+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Pentesting and Forensics (https://hackforums.net/forumdisplay.php?fid=231)
+---- Thread: Iphone shellcode to executable (.ipa extension) (/showthread.php?tid=5788272)
Iphone shellcode to executable (.ipa extension) - The Shark Inc. - Jan 21, 2018
I try to make an executable shellcode (.ipa extension) file for Iphone.
I have 2 options.
1) Use eggshell (like metasploit for ios/macos) to generate a terminal command(shellcode) to run on the target device,
The problem here is i don't know how to make an executable program to execute terminal commands on Iphone (dont know what libraries to use , and also what programming language. like swift(only for ios/macos))
2)
Use metasploit , generate osx/armle/reverse_tcp payload but i dont know what file format should i use(e.g msfvenom -f exe) to meet my criteria.
Any answers?
RE: Iphone shellcode to executable (.ipa extension) - The Shark Inc. - Jan 24, 2018
can you understand what i asked or you are useless?
RE: Iphone shellcode to executable (.ipa extension) - .eXe - Jan 25, 2018
(Jan 24, 2018 12:36 PM)The Shark Inc. Wrote: can you understand what i asked or you are useless?
You're the one that is asking how to run shellcode with no idea on where to begin. You're the useless one.
RE: Iphone shellcode to executable (.ipa extension) - hempuk - Jan 25, 2018
calling us useless, when you are the one who has no idea what you are doing... no one will help you now... mug ..i.
RE: Iphone shellcode to executable (.ipa extension) - Smileツ - Jan 25, 2018
Use .exe and good luck buddy.
RE: Iphone shellcode to executable (.ipa extension) - The Shark Inc. - Jan 28, 2018
(Jan 25, 2018 04:13 AM)Evil.eXe Wrote: You're the one that is asking how to run shellcode with no idea on where to begin. You're the useless one.
I didn't want to offend you , i am sorry
So back on my question , i'd like to know if you have any answers on my problem.
Best regards
RE: Iphone shellcode to executable (.ipa extension) - CyberStrike - Jan 28, 2018
OP check out the following
https://reverseengineering.stackexchange.com/questions/2814/disassemble-edit-and-re-assembly-ios-ipa-apps
https://www.packtpub.com/mapt/book/networking_and_servers/9781785883255/8/ch08lvl1sec58/shell-reverse-tcp-for-ios
exe will not work on an IOS device
RE: Iphone shellcode to executable (.ipa extension) - The Shark Inc. - Jan 29, 2018
(Jan 28, 2018 01:39 PM)sirru5h Wrote: OP check out the following
https://reverseengineering.stackexchange.com/questions/2814/disassemble-edit-and-re-assembly-ios-ipa-apps
https://www.packtpub.com/mapt/book/networking_and_servers/9781785883255/8/ch08lvl1sec58/shell-reverse-tcp-for-ios
exe will not work on an IOS device
Thanks for your help but i already have read the second link yesterday.
my problem now is how to bypass the gatekeeper so the victim can install unn signed apps
i thought making a backdoored app and upload it to vshare (3rd party enterprise app certificate signing).
What's you opinion?
RE: Iphone shellcode to executable (.ipa extension) - CyberStrike - Jan 29, 2018
Well I'll be honest, I don't mess with phones too often, more of network/webapp pentesting .. that said code signing certificates are a plus. If you try to upload to say ITunes you would never make it they actually check stuff, Google Play is a different story though.
RE: Iphone shellcode to executable (.ipa extension) - denizdifiesso - Jan 25, 2021
This can help you man! :)
fastlane[.]tools/
github[.]com/fastlane/examples
firebase.google[.]com/docs/app-distribution/ios/distribute-fastlane
docs.fastlane[.]tools/actions/xcodebuild/
>>> docplayer[.]net/191860791-The-xcsset-malware-inserts-malicious-code-into-xcode-projects-performs-uxss-backdoor-planting-in-safari-and-leverages-two-zero-day-exploits.html
You can take a hint from these links, I hope to have been helpful! :-)
My BTC Address: 123M7q7qYbP4gPxDdscXfZjC2tANiRskZa
This is for distributing your App and for installing via MobileSafari! :)
web.archive[.]org/web/20190824102915/bentedder[.]com/self-hosting-an-ad-hoc-distribution-ipa-file-for-app-development/
𝑨𝒅𝒅 𝒉𝒕𝒕𝒑:// 𝒂𝒏𝒅 𝒂𝒇𝒕𝒆𝒓 20190824102915 𝒕𝒉𝒆 𝒉𝒕𝒕𝒑://𝒘𝒘𝒘.
All links uncensored:
𝗵𝘁𝘁𝗽://𝘄𝗲𝗯.𝗮𝗿𝗰𝗵𝗶𝘃𝗲.𝗼𝗿𝗴/𝘄𝗲𝗯/𝟮𝟬𝟭𝟵𝟬𝟴𝟮𝟰𝟭𝟬𝟮𝟵𝟭𝟱/𝗵𝘁𝘁𝗽://𝘄𝘄𝘄.𝗯𝗲𝗻𝘁𝗲𝗱𝗱𝗲𝗿.𝗰𝗼𝗺/𝘀𝗲𝗹𝗳-𝗵𝗼𝘀𝘁𝗶𝗻𝗴-𝗮𝗻-𝗮𝗱-𝗵𝗼𝗰-𝗱𝗶𝘀𝘁𝗿𝗶𝗯𝘂𝘁𝗶𝗼𝗻-𝗶𝗽𝗮-𝗳𝗶𝗹𝗲-𝗳𝗼𝗿-𝗮𝗽𝗽-𝗱𝗲𝘃𝗲𝗹𝗼𝗽𝗺𝗲𝗻𝘁/
𝗵𝘁𝘁𝗽𝘀://𝗳𝗶𝗿𝗲𝗯𝗮𝘀𝗲.𝗴𝗼𝗼𝗴𝗹𝗲.𝗰𝗼𝗺/𝗱𝗼𝗰𝘀/𝗮𝗽𝗽-𝗱𝗶𝘀𝘁𝗿𝗶𝗯𝘂𝘁𝗶𝗼𝗻/𝗶𝗼𝘀/𝗱𝗶𝘀𝘁𝗿𝗶𝗯𝘂𝘁𝗲-𝗳𝗮𝘀𝘁𝗹𝗮𝗻𝗲
𝙝𝙩𝙩𝙥𝙨://𝙜𝙞𝙩𝙝𝙪𝙗.𝙘𝙤𝙢/𝙛𝙖𝙨𝙩𝙡𝙖𝙣𝙚/𝙚𝙭𝙖𝙢𝙥𝙡𝙚𝙨/
𝗵𝘁𝘁𝗽𝘀://𝗱𝗼𝗰𝗽𝗹𝗮𝘆𝗲𝗿.𝗻𝗲𝘁/𝟭𝟵𝟭𝟴𝟲𝟬𝟳𝟵𝟭-𝗧𝗵𝗲-𝘅𝗰𝘀𝘀𝗲𝘁-𝗺𝗮𝗹𝘄𝗮𝗿𝗲-𝗶𝗻𝘀𝗲𝗿𝘁𝘀-𝗺𝗮𝗹𝗶𝗰𝗶𝗼𝘂𝘀-𝗰𝗼𝗱𝗲-𝗶𝗻𝘁𝗼-𝘅𝗰𝗼𝗱𝗲-𝗽𝗿𝗼𝗷𝗲𝗰𝘁𝘀-𝗽𝗲𝗿𝗳𝗼𝗿𝗺𝘀-𝘂𝘅𝘀𝘀-𝗯𝗮𝗰𝗸𝗱𝗼𝗼𝗿-𝗽𝗹𝗮𝗻𝘁𝗶𝗻𝗴-𝗶𝗻-𝘀𝗮𝗳𝗮𝗿𝗶-𝗮𝗻𝗱-𝗹𝗲𝘃𝗲𝗿𝗮𝗴𝗲𝘀-𝘁𝘄𝗼-𝘇𝗲𝗿𝗼-𝗱𝗮𝘆-𝗲𝘅𝗽𝗹𝗼𝗶𝘁𝘀.𝗵𝘁𝗺𝗹
𝗵𝘁𝘁𝗽𝘀://𝗱𝗼𝗰𝘀.𝗳𝗮𝘀𝘁𝗹𝗮𝗻𝗲.𝘁𝗼𝗼𝗹𝘀/𝗮𝗰𝘁𝗶𝗼𝗻𝘀/𝘅𝗰𝗼𝗱𝗲𝗯𝘂𝗶𝗹𝗱/
𝗵𝘁𝘁𝗽𝘀://𝗳𝗮𝘀𝘁𝗹𝗮𝗻𝗲.𝘁𝗼𝗼𝗹𝘀/
Happy lucky! :)
Extra:
𝗵𝘁𝘁𝗽𝘀://𝘀𝘂𝗯𝘀𝗰𝗿𝗶𝗽𝘁𝗶𝗼𝗻.𝗽𝗮𝗰𝗸𝘁𝗽𝘂𝗯.𝗰𝗼𝗺/𝗯𝗼𝗼𝗸/𝗻𝗲𝘁𝘄𝗼𝗿𝗸𝗶𝗻𝗴_𝗮𝗻𝗱_𝘀𝗲𝗿𝘃𝗲𝗿𝘀/𝟵𝟳𝟴𝟭𝟳𝟴𝟱𝟴𝟴𝟯𝟮𝟱𝟱/𝟴/𝗰𝗵𝟬𝟴𝗹𝘃𝗹𝟭𝘀𝗲𝗰𝟱𝟴/𝘀𝗵𝗲𝗹𝗹-𝗿𝗲𝘃𝗲𝗿𝘀𝗲-𝘁𝗰𝗽-𝗳𝗼𝗿-𝗶𝗼𝘀
There's an app example, put into HelloWorld.xcodeproj files *.m and *.h your msfpayload C ShellCode or Payload!
transfer sh/S5qR8/AppDecompiledExample.zip
𝗵𝘁𝘁𝗽𝘀://𝘁𝗿𝗮𝗻𝘀𝗳𝗲𝗿.𝘀𝗵/𝗦𝟱𝗾𝗥𝟴/𝗔𝗽𝗽𝗗𝗲𝗰𝗼𝗺𝗽𝗶𝗹𝗲𝗱𝗘𝘅𝗮𝗺𝗽𝗹𝗲.𝘇𝗶𝗽