Languages

Objective C Swift Flutter

Apps follow mvc model model -data view -what we see controller - controller renders data

Runs on ARM processors

Security architecture

  • Code signing Sandboxing and encryption
  • Keychain keybags and file encryption.

Database extentions

  • sqlite
  • db

Databases are stored locally and may contain sensitive data

Plist files

  • stores serialized data
  • stores application and user settings
  • plutil tool can be used to deserialized and readstuff

Class-Dump-Z

  • Allows to dump class info
  • Can be helpful using cycript or GDB
  • Extensively used for dynamic analysis
  • Apps need to be decrypted before using class dump