Bad for Enterprise: Attacking BYOD Enterprise Mobile Security Solutions
summary
Claims that EMS is impenetrable are false: enterprise protections are bypassed on both jailbroken and non‑jailbroken iOS devices. The researcher builds Swizzler, a dynamic library that hooks Good Dynamics APIs to disable tamper detection and app locks, intercept and decrypt AES-256 container files, and route per‑app VPN traffic through Burp to internal servers. A provision data.config reveals internal app servers; HTTP proxying plus SQLmap yields a web shell in the demo. Swizzler is released with the talk.
AI-written summary · about
chapters (11)
- 0:00Start
- 0:09Announcements
- 3:27Overview of Ios Applications
- 7:53Features of an Ems Solution
- 11:05Lost Devices
- 13:35What Is Swiss Law
- 16:39How Is Direct Detection Done
- 20:59Application Lock and Device Wipe
- 34:55Insider Attacks
- 35:34The Human Factor
- 36:41Takeaways
related talks
37mEnterprise Apps: Bypassing the IOS Gatekeeper
49mContain Yourself: Building Secure Containers for Mobile Devices
54mThe Perimeter Has Been Shattered: Attacking and Defending Mobility and IoT on the Enterprise Network
58mUncovering OWASP’s Mobile Risks in iOS Apps
48mMobile Device Mismanagement
49mThe Perimeter Has Been Shattered
23mMalicious MDM: Fun with iOS MobileConfigs
49mHow to Hack Your Own Mobile App