Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update IPA Installation Techniques and Tools (by @NVISOSecurity) #3100

Merged
merged 53 commits into from
Feb 11, 2025

Conversation

TheDauntless
Copy link
Collaborator

@TheDauntless TheDauntless commented Dec 26, 2024

A cleanup of all the iOS signing / installing / running in debug mode.

I tried to be pragmatic, focussing on different techniques that work (I tested all of them, it was not a fun day) and also focussing on modern solutions rather than keep holding on to outdated ones.

This fixes #3090

Jeroen Beckers added 3 commits December 26, 2024 13:04
Copy link
Collaborator

@sushi2k sushi2k left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great content @TheDauntless! Also the warnings/tips for AppSync and libimobiledevice are spot on! I've reviewed the tools, planning to do the rest today or tomorrow.

tools/ios/MASTG-TOOL-0055.md Outdated Show resolved Hide resolved
tools/ios/MASTG-TOOL-0055.md Outdated Show resolved Hide resolved
tools/ios/MASTG-TOOL-0055.md Show resolved Hide resolved
tools/ios/MASTG-TOOL-0055.md Show resolved Hide resolved
tools/ios/MASTG-TOOL-0118.md Show resolved Hide resolved
tools/ios/MASTG-TOOL-0118.md Outdated Show resolved Hide resolved
tools/ios/MASTG-TOOL-0055.md Show resolved Hide resolved
tools/ios/MASTG-TOOL-0126.md Outdated Show resolved Hide resolved
tools/ios/MASTG-TOOL-0126.md Show resolved Hide resolved
tools/ios/MASTG-TOOL-0127.md Show resolved Hide resolved
TheDauntless and others added 4 commits December 30, 2024 11:59

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Co-authored-by: Sven <[email protected]>

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Co-authored-by: Sven <[email protected]>

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Co-authored-by: Sven <[email protected]>

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Co-authored-by: Sven <[email protected]>
@TheDauntless
Copy link
Collaborator Author

Thanks for the review so far!

Copy link
Collaborator

@sushi2k sushi2k left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@TheDauntless reviewed more techniques, but not done yet. Thanks for the nice summary!

techniques/ios/MASTG-TECH-0055.md Outdated Show resolved Hide resolved
tools/ios/MASTG-TOOL-0055.md Show resolved Hide resolved
techniques/ios/MASTG-TECH-0055.md Outdated Show resolved Hide resolved
techniques/ios/MASTG-TECH-0055.md Show resolved Hide resolved
techniques/ios/MASTG-TECH-0055.md Show resolved Hide resolved
techniques/ios/MASTG-TECH-0055.md Show resolved Hide resolved
techniques/ios/MASTG-TECH-0055.md Show resolved Hide resolved
techniques/ios/MASTG-TECH-0055.md Show resolved Hide resolved
techniques/ios/MASTG-TECH-0055.md Show resolved Hide resolved
techniques/ios/MASTG-TECH-0055.md Show resolved Hide resolved
TheDauntless and others added 9 commits January 4, 2025 22:10

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Co-authored-by: Sven <[email protected]>

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Co-authored-by: Sven <[email protected]>

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Co-authored-by: Sven <[email protected]>

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Co-authored-by: Sven <[email protected]>

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Co-authored-by: Sven <[email protected]>

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Co-authored-by: Sven <[email protected]>

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Co-authored-by: Sven <[email protected]>

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Co-authored-by: Sven <[email protected]>

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Co-authored-by: Sven <[email protected]>
Copy link
Collaborator

@sushi2k sushi2k left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done!
Few small changes. But this is really a great update on how to do re-signing and run apps with Frida on iOS!

techniques/ios/MASTG-TECH-0056.md Outdated Show resolved Hide resolved
techniques/ios/MASTG-TECH-0056.md Outdated Show resolved Hide resolved
techniques/ios/MASTG-TECH-0056.md Outdated Show resolved Hide resolved
techniques/ios/MASTG-TECH-0056.md Outdated Show resolved Hide resolved
techniques/ios/MASTG-TECH-0056.md Outdated Show resolved Hide resolved
techniques/ios/MASTG-TECH-0090.md Outdated Show resolved Hide resolved
techniques/ios/MASTG-TECH-0090.md Outdated Show resolved Hide resolved
techniques/ios/MASTG-TECH-0090.md Outdated Show resolved Hide resolved
techniques/ios/MASTG-TECH-0090.md Outdated Show resolved Hide resolved
techniques/ios/MASTG-TECH-0092.md Outdated Show resolved Hide resolved
@cpholguera cpholguera changed the title Ipa installation by @NVISOSecurity Update IPA Installation Techniques and Tools (by @NVISOSecurity) Jan 21, 2025
Copy link
Collaborator

@sushi2k sushi2k left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Comments from Jan and Carlos should be addressed before merging.

Jeroen Beckers added 2 commits February 6, 2025 21:56
tools/ios/MASTG-TOOL-0128.md Outdated Show resolved Hide resolved
techniques/ios/MASTG-TECH-0056.md Show resolved Hide resolved

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
techniques/ios/MASTG-TECH-0055.md Outdated Show resolved Hide resolved
techniques/ios/MASTG-TECH-0055.md Outdated Show resolved Hide resolved
techniques/ios/MASTG-TECH-0055.md Outdated Show resolved Hide resolved
TheDauntless and others added 10 commits February 10, 2025 11:01

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Co-authored-by: Carlos Holguera <[email protected]>

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Co-authored-by: Carlos Holguera <[email protected]>

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Co-authored-by: Carlos Holguera <[email protected]>

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Co-authored-by: Carlos Holguera <[email protected]>

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Co-authored-by: Carlos Holguera <[email protected]>

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Co-authored-by: Carlos Holguera <[email protected]>

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Co-authored-by: Carlos Holguera <[email protected]>

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Co-authored-by: Carlos Holguera <[email protected]>

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Co-authored-by: Carlos Holguera <[email protected]>

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Co-authored-by: Carlos Holguera <[email protected]>
Copy link
Collaborator

@cpholguera cpholguera left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Amazing improvements Jeroen, thank you so much!

@cpholguera cpholguera merged commit a4bccf2 into master Feb 11, 2025
5 of 6 checks passed
@cpholguera cpholguera deleted the IPA_installation branch February 11, 2025 16:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Rewrite MASTG-TECH-0079
4 participants