Pentesting Swift Application with OWASP iGoat
summary
Demonstrates a Swift 4 rework of OWASP iGoat with live demos and a Docker server so lessons run locally and on AWS The talk shows concrete bugs found in real audits including a hard-coded AWS access key and secret that lets an attacker list IAM users and launch EC2 instances It uses practical tools like Hopper disassembler and Xcode and ships code on GitHub The project is runnable now as OWASP iGoat (Swift) and includes fixes and mitigation guidance
AI-written summary · about
chapters (24)
- 0:00Introduction
- 1:14Agenda
- 1:40Interactive
- 2:03Why Mobile Security
- 2:49Mobile Traffic
- 3:50Security Focus
- 4:20Critical Findings
- 5:28AWS References
- 5:52AWS Keys
- 6:25EC2 Instance
- 6:49Second Case Study
- 8:33Risks to Mobile Data
- 8:49Jailbreak
- 9:04iOS versions
- 9:19Jailbreaking
- 9:42Brute Force
- 10:17Project WASP
- 10:50Demo
- 11:42iGoat Architecture
- 12:05Swift Release
- 12:27Challenges
- 13:01Serverside vulnerabilities
- 13:15Compatibility
- 14:40Conclusion
related talks
26miGoat: A Self Learning Tool for iOS App Pentesting and Security
36mOWASP IoTGoat Project Overview and Roadmap
45mLeveraging Projects and Tools to Transform Your SDLC
41mLive Hacking: Breaking into Your Web App
57mEnterprise Ethical Hacking Cloud Applications
37mAI Goat: A Damn Vulnerable AI Infrastructure
01h 02mLive Hacking: Breaking into your Web App
28mFlagship Projects: Security Shepherd