• 设为首页
  • 点击收藏
  • 手机版
    手机扫一扫访问
    迪恩网络手机版
  • 关注官方公众号
    微信扫一扫关注
    迪恩网络公众号

iSECPartners/Introspy-iOS: Security profiling for blackbox iOS

原作者: [db:作者] 来自: 网络 收藏 邀请

开源软件名称:

iSECPartners/Introspy-iOS

开源软件地址:

https://github.com/iSECPartners/Introspy-iOS

开源编程语言:

Objective-C 99.4%

开源软件介绍:

Introspy-iOS

Blackbox tool to help understand what an iOS application is doing at runtime and assist in the identification of potential security issues.

See http://isecpartners.github.io/Introspy-iOS/ for a quick introduction.

Description

This is the repository for the Introspy-iOS tracer.

The tracer can be installed on a jailbroken device to hook and log security-sensitive iOS APIs called by applications running on the device. The tool records details of relevant API calls, including arguments and return values and persists them in a database. Additionally, the calls are also sent to the Console for real-time analysis.

The database can then be fed to Introspy-Analyzer, a Python script to generate HTML reports containing the list of logged function calls as well as a list of potential vulnerabilities affecting the application. Introspy-Analyzer is hosted on a separate repository: https://github.com/iSECPartners/Introspy-Analyzer

Installation

Users should first download the latest pre-compiled Debian package available in the release section of the project page at: https://github.com/integrity-sa/Introspy-iOS/releases or for older releases at https://github.com/iSECPartners/Introspy-iOS/releases

Dependencies

The tracer will only run on a jailbroken device. Using Cydia, make sure the following packages are installed:

  • dpkg
  • Cydia Substrate
  • PreferenceLoader
  • Applist

How to install

Download and copy the Debian package to the device; install it:

scp <package.deb> root@<device_ip>:~
ssh root@<device_ip>
dpkg -i <package.deb>

Respring the device:

killall -HUP SpringBoard

There should be two new menus in the device's Settings. The Apps menu allows you to select which applications will be profiled while the Settings menu defines which API groups are being hooked.

Finally, kill and restart the App you want to monitor.

How to uninstall

dpkg -r com.isecpartners.introspy

Generating HTML Reports

The tracer will store data about API calls made by applications in a database stored on the device (actually one in each application's folder). This database can be fed to a Python script call Introspy-Analyzer in order to generate HTML reports that make it a lot easier to review the data collected by the tracer. The script will also analyze and flag dangerous API calls in order to facilitate the process of identifying vulnerabilities within iOS applications.

Introspy-Analyzer is hosted on a separate repository: https://github.com/iSECPartners/Introspy-Analyzer

Building Introspy-iOS

Most users should just download and install the pre-compiled Debian package. However, if you want to modify the library's functionality you will have to build the Debian package yourself.

The build requires the Theos suite, available at https://github.com/theos/theos. For general instructions on how to install Theos, see https://github.com/theos/theos/wiki/Installation.

You must also set the $THEOS variable in your environment, and export it so make will see its value when you run it

export THEOS=/absolute/path/to/theos
export PATH=$THEOS/bin:$PATH

Then, the package can be built using:

make package

Once you've successfully created the debian package, you can use Theos to automatically install the package and re-spring the device by specifying the device's IP address in the THEOS_DEVICE_IP environment variable:

export THEOS_DEVICE_IP=192.168.1.127
make install

License

See ./LICENSE.

Authors

  • Tom Daniels
  • Alban Diquet

Maintainers

  • Herman Duarte



鲜花

握手

雷人

路过

鸡蛋
该文章已有0人参与评论

请发表评论

全部评论

专题导读
热门推荐
阅读排行榜

扫描微信二维码

查看手机版网站

随时了解更新最新资讯

139-2527-9053

在线客服(服务时间 9:00~18:00)

在线QQ客服
地址:深圳市南山区西丽大学城创智工业园
电邮:jeky_zhao#qq.com
移动电话:139-2527-9053

Powered by 互联科技 X3.4© 2001-2213 极客世界.|Sitemap