Jailbreaking iOS for Mobile Security Assessments - SANS@Mic

  • Wednesday, 13 Jan 2021 7:00PM UTC (13 Jan 2021 19:00 UTC)
  • Speaker: Raul Siles

The SANS \SEC575: Mobile Device Security and Ethical Hacking" training highlights how gaining privileged access to a mobile device is often needed, and highly recommended, to perform in-depth low-level mobile security assessments. All popular mobile devices come with default restrictions that limit the activities required by security analysts to research and assess the security of the mobile operating system and mobile apps. '

This is especially true for iOS and iPadOS Apple mobile devices, such as iPhones and iPads. In this session we will take a practical look at some of the most common steps required to jailbreak an iOS testing mobile device nowadays, using modern versions of the iOS mobile operating system. '

The session goal is to go through some of the most current jailbreak tools and their pre-requisites, evaluate what target iOS versions are impacted by the most recent jailbreaks, and the procedure involved in this process. The session will end up with a live demo to gain root access into an iOS mobile device that can be leveraged to perform advanced mobile security analysis and research in this platform and its associated apps.