iOS Penetration Testing

Table of contents

Jailbreak
Cydia Sources
Burp Suite
Tools

Jailbreak

checkra1n (A7-A11, up to latest iOS)
unc0ver (All devices, iOS 11.0 - 13.5)
odyssey (All devices, iOS 13.0 - 13.7)
fugu (A10-A10X, iOS 13 - 13.5.1)
chimera (All devices, iOS 12.0 — 12.5)
rootlessJB4 (A7-A11, iOS 12.0 - 12.4.8)
electra (All devices, iOS 11.0 – 11.4.1)

Cydia Sources

Spark - https://sparkdev.me/
Ivano Bilenchi - https://ib-soft.net/cydia/
Ryan Petrich - https://rpetri.ch/repo/
Junes iPhone - https://junesiphone.com/supersecret/
TigiSoftware - https://data.tigisoftware.com/cydia/
Bingner - https://apt.bingner.com/
XenPublic - https://xenpublic.incendo.ws/
Nepeta - https://repo.nepeta.me/
Skitty - https://skitty.xyz/repo/
PoomSmart - https://poomsmart.github.io/repo/
Packix - https://repo.packix.com/
Evelyn's Collection - https://evynw.github.io/
Julio Verne - https://julioverne.github.io/
BigBoss - http://apt.thebigboss.org/repofiles/cydia/
Chairz - https://repo.chairz.com/
Dynastic - https://repo.dynastic.co/
CreatureCoding - https://creaturecoding.com/repo/
Buufjuiced - https://buufjuiced.yourepo.com/
ModMyi - http://apt.modmyi.com/
ZodTTD & MacCiti - http://cydia.zodttd.com/repo/cydia/

Burp Suite

Bypass SSL pinning
- Cydia dependencies
  - Debian Packager
  - Cydia Substrate
  - PreferenceLoader
- Download latest release of ssl-kill-switch2
  - https://github.com/nabla-c0d3/ssl-kill-switch2/releases
- Install

dpkg -i <package>.deb
killall -HUP SpringBoard

Install CA certificate
- Turn on burp proxy
- Configure Wifi proxy settinngs
- http://burp
- Install certificate
Mobile Assistant
- https://portswigger.net/burp/documentation/desktop/tools/mobile-assistant/installing
- enable Burp proxy on all interfaces
- add as a source to cydia and install mobile assistant

Tools