Allyson O'Malley

iOS 11

iOS Pentesting Tools Part 1: App Decryption and class-dump

This is the first part in a series teaching how to set up and utilize some of the most important tools for iOS app penetration testing. The series will be assuming that the user is using Electra jailbreak. I am specifically using iOS 11.1.2, but most of the tools in Read more…

By Allyson O'Malley, 8 years7 years ago

Dynamic Analysis

Bypassing an App’s PIN Protection with cycript

**NOTE: The app being analyzed is not my own, and therefore I have left out any identifying information. This is just a walkthrough of the steps one can take to search for similar vulnerabilities. This walkthrough will show how to use cycript to extract information from the app at runtime, Read more…

By Allyson O'Malley, 8 years8 years ago