|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/hacking-and-pentesting-ios-applications/
课程评论：没有评论
课程名称：iOS应用程序黑客与渗透测试 课程概述：本课程旨在告别过时的iOS应用程序渗透测试工具和技术，以正确的方式学习iOS应用程序渗透测试。课程介绍了与使用Objective-C开发的iOS应用程序相关的安全概念（不使用Swift iOS应用程序）。这是一个中级课程，起始部分覆盖初学者概念，逐步深入。 课程内容涵盖多种主题，包括iOS应用程序结构、使用Hopper进行iOS应用程序反向工程、绕过客户端限制（如越狱检测和SSL钉扎等）。课程中使用了两款由讲师开发的易受攻击应用程序，以演示如何识别和利用iOS应用程序的漏洞。 学习内容包括识别多种iOS应用漏洞，如不安全的数据存储、不安全的日志记录、弱越狱检测、不安全的端到端加密、SQL注入等。课程的亮点在于，您将详细了解如何追踪iOS应用程序的运行时并编写多个Frida脚本来进行目标应用程序的渗透测试。
This course is created with an idea of saying Bye Bye to outdated iOS application penetration testing tools and techniques. Let us learn iOS Application Penetration Testing the right way with right tools and techniques. This course introduces students to the security concepts associated with iOS Apps developed using Objective-C (Swift iOS Apps are not used in the course). This is an intermediate level course, which begins with beginner level concepts. This course covers a variety of concepts such as iOS Application structure, Reversing iOS Apps using Hopper, Bypassing client side restrictions such as Jailbreak detection, SSL Pinning etc. This course uses two vulnerable applications developed by the instructor to demonstrate how iOS App vulnerabilities can be identified and exploited. This course teaches you how to identify a variety of iOS App vulnerabilities such as Insecure Data Storage, Insecure Logging, Weak Jailbreak detection, insecure end to end encryption, SQL Injection etc.The best part of the course is that you will get a detailed understanding of how to trace an iOS app's runtime and write a bunch of Frida scripts to pentest the target applications. The best part of the course is that you will get a detailed understanding of how to trace an iOS app's runtime and write a bunch of Frida scripts to pentest the target applications.
