Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Learning iOS Penetration Testing
  • Table Of Contents Toc
Learning iOS Penetration Testing

Learning iOS Penetration Testing

By : Yermalkar
4.2 (12)
Buy this Book
close
close
Learning iOS Penetration Testing

Learning iOS Penetration Testing

4.2 (12)
By: Yermalkar
Buy this Book

Overview of this book

iOS has become one of the most popular mobile operating systems with more than 1.4 million apps available in the iOS App Store. Some security weaknesses in any of these applications or on the system could mean that an attacker can get access to the device and retrieve sensitive information. This book will show you how to conduct a wide range of penetration tests on iOS devices to uncover vulnerabilities and strengthen the system from attacks. Learning iOS Penetration Testing discusses the common vulnerabilities and security-related shortcomings in an iOS application and operating system, and will teach you to conduct static and dynamic analysis of iOS applications. This practical guide will help you uncover vulnerabilities in iOS phones and applications. We begin with basics of iOS security and dig deep to learn about traffic analysis, code analysis, and various other techniques. Later, we discuss the various utilities, and the process of reversing and auditing.
Table of Contents (11 chapters)
close
close
close
Preface
Icon
Preface
Icon
What this book covers
Icon
What you need for this book
Icon
Who this book is for
Icon
Conventions
Icon
Reader feedback
Icon
Customer support
Lock Free Chapter
1
1. Introducing iOS Application Security
chevron up
Icon
1. Introducing iOS Application Security
Icon
Basics of iOS and application development
Icon
Developing your first iOS app
Icon
Running apps on iDevice
Icon
iOS MVC design
Icon
iOS security model
Icon
iOS secure boot chain
Icon
iOS application signing
Icon
iOS application sandboxing
Icon
OWASP Top 10 Mobile Risks
Icon
Summary
2
2. Setting up Lab for iOS App Pentesting
Icon
2. Setting up Lab for iOS App Pentesting
Icon
Need for jailbreaking
Icon
Jailbreaking iDevice
Icon
Connecting with iDevice
Icon
Installing utilities on iDevice
Icon
Installing apps on iDevice
Icon
Pentesting using iOS Simulator
Icon
Summary
3
3. Identifying the Flaws in Local Storage
Icon
3. Identifying the Flaws in Local Storage
Icon
Introduction to insecure data storage
Icon
Installing third-party applications
Icon
Insecure data in the plist files
Icon
Insecure storage in the NSUserDefaults class
Icon
Insecure storage in SQLite database
Icon
SQL injection in iOS applications
Icon
Insecure storage in Core Data
Icon
Insecure storage in keychain
Icon
Summary
4
4. Traffic Analysis for iOS Application
Icon
4. Traffic Analysis for iOS Application
Icon
Intercepting traffic over HTTP
Icon
Intercepting traffic over HTTPS
Icon
Intercepting traffic of iOS Simulator
Icon
Web API attack demo
Icon
Bypassing SSL pinning
Icon
Summary
5
5. Sealing up Side Channel Data Leakage
Icon
5. Sealing up Side Channel Data Leakage
Icon
Data leakage via application screenshot
Icon
Pasteboard leaking sensitive information
Icon
Device logs leaking application sensitive data
Icon
Keyboard cache capturing sensitive data
Icon
Summary
6
6. Analyzing iOS Binary Protections
Icon
6. Analyzing iOS Binary Protections
Icon
Decrypting unsigned iOS applications
Icon
Decrypting signed iOS applications
Icon
Analyzing code by reverse engineering
Icon
Analyzing iOS binary
Icon
Hardening binary against reverse engineering
Icon
Summary
7
7. The iOS App Dynamic Analysis
Icon
7. The iOS App Dynamic Analysis
Icon
Understanding Objective-C runtime
Icon
Dynamic analysis using Cycript
Icon
Runtime analysis using Snoop-it
Icon
Dynamic analysis on iOS Simulator
Icon
Summary
8
8. iOS Exploitation
Icon
8. iOS Exploitation
Icon
Setting up exploitation lab
Icon
Shell bind TCP for iOS
Icon
Shell reverse TCP for iOS
Icon
Creating iOS backdoor
Icon
Converting iDevice to a pentesting device
Icon
Summary
9
9. Introducing iOS Forensics
Icon
9. Introducing iOS Forensics
Icon
Basics of iOS forensics
Icon
The iPhone hardware
Icon
The iOS filesystem
Icon
Physical acquisition
Icon
Data backup acquisition
Icon
iOS forensics tools walkthrough
Icon
Summary
10
Index
Icon
Index

Developing your first iOS app

Developing the Hello World iOS app should be very simple. Perform the following steps and in few minutes, you will be able to see your first iOS app running:

  1. Start Xcode from your OS X. It is just as easy as clicking on the Xcode icon.
  2. Select Create a new Xcode project and choose the Single View Application project as shown in the following screenshot:
    Developing your first iOS app
  3. Provide details such as the name of your application. Here, let's say Hello World:
    Developing your first iOS app
  4. Select the location of your choice to save the project files. If you are not sure, you can simply select the Desktop location to save the files.
  5. Now, you are all set to develop your iOS app. As shown in the following screenshot, on the left side is the navigation bar. It has all the files that are used in the project. The central area is the actual editorial area, where we will design the view of app and write the backend code. The right-hand side of the area is the utility area.
  6. Select the Main.storyboard file from the left-hand side and choose the Label object from list of objects provided on the right-hand side. Refer to the following screenshot:
    Developing your first iOS app
  7. Edit the text in labels as you wish and select the run option from the left-hand side of the toolbar that has the play icon, which can be seen in the following screenshot:
    Developing your first iOS app
  8. Congratulations on your very first iOS application! You will be able to see your first running app in iOS Simulator, as follows:
    Developing your first iOS app

Developing and executing the Hello World application is very simple and straightforward process. If you are familiar with object-oriented concepts, then developing iOS applications should be easy for you.

You can also deploy this app to iDevice to test. Before introducing Xcode 7, you need to enroll in Apple Developer Program for $99 in order to run the app on iDevice. However, with Xcode 7 version, Apple allows you to deploy and run any number of apps with limited capabilities on any of your devices simply by logging in with your Apple ID. However, if you want to distribute your apps among a team or, let's say, you are an iOS security trainer and need to distribute your vulnerable apps sample among your students, you will have to enroll for the Apple Developer Program. You can visit https://developer.apple.com/programs/enroll/ for more information.

Once you have the provision profile, you are ready to run the app on iDevice. You can also download this Xcode project from online supporting files and run this app with one click.

CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
Learning iOS Penetration Testing
End of Section 1
Next Section
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon