iOSアプリからVPN接続の検出をする

Transcript

1. App Protection potatotips #51 1 — ! @noppefoxwolf, 2018

2. noppe @noppefoxwolf iOSΞϓϦσϕϩούʔ ! ͕޷͖Ͱ͢ʂ potatotipsॳࢀઓͰ͢ʂ 2 — ! @noppefoxwolf,

   2018

3. 3 — ! @noppefoxwolf, 2018

4. 4 — ! @noppefoxwolf, 2018

5. Charles for iOS͕ൃച͞Ε·ͨ͠Ͷʂ → Charles͸iOS͔Βͷ HTTP ͱ HTTPS ͷτϥϑΟο ΫΛΩϟϓνϟͰ͖ΔΞϓϦ

   → ௨৴ܥͷσόοάʹͱͯ΋ศརͰ͢ΑͶʂ 5 — ! @noppefoxwolf, 2018

6. ࣗ෼ͷΞϓϦͷ௨৴Λݟ͍ͯͨΒ… 6 — ! @noppefoxwolf, 2018

7. ࣗ෼ͷΞϓϦͷ௨৴Λݟ͍ͯͨΒ… ۮવCharlesΛ͚ͭͬͺͳ͠ͰTwitterͷΞϓϦΛ։͍ ͯ͠·ͬͨɻ 7 — ! @noppefoxwolf, 2018

8. λΠϜϥΠϯͷߋ৽͕ग़དྷ·ͤΜͰͨ͠ɻ 8 — ! @noppefoxwolf, 2018

9. ࠓճ͸͜ͷಈ࡞Λ࣮૷͠·ͨ͠ɻ 9 — ! @noppefoxwolf, 2018

10. Charlesͷ࣮૷ ·ͣCharlesͷ࣮૷Λ֬ೝ͠·͢ɻ try! Swift Tokyo 2018 - Introducing Charles for

    iOS1 1 https://www.youtube.com/watch?v=RWotEyTeJhc 10 — ! @noppefoxwolf, 2018

11. Charlesͷ࣮૷ NetworkExtensionΛ࢖ͬͯɺVPN2ίωΫγϣϯΛ ష͍ͬͯΔɻ iOSͷVPNͷৗ࣌઀ଓػೳΛ࢖͑͹ΞϓϦ͔Β͢΂ͯ ͷIPτϥϑΟοΫ͕τϯωϦϯάग़དྷΔɻ3 3 https://developer.apple.com/documentation/networkextension 2 Virtual private

    network Ծ૝ϓϥΠϕʔτωοτϫʔΫ 11 — ! @noppefoxwolf, 2018

12. ΞϓϦ͔ΒVPN͕షΒΕ͍ͯΔ͔νΣοΫग़དྷΕ͹OKͦ͏ 12 — ! @noppefoxwolf, 2018

13. VPNݕग़ CFNetworking.frameworkΛ࢖͏͜ͱͰɺݕग़Ͱ͖Δɻ CFNetworkCopySystemProxySettings() ↑ͰγεςϜͷΠϯλʔωοτϓϩΩγઃఆΛऔಘग़ དྷ·͢ɻ 13 — ! @noppefoxwolf, 2018

14. Swift.Unmanaged<__ObjC.CFDictionary>(_value: { "__SCOPED__" = { utun4 = { HTTPSPort =

    8080; HTTPSProxy = "10.78.2.43"; }; }; }) __SCOPED__ʹϓϩΩγઃఆ͕ೖ͍ͬͯΔ tunؚ͕·ΕΔઃఆ͸τϯωϧͳͷͰ஄͍ͯྑ͍…ʁ 14 — ! @noppefoxwolf, 2018

15. VPNDetector https://github.com/noppefoxwolf/VPNDetector 15 — ! @noppefoxwolf, 2018

16. ! Ҏ্Ͱ͢ʂ ͋Γ͕ͱ͏͍͟͝·ͨ͠ 16 — ! @noppefoxwolf, 2018