16
Basics of Jewel Joy n | u con

iOS Application Penetration Testing

Embed Size (px)

DESCRIPTION

null Trivandrum Chapter - July 2013 Meet

Citation preview

Page 1: iOS Application Penetration Testing

Basics of

Jewel Joy

n | u con

Page 2: iOS Application Penetration Testing

Faculty at NIIT

Developer

Information Security Analyst

Page 3: iOS Application Penetration Testing
Page 4: iOS Application Penetration Testing
Page 5: iOS Application Penetration Testing
Page 6: iOS Application Penetration Testing
Page 7: iOS Application Penetration Testing
Page 8: iOS Application Penetration Testing

iOS is from the famous UNIX family iOS is derived from the Mac OS X iOS for iPhone,iPad,iPod

Page 9: iOS Application Penetration Testing

Browser based applications Native Applications Hybrid Applications

Page 10: iOS Application Penetration Testing

Programmed using Objective – C Objective-C is OOP form of the famous C

language It is a mix of C language and Smalltalk Cocoa Touch Framework is used to build iOS

framework Xcode is the SDK for buliding iOS

applications

Page 11: iOS Application Penetration Testing

Xcode & Objective C Simulators Run the app in the actual device

Page 12: iOS Application Penetration Testing

Android Apps Java Mobile Apps Windows Phone Apps Windows Mobile Apps iOS applications

Page 13: iOS Application Penetration Testing

What is penetration testing ? Do we need to do it for mobile apps also ?

Page 14: iOS Application Penetration Testing

Secure Boot Chain Loading trusted applications Application Isolation Data Encryption

Hardware Crypto UID, GID Keys Data & File Protection Keychain File Encryption

Network Security

SSL and TLS VPN Wifi

Page 15: iOS Application Penetration Testing

Jail break & Unjailbreak

Evasion tool for Jailbreaking iTunes for Updating the device

Data in Transit Analysis

Wire Shark Burp Suite

Data in storage Analysis

iExplorer Keychain dumber Sqlite Browser Windows Machine Otools

Page 16: iOS Application Penetration Testing

Questions ?