Shuciran Pentesting Notes

Binary Cookies

Binary Cookies Some iOS applications display web content inside WebView components. Webpages often require cookies for mechanisms such as automatic reconnection. iOS applications save these WebVie...

Finding GUID with ipainstaller

Ipainstaller can be obtained by installing the BigBoss Recommended tools through Cydia. Installing IPAs files The IPA can be directly installed on the iOS device via the command line with ipa...

Setup for iOS Mobile Assessment

Initial Requirements Apple device with iOS version 14.6 or prior. It is highly recommended to fabric restore the device or at least backup the information if any. Clean USB to flash checkn1x. #WA...

Signing IPA with TrollStore (Non-jailbroken)

TrollStore For some iOS versions, it is possible to permanently install IPAs even on a non-jailbroken device due to a bug in CoreTrust. The vulnerability is a logical flaw in the processing of the...

Signing IPA with Sideloadly (Non-jailbroken)

Sideloadly For non-jailbroken devices, sideloadly can be used to sign and install IPAs. The application runs on Windows and macOS and requires the iOS device to be connected to the host via USB or...

Installing Unc0ver

Installing UncOver To install UncOver using Sideloadly, simply download the latest Uncover IPA file from (Unc0ver)[https://unc0ver.dev]. Download and launch Sideloadly on Windows or macOS. Connect...

Sauna (Easy)

Host entries 10.10.10.175 egotistical-bank.local If Active Directory => NTP Synchronization with the domain controller. Content RPC Enumeration Web Enumeration valid users ASREPRoast A...

Forest (Easy)

Host entries 10.10.10.161 FOREST.htb.local htb.local If Active Directory => NTP Synchronization with the domain controller. Content RPC Enumeration ASREPRoast attack [X] Kerbrute enumera...

Python Upload Server

Python Web Server to Upload Files Installing a Configured WebServer with Upload For our web server, we can use uploadserver, an extended module of the Python HTTP.server module, which includes a f...

FTP Transfer files

FTP Downloads A way to transfer files is using FTP (File Transfer Protocol), which use port TCP/21 and TCP/20. We can use the FTP client or PowerShell Net.WebClient to download files from an FTP se...