iOS Application Penetration Testing

Post on 22-Nov-2014

2.893 views 2 download

description

null Trivandrum Chapter - July 2013 Meet

Transcript of iOS Application Penetration Testing

Basics of

Jewel Joy

n | u con

Faculty at NIIT

Developer

Information Security Analyst

iOS is from the famous UNIX family iOS is derived from the Mac OS X iOS for iPhone,iPad,iPod

Browser based applications Native Applications Hybrid Applications

Programmed using Objective – C Objective-C is OOP form of the famous C

language It is a mix of C language and Smalltalk Cocoa Touch Framework is used to build iOS

framework Xcode is the SDK for buliding iOS

applications

Xcode & Objective C Simulators Run the app in the actual device

Android Apps Java Mobile Apps Windows Phone Apps Windows Mobile Apps iOS applications

What is penetration testing ? Do we need to do it for mobile apps also ?

Secure Boot Chain Loading trusted applications Application Isolation Data Encryption

Hardware Crypto UID, GID Keys Data & File Protection Keychain File Encryption

Network Security

SSL and TLS VPN Wifi

Jail break & Unjailbreak

Evasion tool for Jailbreaking iTunes for Updating the device

Data in Transit Analysis

Wire Shark Burp Suite

Data in storage Analysis

iExplorer Keychain dumber Sqlite Browser Windows Machine Otools

Questions ?