Hello,
I just released my tool for accessing iOS remotely. Long story short, it's a post-exploitation framework that uses CoreTrust bug to bypass sandbox (hence malicious app should be installed through TrollStore or similar application). With it you can browse filesystem, download/upload files, read Safari history and bookmarks, SMS data and much more. It's beta so might contain some bugs. You are welcome to contribute and open issues. I know you've been waiting for an alternative to EggShell, and here it is. Enjoy!
You can find source code and more details on how to use it here:
https://github.com/EntySec/SeaShell
DISCLAIMER: Of course it's just for testing and experimental purposes.
Best wishes!
Hello,
I just released my tool for accessing iOS remotely. Long story short, it's a post-exploitation framework that uses CoreTrust bug to bypass sandbox (hence malicious app should be installed through TrollStore or similar application). With it you can browse filesystem, download/upload files, read Safari history and bookmarks, SMS data and much more. It's beta so might contain some bugs. You are welcome to contribute and open issues. I know you've been waiting for an alternative to EggShell, and here it is. Enjoy!
You can find source code and more details on how to use it here:
https://github.com/EntySec/SeaShell
DISCLAIMER: Of course it's just for testing and experimental purposes.
Best wishes!