Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ipa installation by @NVISOSecurity #3100

Open
wants to merge 14 commits into
base: master
Choose a base branch
from
Open

Conversation

TheDauntless
Copy link
Collaborator

@TheDauntless TheDauntless commented Dec 26, 2024

A cleanup of all the iOS signing / installing / running in debug mode.

I tried to be pragmatic, focussing on different techniques that work (I tested all of them, it was not a fun day) and also focussing on modern solutions rather than keep holding on to outdated ones.

This fixes #3090

Copy link
Collaborator

@sushi2k sushi2k left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great content @TheDauntless! Also the warnings/tips for AppSync and libimobiledevice are spot on! I've reviewed the tools, planning to do the rest today or tomorrow.

tools/ios/MASTG-TOOL-0055.md Outdated Show resolved Hide resolved
tools/ios/MASTG-TOOL-0055.md Outdated Show resolved Hide resolved
A tool used to connect via SSH to a jailbroken iPhone via USB - <https://github.com/tcurdt/iProxy>
iProxy allows you to forward a port from a connected iOS device to a port on the host machine. iProxy can be useful for interacting with jailbroken devices, as some jailbreaks do not expose the SSH port on the public interface. With iProxy, the SSH port can be forwarded over USB to the host, allowing you to still connect to it.

!!! warning

This comment was marked as outdated.

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Those are admonitions. They're not markdown, but they are part of mkdocs. There's a run_web.sh you can use to preview, or the vscode workspace.

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

(I'm going to mark your other comments related to this syntax as resolved)

tools/ios/MASTG-TOOL-0055.md Show resolved Hide resolved
tools/ios/MASTG-TOOL-0118.md Show resolved Hide resolved
@@ -8,3 +8,6 @@ source: https://sideloadly.io/
---

[Sideloadly](https://sideloadly.io/ "Sideloadly") allows you to obtain a valid signature for a given IPA file and then install it to a connected iOS device. In addition to signing and installing an IPA file, Sideloadly also allows you to inject tweaks, change the App or Bundle name or make other limited modifications to the IPA metadata. Sideloadly is available on both macOS and Windows.

!!! warning "Do not use your personal Apple account"
To sign an IPA file, you will need a valid iOS developer account, either free or paid. Both types come with certain restrictions, as explained on the Sideloadly website. We recommend creating a dedicated developer account for signing test applications, and **not** using your personal Apple account.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What would be the restrictions when using a paid developer account?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not sure I understand this comment.

tools/ios/MASTG-TOOL-0055.md Show resolved Hide resolved
tools/ios/MASTG-TOOL-0126.md Outdated Show resolved Hide resolved
tools/ios/MASTG-TOOL-0126.md Show resolved Hide resolved
tools/ios/MASTG-TOOL-0127.md Show resolved Hide resolved
@TheDauntless
Copy link
Collaborator Author

Thanks for the review so far!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Rewrite MASTG-TECH-0079
2 participants