Dumping Memory on iOS 8

Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.

At 3 PM PDT on May 23, 2020, the unc0ver jailbreak was released for iOS 13.5 (the latest signed version at the time of release) using a zero-day vulnerability and heavy obfuscation. By 7 PM, I had identified the vulnerability and informed Apple. By 1 AM, I had sent Apple a POC and my analysis. This post takes you along that journey.

NetSPI's open LLM security benchmark tests how large language models resist jailbreaks under adversarial conditions while measuring the security-usability trade-off in enterprise deployments.

Mobile platforms carry users' most intimate data, yet security is often an afterthought. NetSPI offers a threat modeling framework to evaluate mobile apps at design time or retroactively.

When an iOS app blocks installs below a required version, jailbroken devices can fake ProductVersion in SystemVersion.plist or patch the IPA's plist, plus bypass cert checks via SSL Kill Switch.

An overview of iOS app reverse engineering: class-dumping ipa binaries with Cycript and class-dump-z, hooking Objective-C methods via MobileSubstrate, and using iNalyzer or Snoop-it.