Learning iOS Penetration Testing

Device logs leaking application sensitive data

Many times, application logs the input data to ease the debug process. Now, if an application is logging sensitive information, then its data will be captured on device logs. An attacker can easily dump device logs and retrieve the user's sensitive information.

Let's follow the given steps to capture device logs that are leaking sensitive information:

1. You can use the Organizer utility provided with Xcode. Connect the iDevice to Mac, start the Organizer and dump the device logs:
   
2. You can automate this process using the idb tool. Use the Log option to capture all device logs and check whether the iDevice ...