Insufficient Resilience

Root/jailbreak, anti-debugging, integrity/tamper, emulator, and Frida detection that are all trivially bypassable, plus a TOCTOU race in auth.

10 vulnerabilities. OWASP Mobile: M7

Vulnerability	ID	Platform	Difficulty	OWASP	MASVS	MASWE	MASTG (v2)	CWE
App Attestation Not Implemented (server never verifies client)	`app_attestation_absent`	AndroidiOS	MEDIUM	M7	MASVS-RESILIENCE-2	MASWE-0056	-	CWE-693 CWE-345
Device Attestation Not Implemented (Play Integrity / App Attest)	`device_attestation_absent`	AndroidiOS	MEDIUM	M7	MASVS-RESILIENCE-1	MASWE-0054	-	CWE-693
Emulator Detection Bypass	`emulator_detection_bypass`	AndroidiOS	MEDIUM	M7	MASVS-RESILIENCE-1	MASWE-0053	MASTG-TEST-0367 MASTG-TEST-0351	CWE-693
Malware / Overlay Co-Resident Detection Not Implemented	`malware_detection_absent`	AndroidiOS	MEDIUM	M7	MASVS-RESILIENCE-1	MASWE-0055	-	CWE-693
Root/Jailbreak Detection Bypass	`root_jailbreak_detection_bypass`	AndroidiOS	MEDIUM	M7	MASVS-RESILIENCE-1	MASWE-0051	MASTG-TEST-0324 MASTG-TEST-0325 MASTG-TEST-0240 MASTG-TEST-0241	CWE-693
App Virtualization / Cloning Detection Not Implemented	`virtualization_detection_absent`	Android	MEDIUM	M7	MASVS-RESILIENCE-1	MASWE-0052	-	CWE-693
Anti-Debugging Bypass	`anti_debugging_bypass`	AndroidiOS	HARD	M7	MASVS-RESILIENCE-2	MASWE-0064	MASTG-TEST-0352 MASTG-TEST-0353 MASTG-TEST-0401 MASTG-TEST-0402	CWE-693
Anti-Tampering / Integrity Bypass	`anti_tampering_integrity_bypass`	AndroidiOS	HARD	M7	MASVS-RESILIENCE-3	MASWE-0057	MASTG-TEST-0338 MASTG-TEST-0387	CWE-354
Frida Detection Bypass	`frida_detection_bypass`	AndroidiOS	HARD	M7	MASVS-RESILIENCE-2	MASWE-0065	MASTG-TEST-0341 MASTG-TEST-0354	CWE-693
TOCTOU Race Condition in Auth Check	`toctou_race_condition`	AndroidiOS	HARD	M7	MASVS-AUTH-1 MASVS-CODE-4	MASWE-0018	-	CWE-367