Runtime Manipulation of Android and iOS Applications
summary
Shows live runtime manipulation on Android and iOS using concrete tools and commands: attach to an emulator with ADB and jdb, set breakpoints, run locals and eval to change transaction fields (demo sets amount=800 before sending), warns only one debugger can attach, and explains dumping memory via HPROF then converting with hprof-conv to analyze with jhat or Eclipse MAT. On iOS uses Snoop-it and Cycript to invoke methods (example bypass via dismissLockScreen), inspect UITextField/NSString memory, and perform method swizzling on jailbroken devices.
AI-written summary · about
chapters (12)
- 0:00Introduction to speakers
- 0:22What is runtime analysis
- 1:11Android testing environment
- 3:59Attaching to Android apps
- 5:59Android debugging demo
- 14:11iOS runtime analysis tools
- 16:22Snoop-it iOS demonstration
- 19:44Cycript tool overview
- 27:16Cycript iOS demonstration
- 32:07Memory analysis techniques
- 34:51iOS binary analysis
- 36:24Android analysis and Q&A
related talks
29miOS Runtime Manipulation (PWND)
44m Meticulously Modern Mobile Manipulations
40mIntroduction into Reverse Engineering and iOS Security
45mReverse engineering mobile apps: how, why, and what now?
47mBASHing iOS Applications
58mUncovering OWASP’s Mobile Risks in iOS Apps
53mAndroid: He protec, but he also attac
45mCombat Reverse Engineering and Patching on Non-Jailbroken iOS Devices