search

r00t-3xp10it / venom

venom - C2 shellcode generator/compiler/handler
1.76k stars 593 forks source link

payload ios #103

Open andrescastro7036 opened 3 years ago

andrescastro7036 commented 3 years ago

when generating a payload for ios a .mach0 file is created, how can I run that file on the iphone? payloadIOS

r00t-3xp10it commented 3 years ago

oki2

-> How to Execute a File in a MacBook Terminal <-

joblack3 commented 3 years ago

Ye but how do you execute that on iPhone ? Not macOS. You showed how to execute it in a Mac but how to you execute that on an iPhone ?

r00t-3xp10it commented 3 years ago

its the same thing ... just open IOS terminal and execute the commands ..

joblack3 commented 3 years ago

Is it possible to do it on an iPhone that is now jailbroken ?

r00t-3xp10it commented 3 years ago

i belive so ... (i didnt have test it)

dirtbag145 commented 2 years ago

I tried opening the link in IOS although page doesn't load up, iOS displays error with web although works fine when opened in kali desktop, was a solution made for this

r00t-3xp10it commented 2 years ago

maybee the browser its blocking download ??? In taht case ... deliver payload.apk manually ..

dirtbag145 commented 2 years ago

Apk won't work for IOS, only PIA files, apks only for android, that's why I was curious, If IOS is impossible right now I understand, IOS is difficult to get into

r00t-3xp10it commented 2 years ago

iam sorry my bad ... the payload created its not an APK ... its .MACHO == APPLE ... HINT: Search on youtube .. there are ALOT of videos exploiting (venom tool) IOS\APPLE .. https://securityonline.info/metasploit-official-support-ios-meterpreter/ yap

dirtbag145 commented 2 years ago

Could you point me in the right direction to check for IOS, I've googled and Used YouTube but nothing really comes up, and yes you are correct iOS is blocking it in the safari

dirtbag145 commented 2 years ago

At least without the phone already being jailbroken, I'm trying to test it on a non jailbroken phone

purevoc commented 2 years ago

@dirtbag145 The issue could be that you're not going to the right localhost address, in my case I entered the IP of the device running kali on safari with port 80 (for apache2) and it worked fine. My issue is after downloading the payload, it just gets downloaded as some useless file in downloads that can't be executed, for that reason the meterpreter session just keeps dying