In the last section, we studied how to perform dynamic analysis using the command-line tool, Cycript. If you are not comfortable with command-line analysis, you will get a complete GUI to perform all of the tasks with the Snoop-it tool here.
You must have installed Snoop-it in Chapter 2, Setting up Lab for iOS App Pentesting and if not, you can install it via Cydia.
Let's explore Snoop-it to perform dynamic analysis using its GUI:
Start the Snoop-it application from iDevice and select the Dynamic Analysis application:
Start the application and you will see the Username and Password fields:
Start your browser and enter the IP address of iDevice and the port number as
12345
. You will observe all details about the application such as Objective-C classes, View Controllers, and so on in your browser window:Now, let's call the
pushLoginPage()
method fromViewController
. It's very easy with Snoop-it; select the method and select Setup and Invoke Method: