Главная
Study mode:
on
1
Introduction
2
About Karl
3
Presentation Overview
4
Intercepting Traffic
5
How I
6
Products
7
Burp Suite
8
Activesync
9
CertPinning
10
Cardboard Box
11
Post Request
12
iOS 7 Broken
13
Game Center Email Hashes
14
What is Game Center
15
Privacy
16
Email Hashes
17
Proxying Traffic
18
Adding Friends
19
Request Friends
20
List Friends
21
Hit Profile Info
22
Email Addresses
23
PowerShell Script
24
Hashcat
25
Final Numbers
26
Passport
27
Passbook
28
Passbook Files
29
Apple Developer Program
30
Deployment
31
Attack Overview
32
Bypass SSL Traffic
33
Example Time
34
Contact Info
Description:
Explore iOS application security vulnerabilities and attack techniques in this comprehensive conference talk from Louisville InfoSec 2013. Dive into topics such as intercepting traffic, exploiting IProducts, utilizing Burp Suite, and understanding Activesync. Learn about certificate pinning, iOS 7 vulnerabilities, and Game Center privacy concerns. Discover how to proxy traffic, add friends, and extract email addresses using PowerShell scripts and Hashcat. Examine Passport and Passbook files, and gain insights into the Apple Developer Program. Conclude with an overview of SSL traffic bypass techniques and real-world attack examples.

Attacking iOS Applications

Add to list