@@ -8,19 +8,26 @@ pinning - within iOS Apps.
8
8
Description
9
9
-----------
10
10
11
- Once installed on a jailbroken device, iOS SSL Kill Switch patches
12
- NSURLConnection and SecTrustEvaluate() to override and disable the system's
13
- default certificate validation as well as any kind of custom certificate
14
- validation (such as certificate pinning). It was succesfully tested against
15
- Twitter, Card.io and Square; all of them implement certificate pinning. iOS
16
- SSL Kill Switch was initially released at Black Hat Vegas 2012.
11
+ Once installed on a jailbroken device, iOS SSL Kill Switch patches low-level
12
+ SSL functions within the Secure Transport API, including _ SSLSetSessionOption()_
13
+ and _ SSLHandshake()_ in order to override and disable the system's default
14
+ certificate validation as well as any kind of custom certificate validation
15
+ (such as certificate pinning).
16
+
17
+ It was successfully tested against the Twitter, Facebook, Square and Apple App
18
+ Store apps; all of them implement certificate pinning. iOS SSL Kill Switch was
19
+ initially released at Black Hat Vegas 2012.
20
+
21
+ For more technical details on how it works, see
22
+ http://nabla-c0d3.github.io/blog/2013/08/20/ios-ssl-kill-switch-v0-dot-5-released/
17
23
18
24
19
25
Installation
20
26
------------
21
27
22
28
Users should first download the pre-compiled Debian package (tested on iOS 6.1):
23
- http://nabla-c0d3.blogspot.com/2013/06/ios-ssl-kill-switch-v04-released.html
29
+ http://nabla-c0d3.github.io/blog/2013/08/20/ios-ssl-kill-switch-v0-dot-5-released/
30
+
24
31
25
32
### Dependencies
26
33
@@ -50,6 +57,13 @@ Finally, kill and restart the App you want to test.
50
57
dpkg -r com.isecpartners.nabla.sslkillswitch
51
58
52
59
60
+ Intercepting the App Store's traffic
61
+ ------------------------------------
62
+
63
+ Additional instructions are available here:
64
+ http://nabla-c0d3.github.io/blog/2013/08/20/intercepting-the-app-stores-traffic-on-ios/
65
+
66
+
53
67
Build
54
68
-----
55
69
@@ -65,6 +79,15 @@ Then, the package can be built using:
65
79
make package
66
80
67
81
82
+ Changelog
83
+ ---------
84
+
85
+ * v0.5: Complete rewrite in order to add support for proxy-ing Apple's App Store application.
86
+ * v0.4: Added hooks for SecTrustEvaluate().
87
+ * v0.3: Bug fixes and support for iOS 6.
88
+ * v0.2: Initial release.
89
+
90
+
68
91
License
69
92
-------
70
93
0 commit comments