Testing iOS Apps without Jailbreak

Track:Owasp Projects
When:Wed PM-1
Where:Owasp Projects
OrganizersSven Schleier Sven Schleier
ParticipantsArne Zismer Arne Zismer , Clara Anel Mansilla Clara Anel Mansilla

This user session is based on the chapter “Dynamic analysis on non-jailbroken devices” from the MSTG, see also https://github.com/OWASP/owasp-mstg/blob/5add048ae91813151c09b6ad18a5f7e63e5290d6/Document/0x06b-Basic-Security-Testing.md#dynamic-analysis-on-non-jailbroken-devices

Please install the pre-requisites: https://github.com/sensepost/objection/wiki/Patching-iOS-Applications

A MacBook with Xcode is needed!

Outcomes

Every participant should have a working setup to test iOS apps without jailbreak.

Who

The target audience for this Working Session is:

  • iOS Developers
  • Penetration Testers

Everyone else who is interested in mobile security and some technical know-how :-)

References

https://github.com/sensepost/objection/wiki

Register as participant

To register as participant add Testing iOS Apps without Jailbreak to either:

  1. the sessions metadata field from your participant's page (find your participant page and look for the edit link).
  2. or the participants metadata field from this git session page

Back to list of all User Sessions