Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Rewrite MASTG-TECH-0079 #3090

Closed
TheDauntless opened this issue Dec 11, 2024 · 1 comment · Fixed by #3100
Closed

Rewrite MASTG-TECH-0079 #3090

TheDauntless opened this issue Dec 11, 2024 · 1 comment · Fixed by #3100
Assignees

Comments

@TheDauntless
Copy link
Collaborator

This content is quite outdated and doesn't work for ios 17 / 18

Luckily, it's pretty straightforward with the update of frida-tools; the only thing the binary needs is get-task-allow.

The technique should (imo) explain:

  • Loading Frida gadget into an application
  • Launching the app and attaching a debugger

Frida is straightforward; just add the frida-gadget on the host and launch as normal (though add a comment about prewarm).
lldb can be done based on flutter/flutter#133465 (comment)

Also add a note on limitations as per https://www.youtube.com/watch?v=TKWSwEGUyH8

@TheDauntless TheDauntless self-assigned this Dec 11, 2024
@cpholguera
Copy link
Collaborator

Please review (again, there are new changes) https://github.com/OWASP/owasp-mastg/pull/2907/files before proceeding with this ticket

I reused that TECH ID for a new Tech because the content wasn't very valuable given the other changes in the PR

Also I think we should add an actual section about testing on non-jailbroken devices in https://mas.owasp.org/MASTG/0x06b-iOS-Security-Testing/

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants