🙈Stockage de données non sécurisé (iOS)

Plist

$ objection -g YOUR_BINARY explore
# env
# cd /var/mobile/Containers/Data/Application/<app-id>/Documents
# ios plist cat userInfo.plist

Userdefaults

$ objection -g YOUR_BINARY explore
# ios nsuserdefaults get

Keychain

$ objection -g YOUR_BINARY explore
# ios keychain dump

Outil

GitHub - ptoomey3/Keychain-Dumper: A tool to check which keychain items are available to an attacker once an iOS device has been jailbrokenGitHub

Core Data

Avec Grapefruit:

Naviguer dans les fichiers de l'application et consulter les fichiers de base de données .sqlite

Outil

Grapefruit

GitHub - ChiChou/grapefruit: (WIP) Runtime Application Instruments for iOS. Previously PassionfruitGitHub