Hacking Web Server Apps for iOS
summary
Scans of iOS file‑sharing apps find many run embedded web servers with no SSL and often no authentication, expose services via mDNS advertisement, and accept uploads. Practical exploits include directory traversal to read /var/mobile, reflected and persistent XSS, and, on jailbroken devices with dynamic stacks, uploading a PHP web shell to achieve remote code execution. Multiple vendors are vulnerable; only one fixes a reported flaw. Demonstrations show the attacks work against real App Store apps.
AI-written summary · about
chapters (19)
- 0:00Intro
- 0:26About me
- 1:07History
- 2:38Applications
- 4:28iTunes Store
- 5:27The Chase
- 6:05Not encrypted
- 6:33No SSL
- 8:32Variance
- 8:59Crosssite scripting
- 9:38Add Webs
- 11:22Web Server
- 15:05Vendors
- 16:03Testing
- 22:48iOS 7 Security
- 24:32DNS Protocol
- 25:36World Wide Web
- 25:53Conclusion
- 26:06Security
related talks
58mUncovering OWASP’s Mobile Risks in iOS Apps
49mHow to Hack Your Own Mobile App
48mMobile Security Attacks: A Glimpse from the Trenches
39mMobile App Security
35mPractical Mobile App Attacks By Example
27miOS Attack Vectors and how to protect your app
37mOutsmarting Hackers before your App gets pwn'ed
35mTrusting iOS SDKs