Update MASTG-DEMO-0006 to cover the remaining MASTG-TEST-0203 logging APIs
Author: dchapagainCreated Sep 3, 2026Updated Sep 11, 2026
Following up on discussion #3948, where @cpholguera suggested updating MASTG-DEMO-0006 before adding a new static demo for MASTG-TEST-0231.
Context
MASTG-TEST-0203 lists the following APIs: apis: [Log, Logger, System.out.print, System.err.print, java.lang.Throwable#printStackTrace]
MASTG-DEMO-0006 is currently its only demo. From what I can see, MastgTest.kt covers android.util.Log (v, i, w, d, e, wtf) and java.util.logging.Logger.severe, while run.sh hooks android.util.Log!* and java.util.logging.Logger!severe.
The API's that are not covered yet:
System.out.print/printlnSystem.err.print/printlnThrowable.printStackTrace
Proposed change:
- Add samples for the three APIs above to
MastgTest.kt - Extend the hooks to
java.io.PrintStream!print*andjava.lang.Throwable!printStackTrace*(System.outandSystem.errare bothPrintStreaminstances) - Regenerate
output.txtandlogcat_output.txtfrom a real run - Update the Steps / Observation / Evaluation sections to match
A few scope questions:
- Tooling: Should this stay with
frida-traceor migrate tofrooky+hooks.json? The current demo instructions preferfrooky, andfilterEventsByStacktracelooks useful for reducing the noise from hookingjava.io.PrintStream. - Demo Conventions:
MastgTest.kthas no// SUMMARY:comment and no// FAIL: [MASTG-TEST-0203]annotations. Should I bring it in line with the current demo instructions here, or keep the diff minimal? - Terminology: The demo title currently uses "...Looking for Secrets", while draft PR #3592 changes the terminology in this area toward "authenticators". Should this update stay aligned with the current master, or follow the wording from that PR?
I would like to work on this. Happy to be assigned.
Source: OWASP/mastg