> For the complete documentation index, see [llms.txt](https://blog.s1rn3tz.ovh/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://blog.s1rn3tz.ovh/pentest-mobile/ios/stockage-de-donnees-non-securise-ios.md).

# Stockage de données non sécurisé (iOS)

## Plist

```
$ objection -g YOUR_BINARY explore
# env
# cd /var/mobile/Containers/Data/Application/<app-id>/Documents
# ios plist cat userInfo.plist
```

## Userdefaults

```
$ objection -g YOUR_BINARY explore
# ios nsuserdefaults get
```

## URL Credential Storage&#x20;

```
$ objection -g YOUR_BINARY explore
# ios nsurlcredentialstorage dump
```

## Keychain

```
$ objection -g YOUR_BINARY explore
# ios keychain dump
```

### Outil

{% embed url="<https://github.com/ptoomey3/Keychain-Dumper>" %}

## Core Data

Avec [Grapefruit](#grapefruit):&#x20;

Naviguer dans les fichiers de l'application et consulter les fichiers de base de données .sqlite

## Outil

#### Grapefruit

{% embed url="<https://github.com/ChiChou/grapefruit>" %}