Ios Application Security Part 18 Detecting Custom Signatures With Introspy
You can find the predefined signatures in Introspy in the signatures.py file inside the analyzer folder. From here, we can see that a signatures consists of a title, description, a severity level and a filter which consists of the method calls that correspond to the signature. So let’s look at a sample signature. Over here, you can see a signature that checks whether the application uses Pasteboards or not. Pasteboards are generally very insecure as they can allow an application to copy some data from the Pasteboard into their application....