IOS

Jailbreak:

Download from . Steps for jailbreak:

Clear settings / reset
plug in and run: ./palera1n-linux-x86_64 -v -f -cNote: when checkmate occurs may have to remove and plug in cable quickly
Once completed, run: ./palera1n-linux-x86_64 -v -c
download and install openssh & ssh into user as 'mobile:alpine'

all testing types based on OWASP

Exposed API calls, potentially vulnerable serverse see IPA to run via MobSF

Additionally, run Keychain-Dumper on the device

See Application data for download of data and check for any unencrpyted data storage

Run via MobSF and check strings etc see IPA for details

SSL Pin using Frida

Download the following folder for application data, this can then be checked for stored secrets etc:

/private/var/mobile/Containers/Data/Application/UUID

Use the following to download and run IPA statically through MobSF:

download application to local machine, will be in the following folder (time sort for latest download): /private/var/containers/Bundle/Application/UUID
Create folder name 'Payload' (case sensitive) and copy all data from Application/UUID folder in
Zip the folder and rename to application-name.ipa i.e. chrome.ipa

Run Grapefruit:

# install: 
npm install -g igf
# run:
igf

Last updated 2 years ago