Learn Backend Development Part-Time, Online
Learn the Skills Netflix, Meta, and Capital One Actually Hire For
Overview
AI, Data Science & Cloud Certificates from Google, IBM & Meta — 40% Off
One plan covers every Professional Certificate on Coursera. 40% off Coursera Plus Annual.
Unlock All Certificates
Explore the security vulnerabilities of iOS web server apps in this 31-minute conference talk by Bruno Oliveira from OWASP Foundation. Dive into the risks associated with popular file-sharing applications available on the iTunes Store that implement web servers on iOS devices. Learn about the lack of encryption, authentication issues, and potential exploits ranging from cross-site scripting to remote code execution. Discover how these vulnerabilities can be magnified through mDNS queries, making devices easy targets on wireless networks. Gain insights into the differences between jailbroken and non-jailbroken devices, and witness live demonstrations of unpatched vulnerabilities. Understand the implications for iOS security and file system compromise through practical attack scenarios presented by this experienced security consultant.
Syllabus
Intro
About me
History
Applications
iTunes Store
The Chase
Not encrypted
No SSL
Variance
Crosssite scripting
Add Webs
Web Server
Vendors
Testing
File Manager
iOS 7 Security
DNS Protocol
World Wide Web
Conclusion
Security
Taught by
OWASP Foundation