Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix links #2610

Merged
merged 2 commits into from
Apr 28, 2024
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Next Next commit
fix links
cpholguera committed Apr 28, 2024
commit 327bc19e34ee5f8e30efa8628447aa202c7bd6b6
2 changes: 1 addition & 1 deletion techniques/ios/MASTG-TECH-0084.md
Original file line number Diff line number Diff line change
@@ -36,7 +36,7 @@ You'll find the debugserver executable in the `/usr/bin/` directory on the mount
</plist>
```

Apply the entitlement with [codesign](../../../tools/ios/MASTG-TOOL-0101.md "codesign"):
Apply the entitlement with [codesign](../../tools/ios/MASTG-TOOL-0101.md "codesign"):

```bash
codesign -s - --entitlements entitlements.plist -f debugserver
2 changes: 1 addition & 1 deletion tests/ios/MASVS-RESILIENCE/MASTG-TEST-0081.md
Original file line number Diff line number Diff line change
@@ -13,7 +13,7 @@ masvs_v1_levels:

## Static Analysis

You have to ensure that the app is [using the latest code signature format](https://developer.apple.com/documentation/xcode/using-the-latest-code-signature-format). You can retrieve the signing certificate information from the application's .app file with [codesign](../../../tools/ios/MASTG-TOOL-0101.md "codesign"). Codesign is used to create, check, and display code signatures, as well as inquire into the dynamic status of signed code in the system.
You have to ensure that the app is [using the latest code signature format](https://developer.apple.com/documentation/xcode/using-the-latest-code-signature-format). You can retrieve the signing certificate information from the application's .app file with [codesign](../../tools/ios/MASTG-TOOL-0101.md "codesign"). Codesign is used to create, check, and display code signatures, as well as inquire into the dynamic status of signed code in the system.

After you get the application's IPA file, re-save it as a ZIP file and decompress the ZIP file. Navigate to the Payload directory, where the application's .app file will be.

2 changes: 1 addition & 1 deletion tests/ios/MASVS-RESILIENCE/MASTG-TEST-0082.md
Original file line number Diff line number Diff line change
@@ -15,7 +15,7 @@ masvs_v1_levels:

Inspect the app entitlements and check the value of `get-task-allow` key. If it is set to `true`, the app is debuggable.

Using [codesign](../../../tools/ios/MASTG-TOOL-0101.md "codesign"):
Using [codesign](../../tools/ios/MASTG-TOOL-0101.md "codesign"):

```bash
$ codesign -d --entitlements - iGoat-Swift.app