-
-
Notifications
You must be signed in to change notification settings - Fork 2.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Port MASTG-TEST-0082 (by @appknox) #3097
base: master
Are you sure you want to change the base?
Conversation
|
||
## Steps | ||
|
||
1. Run a static analysis using @MASTG-TOOL-0111 to extract entitlements from the binary to check the value of the `get-task-allow` key and is set to `true`. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Prefer to use the technique instead of specific tools in TESTS
https://mas.owasp.org/MASTG/techniques/ios/MASTG-TECH-0111/
Also, let's do the evaluation (check for true, in this case) later.
1. Run a static analysis using @MASTG-TOOL-0111 to extract entitlements from the binary to check the value of the `get-task-allow` key and is set to `true`. | |
1. Use @MASTG-TECH-0111 to extract entitlements from the binary and obtain the value of the `get-task-allow` key. |
## Steps | ||
|
||
1. Run a static analysis using @MASTG-TOOL-0111 to extract entitlements from the binary to check the value of the `get-task-allow` key and is set to `true`. | ||
2. Run a [dynamic analysis](../../../techniques/ios/MASTG-TECH-0084.md) using @MASTG-TOOL-0057. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The static analysis step should be enough. However, you still can refer to this TECH. See overview
|
||
## Observation | ||
|
||
The entitlement get-task-allow is false, and anti-reverse engineering measures prevent debugger attachment attempts. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The entitlement get-task-allow is false, and anti-reverse engineering measures prevent debugger attachment attempts. | |
The output contains the value of the `get-task-allow` entitlement. |
|
||
## Evaluation | ||
|
||
The test fails as the entitlement get-task-allow is true, allowing debugger attachment. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The test fails as the entitlement get-task-allow is true, allowing debugger attachment. | |
The test fails if the `get-task-allow` entitlement is `true`. |
|
||
## Overview | ||
|
||
The test evaluates whether an iOS application is configured to allow debugging. If an app is debuggable, attackers can leverage debugging tools to reverse-engineer the application, analyse its runtime behaviour, and potentially compromise sensitive data or functionality. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The test evaluates whether an iOS application is configured to allow debugging. If an app is debuggable, attackers can leverage debugging tools to reverse-engineer the application, analyse its runtime behaviour, and potentially compromise sensitive data or functionality. | |
The test evaluates whether an iOS application is configured to allow debugging. If an app is debuggable, attackers can leverage debugging tools (see @MASTG-TECH-0084) to analyse the runtime behaviour of the app, and potentially compromise sensitive data or functionality. |
First round of review done. Please remember to include a demo using https://github.com/cpholguera/MASTestApp-iOS Thanks a lot @jeel38! |
closes #3010