Beacon Generation for iOS Attacks

10201 Views 2 Replies 1337day
#
04-07-2023, 03:00 PM |
When creating a generated bean through the. cna plugin, you can choose System as iOS and Arch as the arm64 target platform (currently only supports arm64 architecture).
   
Test oriented preview version

The final dynamic library. dylib file for the specified architecture will be generated. You can choose to package the dynamic library into the specified IPA installation package or inject it into the specified app.

The final callback code will be automatically executed when the dynamic library is loaded. It should be noted that the regular app that needs to be utilized has already applied for network permissions with the user before initiating the callback.


If it is your own app, it is necessary to consider matters related to user application for network, photo album, phone, recording, and other permissions during development.

And when performing file upload and download operations, if one exceeds their own permissions, the current process may be forcibly killed by the system (not yet resolved)

The app started by Root has ended the process in the foreground, but the backend can still run the bean thread started by the app during loading normally.
#
04-07-2023, 03:03 PM |
Do you have any test cases to share.

In case.Thank you for the code and the module plugin?
#
04-13-2023, 04:59 AM |
thank you for sharing.
Thread Info
Author1337day
Posted
Views10201
Replies2
Participants3

This board is for authorized security research only. Attacking systems without permission is illegal. The community follows responsible disclosure.