book

Hacking and Securing iOS Applications

Name: Hacking and Securing iOS Applications
Author: Jonathan Zdziarski
ISBN: 9781449318741

by Jonathan Zdziarski

January 2012

Intermediate to advanced

354 pages

9h 32m

English

O'Reilly Media, Inc.

Read now

Unlock full access

Dedication
A Note Regarding Supplemental Files
Preface
Audience of This BookOrganization of the MaterialConventions Used in This BookUsing Code ExamplesLegal DisclaimerSafari® Books OnlineHow to Contact Us
1. Everything You Know Is Wrong
The Myth of a MonocultureThe iOS Security ModelComponents of the iOS Security ModelDevice securityData securityNetwork securityApplication securityStoring the Key with the LockPasscodes Equate to Weak SecurityForensic Data Trumps EncryptionExternal Data Is at Risk, TooHijacking TrafficData Can Be Stolen...QuicklyTrust No One, Not Even Your ApplicationPhysical Access Is OptionalSummary
I. Hacking
2. The Basics of Compromising iOS
Why It’s Important to Learn How to Break Into a DeviceJailbreaking ExplainedDeveloper ToolsEnd User JailbreaksJailbreaking an iPhoneDFU ModeTethered Versus UntetheredCompromising Devices and Injecting CodeBuilding Custom CodeAnalyzing Your BinaryBasic disassemblyListing dynamic dependenciesSymbol table dumpsString searchesTesting Your BinaryDaemonizing CodeDeploying Malicious Code with a Tar ArchiveGrabbing signed binariesPreparing the archiveDeploying the archiveDeploying Malicious Code with a RAM DiskBuild a custom launchdBreakdown of launchd exampleBuilding a RAM diskBooting a RAM diskTroubleshootingExercisesSummary
3. Stealing the Filesystem
Full Disk EncryptionSolid State NANDDisk EncryptionFilesystem EncryptionProtection classesWhere iOS Disk Encryption Has Failed YouCopying the Live FilesystemThe DataTheft PayloadDisabling the watchdog timerBringing up USB connectivityPayload codeCustomizing launchdPreparing the RAM diskImaging the FilesystemCopying the Raw FilesystemThe RawTheft PayloadPayload codeCustomizing launchdPreparing the RAM diskImaging the FilesystemExercisesThe Role of Social EngineeringDisabled Device DecoyDeactivated Device DecoyMalware Enabled DecoyPassword Engineering ApplicationSummary
4. Forensic Trace and Data Leakage
Extracting Image GeotagsConsolidated GPS CacheSQLite DatabasesConnecting to a DatabaseSQLite Built-in CommandsIssuing SQL QueriesImportant Database FilesAddress Book ContactsPutting it all togetherAddress Book ImagesGoogle Maps DataCalendar EventsCall HistoryEmail DatabaseMail attachments and message filesNotesPhoto MetadataSMS MessagesSafari BookmarksSMS Spotlight CacheSafari Web CachesWeb Application CacheWebKit StorageVoicemailReverse Engineering Remnant Database FieldsSMS DraftsProperty ListsImportant Property List FilesOther Important FilesSummary
5. Defeating Encryption
Sogeti’s Data Protection ToolsInstalling Data Protection ToolsBuilding the Brute ForcerBuilding Needed Python LibrariesExtracting Encryption KeysThe KeyTheft PayloadCustomizing LaunchdPreparing the RAM diskPreparing the KernelExecuting the Brute ForceDecrypting the KeychainDecrypting Raw DiskDecrypting iTunes BackupsDefeating Encryption Through SpywareThe SpyTheft PayloadDaemonizing spydCustomizing LaunchdPreparing the RAM diskExecuting the PayloadExercisesSummary
6. Unobliterating Files
Scraping the HFS JournalCarving Empty SpaceCommonly Recovered DataApplication ScreenshotsDeleted Property ListsDeleted Voicemail and Voice RecordingsDeleted Keyboard CachePhotos and Other Personal InformationSummary

7. Manipulating the Runtime
Analyzing BinariesThe Mach-O FormatIntroduction to class-dump-zSymbol TablesEncrypted BinariesCalculating OffsetsDumping MemoryCopy Decrypted Code Back to the FileResetting the cryptidAbusing the Runtime with CycriptInstalling CycriptUsing CycriptBreaking Simple LocksReplacing MethodsTrawling for DataInstance variablesMethodsClassesLogging DataMore Serious ImplicationsPersonal data vaultsPayment processing applicationsElectronic bankingExercisesSpringBoard AnimationsCall Tapping...Kind OfMaking Screen ShotsSummary
8. Abusing the Runtime Library
Breaking Objective-C DownInstance VariablesMethodsMethod CacheDisassembling and DebuggingEavesdroppingThe Underlying Objective-C FrameworkInterfacing with Objective-CMalicious Code InjectionThe CodeTheft PayloadInjection Using a DebuggerInjection Using Dynamic Linker AttackFull Device InfectionSummary
9. Hijacking Traffic
APN HijackingPayload DeliveryRemovalSimple Proxy SetupAttacking SSLSSLStripParos ProxyBrowser WarningsAttacking Application-Level SSL ValidationThe SSLTheft PayloadHijacking Foundation HTTP ClassesThe POSTTheft PayloadAnalyzing DataDriftnetBuildingRunningExercisesSummary
II. Securing
10. Implementing Encryption
Password StrengthBeware Random Password GeneratorsIntroduction to Common CryptoStateless OperationsStateful EncryptionMaster Key EncryptionGeo-EncryptionGeo-Encryption with PassphraseSplit Server-Side KeysSecuring MemoryWiping MemoryPublic Key CryptographyExercises
11. Counter Forensics
Secure File WipingDOD 5220.22-M WipingObjective-CWiping SQLite RecordsKeyboard CacheRandomizing PIN DigitsApplication Screenshots
12. Securing the Runtime
Tamper ResponseWipe User DataDisable Network AccessReport HomeEnable LoggingFalse Contacts and Kill SwitchesProcess Trace CheckingBlocking DebuggersRuntime Class Integrity ChecksValidating Address SpaceInline FunctionsComplicating DisassemblyOptimization FlagsStrippingThey’re Fun! They Roll! -funroll-loopsExercises
13. Jailbreak Detection
Sandbox Integrity CheckFilesystem TestsExistence of Jailbreak FilesSize of /etc/fstabEvidence of Symbolic LinkingPage Execution Check
14. Next Steps
Thinking Like an AttackerOther Reverse Engineering ToolsSecurity Versus Code ManagementA Flexible Approach to SecurityOther Great Books
About the Author
Copyright

404

Not Found

Either this content does not exist or you do not have access to it. Try searching for something new.

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Hacking and Securing iOS Applications

by Jonathan Zdziarski

404

Not Found