The iOS application attack surface consists of all components of the application, including the supportive material necessary to release the app and to support its functioning.
CTD’s approach to iOS application assessments includes reviewing how application reacts against common input attacks, server-side controls, data communication paths and client-related issues
Search for sensitive information disclosures & decompile to source code
Analyzing Config files: reveals URL, Server credentials, Cryptographic keys, Hard coded passwords
Reverse Engineering: Using reversing tools, Device Binding,
Impede Comprehension, Impede Dynamic Analysis and Tampering
Attempt to inject and bypass authentication controls & review data communications functionality
Input Validation: Injection, Malicious Input acceptance, Command Injection
Buffer Overflow, File Upload, Business logic validations, Error handling/ Info Leakage, Session management, Log tampering
Vulnerabilities specific to web servers: Directory Traversal, Command injection, Remote code execution, SQL injection, Sensitive file exposure, Web server miss configuration exploitation
API/Webservices testing: authorization, IDOR, Injections and exploits, API business logic bypas like skipping payments, API missconfigurations
Identify potential for denial of service (DOS) attacks
Call us or write us an email with your requirements
Establish what needs to be tested and the right approach
We attack your applications to discover vulnerabilities
We will present all the findings and solutions to fix them
Contact our offensive security experts today to discuss your requirements
