Learning iOS Penetration Testing

Insecure storage in Core Data

Core Data is an object-relational mapping (ORM) that creates a layer between user interface and database. The developers prefer Core Data as it is faster in terms of record creation than the traditional SQLite format.

From security point of view, these files are similar to SQLite, with the only difference being that the tables are prefixed with Z.

In this exercise, let's follow the steps to find out the sensitive data that is stored in Core Data:

1. We will use the Core Data.ipa iOS app for this exercise. Once you open the application, you will observe the following view:
   
2. Let's insert a Username and Password and select the ...