iOS Apps Hacking Just Got Easier

No ratings

Presented at BSidesBristol 2019 by

Imagine that you're using an iOS app which holds you back with some restriction. It could be a "touch ID" or "enter PIN" screen, an authentication screen, authorized/paid only content or even a sophisticated Jailbreak detection. How would you bypass this? Often, bypassing restrictions in a black-boxed environment such as an iOS app, requires a time-consuming combination of digging through classes, tracing methods and hooking them. But as time goes by, we need to find novel approaches to do more, with less (time, effort, resources...). In this talk I shall present the concept of gaining full control over standard iOS applications' client-side functionalities, by controlling the application's view controllers and storyboards; plus, present a free open-source tool which does all of this for you. I will present demos and real life cases of successfully using this approach and my tool. By the end of this talk you should be able to bypass restrictions such as the above - in less than a minute.