Malicious MDM: Fun with iOS MobileConfigs
Talkat AppSec California 2015 · on Tuesday, 2015-01-27· at 12:00· Annenberg Community Beach House: Track 1, 415 Pacific Coast Hwy·
summary
A live demo deploys malicious .mobileconfig profiles via USB, QR/URL and phishing to push Wi‑Fi, VPN, proxy, web clips and a root CA to iOS devices; the attacker uses iPhone Configuration Utility and a Burp intercepting CA on a pocket Wi‑Fi + Raspberry Pi proxy to capture traffic. Microsoft ActiveSync often sends Basic (domain) credentials in practice. Profiles can be marked non‑removable or time‑limited and the described setup successfully captures enterprise creds when devices accept the profile.
AI-written summary · about
chapters (6)
- 0:00Start
- 9:21set a default ssid
- 10:15set up vpn settings
- 19:09show you the iphone config utility
- 19:51set passcode restrictions
- 22:17set up other profiles
related talks
37mEnterprise Apps: Bypassing the IOS Gatekeeper
48mMobile Device Mismanagement
48mA Practical Attack Against VDI Solutions
48mMobile Security Attacks: A Glimpse from the Trenches
30mDeath Profile: Now iOS Has Been Compromised to Suspected Ransomware
39mBad for Enterprise: Attacking BYOD Enterprise Mobile Security Solutions
27mA Practical Attack Against VDI Solutions
40mIntegrating Mobile Devices into your Penetration Testing Program