review_id":242335611,"id":287836967,"node_id":"MDI0OlB1bGxSZXF1ZXN0UmV2aWV3Q29tbWVudDI4NzgzNjk2Nw==","diff_hunk":"@@ -302,15 +337,112 @@ uid=0(root) gid=0(root) groups=0(root),1004(input),1007(log),1011(adb),1015(sdca\n \n Rooting an emulator is therefore unnecessary; root access can be established with `adb`.\n \n-##### Restrictions When Testing on an Emulator\n+#### Host-Device Data Transfer\n+TODO `adb push pull`, scp. https://developer.android.com/studio/command-line/adb#copyfiles\n \n-There are several downsides to using an emulator. You may not be able to test an app properly in an emulator if the app relies on a specific mobile network or uses NFC or Bluetooth. Testing within an emulator is also usually slower, and the testing itself may cause issues.\n \n-Nevertheless, you can emulate many hardware characteristics, such as [GPS](https://developer.android.com/studio/run/emulator-commandline.html#geo \"GPS Emulation\") and [SMS](https://developer.android.com/studio/run/emulator-commandline.html#sms \"SMS\").\n \n-### Testing Methods\n \n-#### Manual Static Analysis\n+#### Obtaining and Extracting Apps\n+##### App Store\n+TODO mirrorapk or gplaycli\n+\n+##### Recovering the App Package from the Device\n+###### From Rooted Devices\n+TODO via adb pull\n+###### From Non-Rooted Devices\n+\n+This works on both rooted and non-rooted devices:\n+\n+```\n+$ adb shell pm path sg.vp.owasp_mobile.omtg_android\n+package:/data/app/sg.vp.owasp_mobile.omtg_android-Q0Y29-poHT2w8912zTxXNw==/base.apk\n+\n+$ adb pull /data/app/sg.vp.owasp_mobile.omtg_android-Q0Y29-poHT2w8912zTxXNw==/base.apk\n+/data/app/sg.vp.owasp_mobile.omtg_android-Q0Y29-poHT2w8912zTxXNw==/base.apk: 1 file pulled. 17.9 MB/s (5801767 bytes in 0.309s)\n+```\n+\n+#### Installing Apps\n+\n+Use `adb install` to install an APK on an emulator or connected device.\n+\n+```bash\n+adb install path_to_apk\n+```\n+\n+Note that if you have the original source code and use Android Studio, you do not need to do this because Android Studio handles the packaging and installation of the app for you.\n+\n+#### Information Gathering\n+##### Installed Apps\n+TODO\n+```shell\n+$ adb shell pm list packages\n+package:com.android.sdm.plugins.connmo\n+package:com.google.android.googlequicksearchbox\n+package:com.android.providers.calendar\n+package:com.android.providers.media\n+package:com.google.android.onetimeinitializer\n+package:com.google.android.ext.shared\n+package:com.android.wallpapercropper\n+package:sg.vp.owasp_mobile.omtg_android\n+```\n+\n+\n+\n+##### App Basic Information\n+TODO aapt, dumpsys\n+###### Sandbox\n+\n+```shell\n+$ adb shell pm path sg.vp.owasp_mobile.omtg_android\n+package:/data/app/sg.vp.owasp_mobile.omtg_android-Q0Y29-poHT2w8912zTxXNw==/base.apk\n+```\n+\n+```shell\n+$ adb shell ls /data/data/sg.vp.owasp_mobile.omtg_android\n+```\n+###### Permissions\n+TODO from androidmanifest or aapt dump\n+\n+```\n+aapt dump permissions omtg.apk\n+```\n+###### Native Libs\n+TODO APK/libs or from device; or frida / objection when running\n+\n+```\n+bullhead:/ # ls /data/data/sg.vp.owasp_mobile.omtg_android/lib\n+libdatabase_sqlcipher.so libnative.so libsqlcipher_android.so libstlport_shared.so\n+```\n+\n+Using objection it is also straightforward as you already land in the sandbox and can directly use `cd` and `ls` commands to look around:\n+\n+```\n+$ objection -g sg.vp.owasp_mobile.omtg_android explore\n+\n+...g.vp.owasp_mobile.omtg_android on (google: 8.1.0) [usb] # ls lib                                                                                                           \n+Type    Last Modified            Read    Write    Hidden    Size       Name\n+------  -----------------------  ------  -------  --------  ---------  ------------------------\n+File    2018-06-06 08:16:34 GMT  True    False    False     13.4 KiB   libnative.so\n+File    2018-06-06 08:16:34 GMT  True    False    False     181.9 KiB  libdatabase_sqlcipher.so\n+File    2018-06-06 08:16:34 GMT  True    False    False     357.3 KiB  libstlport_shared.so\n+File    2018-06-06 08:16:34 GMT  True    False    False     2.2 MiB    libsqlcipher_android.so\n+```\n+\n+###### ...\n+\n+\n+##### Accessing App Data (what to expect, where, sandbox structure)\n+TODO /data/data\n+##### Monitoring System Logs","path":"Document/0x05b-Basic-Security_Testing.md","position":855,"original_position":550,"commit_id":"a9e725f544851f3836402318b0c3815eaae3b7da","original_commit_id":"18e4a082f05458767c49d306b4354c6b3c314d8e","user":{"login":"sushi2k","id":5951320,"node_id":"MDQ6VXNlcjU5NTEzMjA=","avatar_url":"https://avatars0.githubusercontent.com/u/5951320?v=4","gravatar_id":"","url":"https://api.github.com/users/sushi2k","html_url":"https://github.com/sushi2k","followers_url":"https://api.github.com/users/sushi2k/followers","following_url":"https://api.github.com/users/sushi2k/following{/other_user}","gists_url":"https://api.github.com/users/sushi2k/gists{/gist_id}","starred_url":"https://api.github.com/users/sushi2k/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sushi2k/subscriptions","organizations_url":"https://api.github.com/users/sushi2k/orgs","repos_url":"https://api.github.com/users/sushi2k/repos","events_url":"https://api.github.com/users/sushi2k/events{/privacy}","received_events_url":"https://api.github.com/users/sushi2k/received_events","type":"User","site_admin":false},"body":"Agree, this makes sense. So we stick to our structure we have: \r\n- General section would be 0x05a/0x06a\r\n- Basic testing would be 0x05b/0x06b\r\nand then the individual test cases.\r\nJust need to align and structure iOS/Android chapters properly, so it has a proper flow and there is no redundancy. \r\nI like the points you mentioned (developer point of view/security audit point of view etc.). We are somehow doing this already, but need to stick more to this. ","created_at":"2019-05-27T15:59:58Z","updated_at":"2019-05-27T15:59:59Z","html_url":"https://github.com/OWASP/owasp-mstg/pull/1222#discussion_r287836967","pull_request_url":"https://api.github.com/repos/OWASP/owasp-mstg/pulls/1222","author_association":"COLLABORATOR","_links":{"self":{"href":"https://api.github.com/repos/OWASP/owasp-mstg/pulls/comments/287836967"},"html":{"href":"https://github.com/OWASP/owasp-mstg/pull/1222#discussion_r287836967"},"pull_request":{"href":"https://api.github.com/repos/OWASP/owasp-mstg/pulls/1222"}},"in_reply_to_id":287551713},"pull_request":{"url":"https://api.github.com/repos/OWASP/owasp-mstg/pulls/1222","id":281879581,"node_id":"MDExOlB1bGxSZXF1ZXN0MjgxODc5NTgx","html_url":"https://github.com/OWASP/owasp-mstg/pull/1222","diff_url":"https://github.com/OWASP/owasp-mstg/pull/1222.diff","patch_url":"https://github.com/OWASP/owasp-mstg/pull/1222.patch","issue_url":"https://api.github.com/repos/OWASP/owasp-mstg/issues/1222","number":1222,"state":"open","locked":false,"title":"first draft of restructuring Android basic testing","user":{"login":"cpholguera","id":29175115,"node_id":"MDQ6VXNlcjI5MTc1MTE1","avatar_url":"https://avatars0.githubusercontent.com/u/29175115?v=4","gravatar_id":"","url":"https://api.github.com/users/cpholguera","html_url":"https://github.com/cpholguera","followers_url":"https://api.github.com/users/cpholguera/followers","following_url":"https://api.github.com/users/cpholguera/following{/other_user}","gists_url":"https://api.github.com/users/cpholguera/gists{/gist_id}","starred_url":"https://api.github.com/users/cpholguera/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cpholguera/subscriptions","organizations_url":"https://api.github.com/users/cpholguera/orgs","repos_url":"https://api.github.com/users/cpholguera/repos","events_url":"https://api.github.com/users/cpholguera/events{/privacy}","received_events_url":"https://api.github.com/users/cpholguera/received_events","type":"User","site_admin":false},"body":"Note that this is a first draft version, including a lot of TODOs that will become issues.\r\n\r\nI had to remove 2 things in 0x05c already because one was repeated word by word (install SDK) and the other (enabling developer mode) fits better in 0x05b. It was not mentioned there, it was just assumed one can use adb.\r\n\r\nThis PR covers issue #970\r\n","created_at":"2019-05-24T06:10:03Z","updated_at":"2019-05-27T15:59:59Z","closed_at":null,"merged_at":null,"merge_commit_sha":"00b5854698a117e74db66af359e35dd82efcaabd","assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/OWASP/owasp-mstg/pulls/1222/commits","review_comments_url":"https://api.github.com/repos/OWASP/owasp-mstg/pulls/1222/comments","review_comment_url":"https://api.github.com/repos/OWASP/owasp-mstg/pulls/comments{/number}","comments_url":"https://api.github.com/repos/OWASP/owasp-mstg/issues/1222/comments","statuses_url":"https://api.github.com/repos/OWASP/owasp-mstg/statuses/a9e725f544851f3836402318b0c3815eaae3b7da","head":{"label":"cpholguera:restructure","ref":"restructure","sha":"a9e725f544851f3836402318b0c3815eaae3b7da","user":{"login":"cpholguera","id":29175115,"node_id":"MDQ6VXNlcjI5MTc1MTE1","avatar_url":"https://avatars0.githubusercontent.com/u/29175115?v=4","gravatar_id":"","url":"https://api.github.com/users/cpholguera","html_url":"https://github.com/cpholguera","followers_url":"https://api.github.com/users/cpholguera/followers","following_url":"https://api.github.com/users/cpholguera/following{/other_user}","gists_url":"https://api.github.com/users/cpholguera/gists{/gist_id}","starred_url":"https://api.github.com/users/cpholguera/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cpholguera/subscriptions","organizations_url":"https://api.github.com/users/cpholguera/orgs","repos_url":"https://api.github.com/users/cpholguera/repos","events_url":"https://api.github.com/users/cpholguera/events{/privacy}","received_events_url":"https://api.github.com/users/cpholguera/received_events","type":"User","site_admin":false},"repo":{"id":94095021,"node_id":"MDEwOlJlcG9zaXRvcnk5NDA5NTAyMQ==","name":"owasp-mstg","full_name":"cpholguera/owasp-mstg","private":false,"owner":{"login":"cpholguera","id":29175115,"node_id":"MDQ6VXNlcjI5MTc1MTE1","avatar_url":"https://avatars0.githubusercontent.com/u/29175115?v=4","gravatar_id":"","url":"https://api.github.com/users/cpholguera","html_url":"https://github.com/cpholguera","followers_url":"https://api.github.com/users/cpholguera/followers","following_url":"https://api.github.com/users/cpholguera/following{/other_user}","gists_url":"https://api.github.com/users/cpholguera/gists{/gist_id}","starred_url":"https://api.github.com/users/cpholguera/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cpholguera/subscriptions","organizations_url":"https://api.github.com/users/cpholguera/orgs","repos_url":"https://api.github.com/users/cpholguera/repos","events_url":"https://api.github.com/users/cpholguera/events{/privacy}","received_events_url":"https://api.github.com/users/cpholguera/received_events","type":"User","site_admin":false},"html_url":"https://github.com/cpholguera/owasp-mstg","description":" The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering.","fork":true,"url":"https://api.github.com/repos/cpholguera/owasp-mstg","forks_url":"https://api.github.com/repos/cpholguera/owasp-mstg/forks","keys_url":"https://api.github.com/repos/cpholguera/owasp-mstg/keys{/key_id}","collaborators_url":"https://api.github.com/repos/cpholguera/owasp-mstg/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/cpholguera/owasp-mstg/teams","hooks_url":"https://api.github.com/repos/cpholguera/owasp-mstg/hooks","issue_events_url":"https://api.github.com/repos/cpholguera/owasp-mstg/issues/events{/number}","events_url":"https://api.github.com/repos/cpholguera/owasp-mstg/events","assignees_url":"https://api.github.com/repos/cpholguera/owasp-mstg/assignees{/user}","branches_url":"https://api.github.com/repos/cpholguera/owasp-mstg/branches{/branch}","tags_url":"https://api.github.com/repos/cpholguera/owasp-mstg/tags","blobs_url":"https://api.github.com/repos/cpholguera/owasp-mstg/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/cpholguera/owasp-mstg/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/cpholguera/owasp-mstg/git/refs{/sha}","trees_url":"https://api.github.com/repos/cpholguera/owasp-mstg/git/trees{/sha}","statuses_url":"https://api.github.com/repos/cpholguera/owasp-mstg/statuses/{sha}","languages_url":"https://api.github.com/repos/cpholguera/owasp-mstg/languages","stargazers_url":"https://api.github.com/repos/cpholguera/owasp-mstg/stargazers","contributors_url":"https://api.github.com/repos/cpholguera/owasp-mstg/contributors","subscribers_url":"https://api.github.com/repos/cpholguera/owasp-mstg/subscribers","subscription_url":"https://api.github.com/repos/cpholguera/owasp-mstg/subscription","commits_url":"https://api.github.com/repos/cpholguera/owasp-mstg/commits{/sha}","git_commits_url":"https://api.github.com/repos/cpholguera/owasp-mstg/git/commits{/sha}","comments_url":"https://api.github.com/repos/cpholguera/owasp-mstg/comments{/number}","issue_comment_url":"https://api.github.com/repos/cpholguera/owasp-mstg/issues/comments{/number}","contents_url":"https://api.github.com/repos/cpholguera/owasp-mstg/contents/{+path}","compare_url":"https://api.github.com/repos/cpholguera/owasp-mstg/compare/{base}...{head}","merges_url":"https://api.github.com/repos/cpholguera/owasp-mstg/merges","archive_url":"https://api.github.com/repos/cpholguera/owasp-mstg/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/cpholguera/owasp-mstg/downloads","issues_url":"https://api.github.com/repos/cpholguera/owasp-mstg/issues{/number}","pulls_url":"https://api.github.com/repos/cpholguera/owasp-mstg/pulls{/number}","milestones_url":"https://api.github.com/repos/cpholguera/owasp-mstg/milestones{/number}","notifications_url":"https://api.github.com/repos/cpholguera/owasp-mstg/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/cpholguera/owasp-mstg/labels{/name}","releases_url":"https://api.github.com/repos/cpholguera/owasp-mstg/releases{/id}","deployments_url":"https://api.github.com/repos/cpholguera/owasp-mstg/deployments","created_at":"2017-06-12T12:42:34Z","updated_at":"2019-05-23T16:52:44Z","pushed_at":"2019-05-25T18:43:15Z","git_url":"git://github.com/cpholguera/owasp-mstg.git","ssh_url":"git@github.com:cpholguera/owasp-mstg.git","clone_url":"https://github.com/cpholguera/owasp-mstg.git","svn_url":"https://github.com/cpholguera/owasp-mstg","homepage":"https://www.owasp.org/index.php/OWASP_Mobile_Security_Testing_Guide","size":205993,"stargazers_count":0,"watchers_count":0,"language":"HTML","has_issues":false,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":0,"license":{"key":"cc-by-sa-4.0","name":"Creative Commons Attribution Share Alike 4.0 International","spdx_id":"CC-BY-SA-4.0","url":"https://api.github.com/licenses/cc-by-sa-4.0","node_id":"MDc6TGljZW5zZTI2"},"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"OWASP:master","ref":"master","sha":"0ad85a4a8039d03f64cf7fef8bfbf91ea6fd1694","user":{"login":"OWASP","id":155815,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1NTgxNQ==","avatar_url":"https://avatars0.githubusercontent.com/u/155815?v=4","gravatar_id":"","url":"https://api.github.com/users/OWASP","html_url":"https://github.com/OWASP","followers_url":"https://api.github.com/users/OWASP/followers","following_url":"https://api.github.com/users/OWASP/following{/other_user}","gists_url":"https://api.github.com/users/OWASP/gists{/gist_id}","starred_url":"https://api.github.com/users/OWASP/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/OWASP/subscriptions","organizations_url":"https://api.github.com/users/OWASP/orgs","repos_url":"https://api.github.com/users/OWASP/repos","events_url":"https://api.github.com/users/OWASP/events{/privacy}","received_events_url":"https://api.github.com/users/OWASP/received_events","type":"Organization","site_admin":false},"repo":{"id":69648386,"node_id":"MDEwOlJlcG9zaXRvcnk2OTY0ODM4Ng==","name":"owasp-mstg","full_name":"OWASP/owasp-mstg","private":false,"owner":{"login":"OWASP","id":155815,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1NTgxNQ==","avatar_url":"https://avatars0.githubusercontent.com/u/155815?v=4","gravatar_id":"","url":"https://api.github.com/users/OWASP","html_url":"https://github.com/OWASP","followers_url":"https://api.github.com/users/OWASP/followers","following_url":"https://api.github.com/users/OWASP/following{/other_user}","gists_url":"https://api.github.com/users/OWASP/gists{/gist_id}","starred_url":"https://api.github.com/users/OWASP/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/OWASP/subscriptions","organizations_url":"https://api.github.com/users/OWASP/orgs","repos_url":"https://api.github.com/users/OWASP/repos","events_url":"https://api.github.com/users/OWASP/events{/privacy}","received_events_url":"https://api.github.com/users/OWASP/received_events","type":"Organization","site_admin":false},"html_url":"https://github.com/OWASP/owasp-mstg","description":" The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.","fork":false,"url":"https://api.github.com/repos/OWASP/owasp-mstg","forks_url":"https://api.github.com/repos/OWASP/owasp-mstg/forks","keys_url":"https://api.github.com/repos/OWASP/owasp-mstg/keys{/key_id}","collaborators_url":"https://api.github.com/repos/OWASP/owasp-mstg/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/OWASP/owasp-mstg/teams","hooks_url":"https://api.github.com/repos/OWASP/owasp-mstg/hooks","issue_events_url":"https://api.github.com/repos/OWASP/owasp-mstg/issues/events{/number}","events_url":"https://api.github.com/repos/OWASP/owasp-mstg/events","assignees_url":"https://api.github.com/repos/OWASP/owasp-mstg/assignees{/user}","branches_url":"https://api.github.com/repos/OWASP/owasp-mstg/branches{/branch}","tags_url":"https://api.github.com/repos/OWASP/owasp-mstg/tags","blobs_url":"https://api.github.com/repos/OWASP/owasp-mstg/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/OWASP/owasp-mstg/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/OWASP/owasp-mstg/git/refs{/sha}","trees_url":"https://api.github.com/repos/OWASP/owasp-mstg/git/trees{/sha}","statuses_url":"https://api.github.com/repos/OWASP/owasp-mstg/statuses/{sha}","languages_url":"https://api.github.com/repos/OWASP/owasp-mstg/languages","stargazers_url":"https://api.github.com/repos/OWASP/owasp-mstg/stargazers","contributors_url":"https://api.github.com/repos/OWASP/owasp-mstg/contributors","subscribers_url":"https://api.github.com/repos/OWASP/owasp-mstg/subscribers","subscription_url":"https://api.github.com/repos/OWASP/owasp-mstg/subscription","commits_url":"https://api.github.com/repos/OWASP/owasp-mstg/commits{/sha}","git_commits_url":"https://api.github.com/repos/OWASP/owasp-mstg/git/commits{/sha}","comments_url":"https://api.github.com/repos/OWASP/owasp-mstg/comments{/number}","issue_comment_url":"https://api.github.com/repos/OWASP/owasp-mstg/issues/comments{/number}","contents_url":"https://api.github.com/repos/OWASP/owasp-mstg/contents/{+path}","compare_url":"https://api.github.com/repos/OWASP/owasp-mstg/compare/{base}...{head}","merges_url":"https://api.github.com/repos/OWASP/owasp-mstg/merges","archive_url":"https://api.github.com/repos/OWASP/owasp-mstg/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/OWASP/owasp-mstg/downloads","issues_url":"https://api.github.com/repos/OWASP/owasp-mstg/issues{/number}","pulls_url":"https://api.github.com/repos/OWASP/owasp-mstg/pulls{/number}","milestones_url":"https://api.github.com/repos/OWASP/owasp-mstg/milestones{/number}","notifications_url":"https://api.github.com/repos/OWASP/owasp-mstg/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/OWASP/owasp-mstg/labels{/name}","releases_url":"https://api.github.com/repos/OWASP/owasp-mstg/releases{/id}","deployments_url":"https://api.github.com/repos/OWASP/owasp-mstg/deployments","created_at":"2016-09-30T08:22:29Z","updated_at":"2019-05-27T10:42:47Z","pushed_at":"2019-05-25T18:43:18Z","git_url":"git://github.com/OWASP/owasp-mstg.git","ssh_url":"git@github.com:OWASP/owasp-mstg.git","clone_url":"https://github.com/OWASP/owasp-mstg.git","svn_url":"https://github.com/OWASP/owasp-mstg","homepage":"https://www.owasp.org/index.php/OWASP_Mobile_Security_Testing_Guide","size":205828,"stargazers_count":4161,"watchers_count":4161,"language":"HTML","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":775,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":63,"license":{"key":"cc-by-sa-4.0","name":"Creative Commons Attribution Share Alike 4.0 International","spdx_id":"CC-BY-SA-4.0","url":"https://api.github.com/licenses/cc-by-sa-4.0","node_id":"MDc6TGljZW5zZTI2"},"forks":775,"open_issues":63,"watchers":4161,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/OWASP/owasp-mstg/pulls/1222"},"html":{"href":"https://github.com/OWASP/owasp-mstg/pull/1222"},"issue":{"href":"https://api.github.com/repos/OWASP/owasp-mstg/issues/1222"},"comments":{"href":"https://api.github.com/repos/OWASP/owasp-mstg/issues/1222/comments"},"review_comments":{"href":"https://api.github.com/repos/OWASP/owasp-mstg/pulls/1222/comments"},"review_comment":{"href":"https://api.github.com/repos/OWASP/owasp-mstg/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/OWASP/owasp-mstg/pulls/1222/commits"},"statuses":{"href":"https://api.github.com/repos/OWASP/owasp-mstg/statuses/a9e725f544851f3836402318b0c3815eaae3b7da"}},"author_association":"COLLABORATOR"}}
{"actor":{"display_login":"sushi2k"}}