Demystifying iOS Code Signature
Tags
| attack-pattern: | Data Model Code Signing - T1553.002 Keychain - T1634.001 Keychain - T1555.001 Keychain - T1579 Software - T1592.002 Tool - T1588.002 Code Signing - T1116 Keychain - T1142 |
Common Information
| Type | Value |
|---|---|
| UUID | 62bf7b43-c687-4542-8c6f-9982939bc1aa |
| Fingerprint | ad0c5c0f01bf9348 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | April 12, 2022, 11:41 a.m. |
| Added to db | Jan. 18, 2023, 10 p.m. |
| Last updated | Nov. 17, 2024, 7:44 p.m. |
| Headline | Demystifying iOS Code Signature |
| Title | Demystifying iOS Code Signature |
| Detected Hints/Tags/Attributes | 42/1/57 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 53 | developer.apple.com |
|
| Details | Domain | 1 | machoview.app |
|
| Details | Domain | 11 | safari.app |
|
| Details | Domain | 359 | com.apple |
|
| Details | Domain | 111 | www.apple.com |
|
| Details | Domain | 3 | com.apple.private.security.no |
|
| Details | Domain | 1 | com.apple.safari.credit |
|
| Details | Domain | 2 | keychain.app |
|
| Details | Domain | 39 | email.com |
|
| Details | Domain | 3 | coolstar.org |
|
| Details | Domain | 1 | meridian.sparkes.zone |
|
| Details | Domain | 2 | unc0ver.dev |
|
| Details | Domain | 1 | checkra.in |
|
| Details | Domain | 4127 | github.com |
|
| Details | Domain | 622 | en.wikipedia.org |
|
| Details | Domain | 18 | opensource.apple.com |
|
| Details | Domain | 1 | blog.siguza.net |
|
| Details | Domain | 3 | www.newosxbook.com |
|
| Details | Domain | 67 | gitlab.com |
|
| Details | 1 | yourname@email.com |
||
| Details | 1 | yourname2@email.com |
||
| Details | File | 130 | info.pl |
|
| Details | File | 3 | apple.pas |
|
| Details | File | 12 | introduction.html |
|
| Details | File | 1 | procedures.html |
|
| Details | File | 1 | requirementlang.html |
|
| Details | File | 1 | jtool.html |
|
| Details | Github username | 2 | apple-oss-distributions |
|
| Details | Github username | 1 | linushenze |
|
| Details | Gitlab username | 1 | opensource-saurik |
|
| Details | sha1 | 1 | 01234567890abcdef01234567890abcdef012345 |
|
| Details | sha1 | 1 | 01234567890abcdef01234567890abcdef012344 |
|
| Details | IPv4 | 1 | 49.1.9.3 |
|
| Details | IPv4 | 1 | 49.1.9.5 |
|
| Details | IPv4 | 1 | 49.1.9.4 |
|
| Details | IPv4 | 1 | 35.100.9.2 |
|
| Details | IPv4 | 1 | 35.100.9.1 |
|
| Details | Url | 1 | https://developer.apple.com/support/code-signing |
|
| Details | Url | 1 | https://developer.apple.com/documentation/security/seccodesignatureflag |
|
| Details | Url | 1 | https://developer.apple.com/documentation/kernel/2869934-anonymous |
|
| Details | Url | 1 | https://github.com/apple-oss-distributions/dyld/blob/main/common/codesigningtypes.h |
|
| Details | Url | 73 | http://www.apple.com/dtds/propertylist-1.0.dtd |
|
| Details | Url | 3 | https://coolstar.org/electra |
|
| Details | Url | 1 | https://meridian.sparkes.zone |
|
| Details | Url | 2 | https://unc0ver.dev |
|
| Details | Url | 1 | https://checkra.in |
|
| Details | Url | 1 | https://github.com/linushenze/fugu14 |
|
| Details | Url | 1 | https://en.wikipedia.org/wiki/ios_jailbreaking |
|
| Details | Url | 1 | https://opensource.apple.com |
|
| Details | Url | 1 | https://developer.apple.com/support/expiration |
|
| Details | Url | 1 | https://developer.apple.com/library/archive/documentation/security/conceptual/codesigningguide/introduction/introduction.html |
|
| Details | Url | 1 | https://developer.apple.com/library/archive/documentation/security/conceptual/codesigningguide/procedures/procedures.html |
|
| Details | Url | 1 | https://developer.apple.com/library/archive/documentation/security/conceptual/codesigningguide/requirementlang/requirementlang.html |
|
| Details | Url | 1 | https://developer.apple.com/documentation/xcode/using-the-latest-code-signature-format |
|
| Details | Url | 1 | https://blog.siguza.net/psychicpaper |
|
| Details | Url | 1 | http://www.newosxbook.com/tools/jtool.html |
|
| Details | Url | 1 | https://gitlab.com/opensource-saurik/ldid |