IoT Penetration Testing Cookbook

iOS application

When reversing iOS apps, more time is required to obtain the IPA file, decrypt it, transfer the application binary to our host computer, and then work toward finding vulnerabilities. In this case, we must download the MySubaru application via the App Store and perform the decryption and binary transference to our host computer. Once this is complete, the following steps should be taken to perform a baseline level of recon on the iOS MySubaru app:

• Disassemble the iOS binary using Hopper or similar tools:
  • Analyze classes and methods (use Class-dump-z)
  • Identity third-party libraries
  • Identify whether the app is native or hybrid
  • Look for hardcoded values
  • Look for potential secrets and environment
• Install the app and monitor ...