BASHing iOS Applications
summary
Claims a practical, low‑expertise binary-focused workflow that runs in about a minute using a jailbroken device, decrypts apps with clutch/raps, extracts otool/classdump/strings output, and greps for OWASP Mobile Top 10 issues; the team packages checks in a Bash framework called risker and exposes results via hprisker.com. Demonstrations show six categories covered, automated cracking and file‑artifact checks work end‑to‑end, and limits include needing a jailbroken device and reduced confidence without source or full runtime analysis.
AI-written summary · about
chapters (4)
- 0:00Start
- 2:11Mobile app testing tools are fragmented!
- 8:40M3: Insufficient Transport Layer Protection M4: Client-Side Injection
- 12:34BINARY TOOLS (mostly non-runtime & require a JB device)
related talks
58mUncovering OWASP’s Mobile Risks in iOS Apps
49mHow to Hack Your Own Mobile App
36mTesting iOS Apps without Jailbreak in 2018
32mAndroid iPhone Risks and Solutions
40mIntroduction into Reverse Engineering and iOS Security
29miOS Runtime Manipulation (PWND)
45mCombat Reverse Engineering and Patching on Non-Jailbroken iOS Devices
23mIntroduction to security research and bounty hunting on Apple's platforms