Hacking Passbook, the Real Way to do Extreme Couponing

Passbook boarding passes are zip archives that can be modified and re-signed with an Apple developer account; the author alters Sky Priority imagery but warns tampering invites TSA trouble.

Tampering with iOS Game Center leaderboards by proxying traffic through Burp and rewriting the submitScores score-value to the maximum signed integer, exposing weak server-side validation.

Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.

Reviews 2014 mobile penetration test trends and the ten most common critical findings, led by SQL injection in backend web services that mobile apps fail to protect.

Mobile platforms carry users' most intimate data, yet security is often an afterthought. NetSPI offers a threat modeling framework to evaluate mobile apps at design time or retroactively.

Some iOS apps ignore system proxy settings by using native websockets. This tutorial combines Wireshark sniffing, DNS spoofing, and a Burp MitM proxy to capture traffic on non-standard ports.