Learning iOS Penetration Testing

Creating iOS backdoor

In the previous section, we studied about creating a shell bind and shell reverse TCP access for iDevice but the problem is that this will not work if the device gets rebooted.

So, we can have a persistent connection with the iDevice by creating a backdoor for it. We will create a shell backdoor as a service that will be started automatically with each boot of device.

Let's follow the given steps to create a backdoor for iOS:

1. Refer to the system's LaunchDaemons. We will need SSH daemon that we used for OpenSSH installed via Cydia:
   
2. Navigate to LaunchDaemons from Library and you will observe a plist file as openssh.sshd:
3. Check the ...