What is Needle? Black Hat Arsenal USA A tool for auditing iOS Application Security An open source, modular framework •streamline the entire process •acts as a central hub Not a vuln scanner •knowledge (and intuition) of the tester is still required
+ The framework core exposes APIs to interact with the local and remote OS + These wraps common functionalities • file and data access • command execution • networking + Speed-up creation of new modules API Black Hat Arsenal USA
+ python needle-cli.py -g APP=mwr.ios.dvia -m binary/info/metadata -m device/agent_client#COMMAND=OS_VERSION Non Interactive Mode Black Hat Arsenal USA
Roadmap Black Hat Arsenal USA •Replace all the dependencies Agent to deploy on device Support for non-jailbroken devices •Substrate integration •WebView scanner •Hook Swift methods •URI handlers fuzzer •Obfuscation detection New modules … community based
marcolancini
hirosatogamo
.png){kind=icon}
pharma_x_tech
autifyhq
torounit
nishiuma
hiashisan
nagiss
linedevth
ytaisei
tatsuru
tmokmss
daikimori
wjessup
bryan
destraynor
carmenintech
paigeccino
sachag
lauravandoore
orderedlist
schacon
pedronauck
bkeepers