Combat Reverse Engineering and Patching on Non-Jailbroken iOS Devices
summary
Hands-on reverse engineering and patching techniques for non‑jailbroken iOS devices using tools like IDA Pro, Frida and Xcode; covers hooking mechanisms such as Fishhook to substitute code, patch apps, bypass anti-fraud, steal cookies and manipulate APIs. Also examines defensive measures — DeviceCheck, iOSSecuritySuite and JA3 — and how API-log analysis can detect and expose malicious bot activity.
AI-written summary · about
chapters (17)
- 0:00Introduction
- 1:03Talk goals
- 2:08Why iOS for reverse engineering
- 3:10Setup environment
- 5:36Install apps without jailbreak
- 7:21Code analysis tools
- 8:25Hooking and patching basics
- 13:27Patching without jailbreak
- 17:06FishHook for hooks
- 20:57Objective-C method hooks
- 27:58Swift method hooks
- 29:48Bundle ID spoofing
- 33:25SSL pinning bypass
- 36:56Techniques in practice
- 39:08Hacking scenarios
- 41:58App protection methods
- 43:21Q&A
related talks
40mIntroduction into Reverse Engineering and iOS Security
29miOS Runtime Manipulation (PWND)
09mBypassing Jailbreak Detection
58mUncovering OWASP’s Mobile Risks in iOS Apps
49mHow to Hack Your Own Mobile App
32mAndroid iPhone Risks and Solutions
01h 14mHacking and Injecting Your Own Code into Someone Else's App
47mBASHing iOS Applications