sensepost / objection

📱 objection - runtime mobile exploration
GNU General Public License v3.0
7.33k stars 840 forks source link

Comparison returns kSecAccessControlBiometryCurrentSet even if kSecAccessControlBiometryAny is set #495

Open httshka opened 2 years ago

httshka commented 2 years ago

https://github.com/sensepost/objection/blob/c2121af4944b44220f56a56fd283334aff9f6b16/agent/src/ios/keychain.ts#L240 While fiddling a bit with some keychain "ACL's" I found out that when I run ios keychain dump this check will return kSecAccessControlBiometryCurrentSet even if kSecAccessControlBiometryAny is in use. On my side I was able to fix this by changing strict to loose comparison in the /lib/python3.9/site-packages/objection-1.11.0-py3.9.egg/objection/agent.js code.