Link to this headingSetting up Devices

  1. Jailbreak
  2. Change root password
  3. Install Tools
  4. Test Tools

Tools used for iOS

  • fsmon -
  • Tcpdump - A command line packet capture utility.
  • SSL kill switch
  • Trust Me - Disable certificate trust checks on iOS devices.
  • keychaindumper - A tool to check which keychain items are available to an attacker once an iOS device has been jailbroken.
  • Cycrypt - Cycript allows developers to explore and modify running applications on either iOS or Mac OS X using a hybrid of Objective-C++ and JavaScript syntax through an interactive console that features syntax highlighting and tab completion.
    Checkout policy:
  • otool - The otool command displays specified parts of object files or libraries.
  • Clutch - Decrypted the application and dump specified bundleID into binary or .ipa file.
  • Dumpdecrypted - Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.
  • Plutil - plutil is a program that can convert .plist files between a binary version and an XML version.
  • Frida -
  • sqlite -
  • theos -
  • debugserver - is a console app that acts as server for remote gdb or lldb debugging. It is installed when a device is marked for development.
  • ldid
  • strings - utility that will print all the strings in a given binary.
  • nm - utility that displays the symbol table of a given binary.

Checkin policy:
iOS: Script to remove old data
Android: reflash from backup