search

OWASP / owasp-mastg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
https://mas.owasp.org/
Creative Commons Attribution Share Alike 4.0 International
11.75k stars 2.33k forks source link

IOS Crackme Level2 can't be executed #1817

Closed kismp123 closed 3 years ago

kismp123 commented 4 years ago

Describe the bug A clear and concise description of what the bug is. I ran successfully level 1 crackme. However I could not run level2 

unknownui-iPhone:/var/containers/Bundle/Application/06EB2B21-8C7E-4778-A19E-D4E2B2CFA2CB/UnCrackable Level 2.app root# ./UnCrackable\ Level\ 2 
Abort trap: 6

crackme or other challenge Describe the crackme or other challenge that is broken

To Reproduce Steps to reproduce the behavior:

  1. Tab on app to run
  2. You can see it does not work

Expected behavior A clear and concise description of what you expected to happen.

Screenshots If applicable, add screenshots to help explain your problem. IMG_0165 1

Additional context Add any other context about the problem here, such as platform on which you encounter the issue, technical details on versioning of the tools you used, etc.

my phone is iPhone 6 iOS 12.4.5

unknownui-iPhone:~ root# uname -a
Darwin unknownui-iPhone 18.7.0 Darwin Kernel Version 18.7.0: Mon Aug 19 22:24:08 PDT 2019; root:xnu-4903.272.1~1/RELEASE_ARM64_T7000 iPhone7,2 arm64 N61AP Darwin
daMatz commented 4 years ago

Hi, have you tried to run it on a non-jailbroken device? Maybe there are mechanisms in place, that prevent you from running it on a jailbroken device ;)

kismp123 commented 4 years ago

I don't think so because all of apps prevent jailbroken run UI normally. :(

daMatz commented 4 years ago

When I tried to run it on a jailbroken device, it also closed itself immediately. Then I applied a script to bypass jailbreak detection via Frida (for this task check out RMS - Runtime Mobile Security) and it started normally.

cpholguera commented 3 years ago

Closing due to inactivity. Please reopen if more support is needed.