The people over at Security Innovation published a white paper on methods for performing penetration testing and runtime manipulation on iOS devices. Testers should consider investing time to learn how to perform this sort of testing as security and privacy issues are at the forefront of clients and stakeholders minds these days.
Some of the topics covered:
- Setting Up an iOS Pentest Lab
- Decrypting iOS Applications
- Reverse Engineering
- MITM on iOS
- Side Channel Leakage
Looks like I have some reading for this weekend.