The top 10 mobile hacking tools for iOS for reversing and pentesting apps
Let's build a list of the best tools for iOS mobile application hacking.
I will add some of my own favourites:
| iRET | Downloadhere | How to use | iRET: The iOS reverse engineering Toolkit. iRET is a set of tools that allows you to automate many of the manual tasks an iOS penetrationtester would need to perform in order to analyze and reverse engineer iOS applications. And the bonus is...this can all be performed right on the device. |
| Wireshark | Download here | How to use | Wireshark is the world's foremost network protocol analyzer. It lets you see what's happening on your network at a microscopic level. It is the de facto (and often de jure) standard across many industries and educational institutions. |
| BurpSuite | Download here | How to use |
|
| Jailbreaksoftware | Find a tool online for your version of iOS | Find how to's online | You need to jailbreak your phone to gain access to the file system. Without file system access, you will never be able to reverse an iOS app. |
Also, via Wynand Viljoen:
Disassemblers Tools
- Class Dump Z - Extracting class interface for Objective-C version 2 ABI.
- IDA Pro- IDA is a Windows, Linux or Mac OS X hosted multi-processor disassembler and debugger that offers so many features it is hard to describe them all.
- HopperApp - Hopper is a reverse engineering tool for OS X and Linux, that lets you disassemble, decompile and debug your 32/64bits Intel Mac, Linux, Windows and iOS executables!
- otool - The otool command displays specified parts of object files or libraries. It can also disassemble
- strings - strings is a simple utility that will print all the strings in a given binary.
- nm - nm is a utility that displays the symbol table of a given binary.
iOS Forensic Tools
- iPhone Analyzer - iPhone Analzyer allows you to forensically examine or recover date from in iOS device.
- iPhone Backup Analyzer
- iPhone Backup Browser
- Keychain Dumper - A tool to check which keychain items are available to an attacker once an iOS device has been jailbroken.
- Mac-robber - mac-robber is a digital investigation tool that collects data from allocated files in a mounted file system. This is useful during incident response when analyzing a live system or when analyzing a dead system in a lab.
- Mobile Sync Browser - Access your iOS backups
- Mobilyze - Mobilyze is a mobile data triage tool, designed to give users immediate access to data from iOS and Androiddevices.
- Oxygen Forensics Suite
- Paraben Device Seizure
- SleuthKit - The Sleuth Kit® is a collection of command line tools and a C library that allows you to analyze disk images and recover files from them. It is used behind the scenes in Autopsy and many other open source and commercial forensicstools.
iOS Dynamic Analysis Tools
- Appmon - AppMon is an automated framework for monitoring and tampering system API calls of native apps on iOS, Mac OS X and Android apps (upcoming). You may call it the GreaseMonkey for native mobile apps.
- cycript - Cycript allows developers to explore and modify running applications on either iOS or Mac OS X using a hybrid of Objective-C++ and JavaScript syntax through an interactive console that features syntax highlighting and tab completion.
- Clutch - Clutch is a high-speed iOS decryption tool. Clutch supports the iPhone, iPod Touch, and iPad as well as all iOS version, architecture types, and most binaries. Clutch is meant only for educational purposes and security research.
- DIOS - DiOS is a practical system to perform automated dynamic privacy analysis of iOS apps. DiOS provides a highly scalable and fully automated solution to schedule apps from the official Apple App Store for privacy analysis to iOS devices. While apps are automatically executed, user interaction is simulated using random and smart execution strategies, and sensitive API calls as well as network connections are tracked.
- iNalyzer - AppSec Labs iNalyzer is a framework for manipulating iOS applications, tampering with parameters and methods; no sources needed! AppSec Labs iNalyzer targets closed applications, turning a painful Black Box into an automatic Gray-Box effort.
- idb - idb is a tool to simplify some common tasks for iOS pentesting and research
- iOS SSL Kill Switch - Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps
- iOS SSL Kill Switch2 - Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and OS X Apps
- Introspy-iOS - Blackbox tool to help understand what an iOS application is doing at runtime and assist in the identification of potential security issues.
- needle - An open source, modular framework to streamline the process of conducting security assessments of iOS apps.
- snoop-it - A tool to assist security assessments and dynamic analysis of iOS Apps
- XSecurity - A security plug-in in Xcode plus a Clang Static Analyzer Checkers for iOS application development. This plug-in aims to reduce the vulnerability made during development by detecting the vulnerability as it is being created.
iOS Reverse Engineering Tools
- Flex-2 - Flex - 2 gives you the power to modify the apps and change their behaviour without having to know the intricacies of iOS development.
- iSpy - A reverse engineering framework for iOS
- iRET - The iOS Reverse Engineering Toolkit is a toolkit designed to automate many of the common tasks associated with iOS penetration testing.
- cycript - Cycript allows developers to explore and modify running applications on either iOS or Mac OS X using a hybridof Objective-C++ and JavaScript syntax through an interactive console that features syntax highlighting and tab completion.
- Logify - Logify takes an Objective-C header file containing a class interface and generates a Logos file hooking all methods in the given class, and for each hook logging the call of the method (with parameters) to the syslog
What are your favourite tools for this?
Nhận xét
Đăng nhận xét