Insecure storage in the NSUserDefaults class
As per the Apple documentation, NSUserDefaults is used for customization as per the user's preferences. Many times, the developer uses the NSUderDefaults format to store sensitive information.
We will use the iGoat app to demonstrate this vulnerability. Follow the given steps to reveal sensitive information that is stored in NSUserDefaults:
- Start the iGoat iOS application and select the Keychain Usage exercise:
- You can keep default values or customize them and then use the Login option:
- Let's download iGoat ...
Get Learning iOS Penetration Testing now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
