iOS Hacker's Handbook

iOS Hacker's Handbook

Released May 2012
Publisher(s): Wiley
ISBN: 9781118240755

Read it now on the O’Reilly learning platform with a 10-day free trial.

O’Reilly members get unlimited access to books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial

Book description

Discover all the security risks and exploits that can threaten iOS-based mobile devices

iOS is Apple's mobile operating system for the iPhone and iPad. With the introduction of iOS5, many security issues have come to light. This book explains and discusses them all. The award-winning author team, experts in Mac and iOS security, examines the vulnerabilities and the internals of iOS to show how attacks can be mitigated. The book explains how the operating system works, its overall security architecture, and the security risks associated with it, as well as exploits, rootkits, and other payloads developed for it.

  • Covers iOS security architecture, vulnerability hunting, exploit writing, and how iOS jailbreaks work

  • Explores iOS enterprise and encryption, code signing and memory protection, sandboxing, iPhone fuzzing, exploitation, ROP payloads, and baseband attacks

  • Also examines kernel debugging and exploitation

  • Companion website includes source code and tools to facilitate your efforts

iOS Hacker's Handbook arms you with the tools needed to identify, understand, and foil iOS attacks.

Table of contents

  1. Cover
  2. Chapter 1: iOS Security Basics
    1. iOS Hardware/Device Types
    2. How Apple Protects the App Store
    3. Understanding Security Threats
    4. Understanding the iOS Security Architecture
    5. A Brief History of iOS Attacks
    6. Summary
  3. Chapter 2: iOS in the Enterprise
    1. iOS Configuration Management
    2. Mobile Device Management
    3. Summary
  4. Chapter 3: Encryption
    1. Data Protection
    2. Attacking Data Protection
    3. Summary
  5. Chapter 4: Code Signing and Memory Protections
    1. Understanding Mandatory Access Control
    2. How Provisioning Works
    3. Understanding Application Signing
    4. Inside Entitlements
    5. How Code Signing Enforcement Works
    6. Discovering Dynamic Code Signing
    7. Breaking Code Signing
    8. Summary
  6. Chapter 5: Sandboxing
    1. Understanding the Sandbox
    2. Sandboxing Your Apps
    3. Understanding the Sandbox Implementation
    4. Summary
  7. Chapter 6: Fuzzing iOS Applications
    1. How Fuzzing Works
    2. The Recipe for Fuzzing
    3. Fuzzing Safari
    4. Adventures in PDF Fuzzing
    5. Quick Look Fuzzing
    6. Fuzzing with the Simulator
    7. Fuzzing MobileSafari
    8. PPT Fuzzing Fun
    9. SMS Fuzzing
    10. Summary
  8. Chapter 7: Exploitation
    1. Exploiting Bug Classes
    2. Understanding the iOS System Allocator
    3. Taming the iOS Allocator
    4. Understanding TCMalloc
    5. Taming TCMalloc
    6. ASLR Challenges
    7. Case Study: Pwn2Own 2010
    8. Testing Infrastructure
    9. Summary
  9. Chapter 8: Return-Oriented Programming
    1. ARM Basics
    2. ROP Introduction
    3. What Can You Do with ROP on iOS?
    4. Examples of ROP Shellcode on iOS
    5. Summary
  10. Chapter 9: Kernel Debugging and Exploitation
    1. Kernel Structure
    2. Kernel Debugging
    3. Kernel Extensions and IOKit Drivers
    4. Kernel Exploitation
    5. Summary
  11. Chapter 10: Jailbreaking
    1. Why Jailbreak?
    2. Jailbreak Types
    3. Understanding the Jailbreaking Process
    4. Executing Kernel Payloads and Patches
    5. Summary
  12. Chapter 11: Baseband Attacks
    1. GSM Basics
    2. Setting up OpenBTS
    3. RTOSes Underneath the Stacks
    4. Vulnerability Analysis
    5. Exploiting the Baseband
    6. Summary
  13. Appendix: Resources
  14. Introduction

Product information

  • Title: iOS Hacker's Handbook
  • Author(s):
  • Release date: May 2012
  • Publisher(s): Wiley
  • ISBN: 9781118240755