Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Sky Prioritize Yourself

netspi.com | blog | #mobile-security | #ios | #travel | #passbook | #boarding-passes | #tampering

Summary

Passbook boarding passes are zip archives that can be modified and re-signed with an Apple developer account; the author alters Sky Priority imagery but warns tampering invites TSA trouble.
Published
Collected

original ↗

Related coverage

blog · netspi.com
Hacking Passbook, the Real Way to do Extreme Couponing
Shows intercepting iOS Passbook .pkpass files with a proxy, unzipping them, editing pass.json data, and redeploying modified coupons or gift cards to the device.
blog · bishopfox.com
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.
blog · netspi.com
Top 10 Critical Findings of 2014 – Mobile Applications
Reviews 2014 mobile penetration test trends and the ten most common critical findings, led by SQL injection in backend web services that mobile apps fail to protect.
blog · netspi.com
Mobile Application Threat Modeling
Mobile platforms carry users' most intimate data, yet security is often an afterthought. NetSPI offers a threat modeling framework to evaluate mobile apps at design time or retroactively.
blog · netspi.com
Reverse Engineering iOS Applications in a Fun Way
An overview of iOS app reverse engineering: class-dumping ipa binaries with Cycript and class-dump-z, hooking Objective-C methods via MobileSubstrate, and using iNalyzer or Snoop-it.
blog · netspi.com
Android Root Detection Techniques
Surveys how MDM solutions detect rooted Android devices, cataloging the packages, files, permissions, and commands they check, from BUILD test-keys to su binaries, tested on a rooted Nexus 4.
back