Port MASTG-TEST-0088 (by @appknox) #3073
Conversation
|
Could you please include a MASTG-DEMO as well using our app? This greatly helps understanding the test, so we're going to make this a requirement for everyone from now on (unless there's a good reason to schedule it for later, e.g. due to great complexity). Thanks a lot @sk3l10x1ng! |
@cpholguera Added Demo , please review it . |
|
|
||
| The test verifies that a mobile application can identify whether if the iOS device it is running on a jailbroken device. Jailbreaking removes built-in security restrictions on the device, potentially exposing sensitive information and increasing the risk of unauthorised access. | ||
|
|
||
| ## Steps |
There was a problem hiding this comment.
The demo doesn't correspond with these steps, so I split it into 2 tests:
- Jailbreak Detection in Code (corresponds with the current demo, static)
- Runtime Use of Jailbreak Detection Techniques (dynamic via bypass)
There was a problem hiding this comment.
update using the new code
There was a problem hiding this comment.
update using the new code
Co-authored-by: Jeroen Beckers <[email protected]>
…namic analysis test
|
|
||
| Consider that there may be other resiliency mechanisms in place that prevent the application from running, such as runtime integrity checks, so the app may still not run even if the jailbreak detection checks are bypassed, or you may not be able to get to the point where the jailbreak detection checks are executed before the app crashes. | ||
|
|
||
| Even if the automated jailbreak detection bypass commands are not successful, they may provide useful information to help you narrow down the jailbreak detection checks implemented in the app. |
There was a problem hiding this comment.
| Even if the automated jailbreak detection bypass commands are not successful, they may provide useful information to help you narrow down the jailbreak detection checks implemented in the app. |
If they give any useful info, the check would already pass.
|
@cpholguera will work on the requested changes |
Co-authored-by: Jeroen Beckers <[email protected]>
Co-authored-by: Jeroen Beckers <[email protected]>
Co-authored-by: Jeroen Beckers <[email protected]>
Co-authored-by: Jeroen Beckers <[email protected]>
Co-authored-by: Jeroen Beckers <[email protected]>
PR closes #3006