iOS
Four Ways to Bypass iOS SSL Verification and Certificate Pinning
In this blog, four techniques to bypass SSL verifification and certificate pinning in iOS will be discussed.
Dumping Memory on iOS 8
Back in January of 2015 NetSPI published a blog on extracting memory from an iOS device. Even though NetSPI provided a script to make...
Top 10 Critical Findings of 2014 – Mobile Applications
In this blog post I will cover high level trends and the top 10 critical vulnerabilities we saw in 2014 during mobile applications penetration tests.
iOS Tutorial – Dumping the Application Memory Part 2
Dump sensitive info from iOS app heap using Cycript in an automated way. Follow Mark's tutorial to parse a class dump of the binary.
iOS Tutorial – Dumping the Application Heap from Memory
Using GDB to dump the runtime heap from memory to gain access to sensitive information that should’ve been removed.
Malicious MobileConfigs
How much can you trust your devices? In this blog post, we will cover a practical attack that utilizes the iPhone Configuration Utility, a malicious Mobile Device Management (MDM) server, and a little bit of social engineering to get you data from iOS devices, HTTP and HTTPS web traffic, and possibly domain credentials.
Reverse Engineering iOS Applications in a Fun Way
Analyzing iOS application files to manipulate objective C functions is not a trivial process. The most common way to perform reverse engineering is by class dumping ipa files to discover all the class names and methods present in an application. This can be done using Cycript.
Sky Prioritize Yourself
I've covered hacking Passbook files in the past, but I've decided that it's now a good time to cover modifying boarding passes. To start things...
Facebook Friends, Your Email Address Isn’t that Private
In this post we will focus on the contact information setting in Facebook. These settings are responsible for your email privacy, both on your profile and for your friends being able to see your email.
Hacking High Scores in iOS GameCenter
Want to hack your top scores in iOS GameCenter? Here's how.
Know Your Opponent – an Inference Attack Against iOS Game Center
Lately I've been looking at iOS. After looking into the Passbook application, I started poking around with the iOS Game Center application. The iOS Game Center allows iOS users to connect with friends, play games, and compare scores for their games. Think of it as Xbox Live for iOS.