Issue Details
Extraneous Functionality
mobile10 • Rank #10 in OWASP 2024
Explanation
Extraneous functionality includes debug interfaces, test accounts, hidden admin panels, and development endpoints left in production builds. These features often have weaker security controls and provide attackers with unintended access paths. They are frequently discovered through reverse engineering.
Remedy
Remove debug features, test endpoints, and hidden functionality from production builds. Use build configurations to exclude development-only code. Conduct thorough testing to identify and remove unintended functionality before release. Implement feature flags with proper access controls.
| Year | Rank | Category |
|---|---|---|
| 2016 | #10 | mobile10 - Extraneous Functionality |
| 2024 | #10 | mobile10 - Privacy and Data Protection Failures |