Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps.
Once installed on a jailbroken device, iOS SSL Kill Switch patches low-level SSL functions within the Secure Transport API, including SSLSetSessionOption() and SSLHandshake() in order to override and disable the system's default certificate validation as well as any kind of custom certificate validation (such as certificate pinning).
It was successfully tested against the Twitter, Facebook, Square and Apple App Store apps; all of them implement certificate pinning. iOS SSL Kill Switch was initially released at Black Hat Vegas 2012.
For more technical details on how it works, see http://nabla-c0d3.github.io/blog/2013/08/20/ios-ssl-kill-switch-v0-dot-5-released/
Users should first download the pre-compiled Debian package (tested on iOS 6.1): http://nabla-c0d3.github.io/blog/2013/08/20/ios-ssl-kill-switch-v0-dot-5-released/
iOS SSL Kill Switch will only run on a jailbroken device. Using Cydia, make sure the following packages are installed:
- dpkg
- MobileSubstrate
- PreferenceLoader
Download and copy the Debian package to the device; install it:
dpkg -i <package>.deb
Respring the device:
killall -HUP SpringBoard
There should be a new menu in the device's Settings where you can enable the extension.
Finally, kill and restart the App you want to test.
dpkg -r com.isecpartners.nabla.sslkillswitch
Additional instructions are available here: http://nabla-c0d3.github.io/blog/2013/08/20/intercepting-the-app-stores-traffic-on-ios/
Most users should just download and install the Debian package. The build requires the Theos suite to be installed; see http://www.iphonedevwiki.net/index.php/Theos/Getting_Started . You first have to create a symlink to your theos installation:
ln -s /opt/theos/ theos
Then, the package can be built using:
make package
- v0.5: Complete rewrite in order to add support for proxy-ing Apple's App Store application.
- v0.4: Added hooks for SecTrustEvaluate().
- v0.3: Bug fixes and support for iOS 6.
- v0.2: Initial release.
MIT - See LICENSE.txt
Alban Diquet - https://github.com/nabla-c0d3