process-injection

Detect if Cycript/Substrate or gdb is attached to an iOS app's process?

删除回忆录丶 提交于 2019-12-05 01:10:51
问题 I am building an iOS app that transmits sensitive data to my server, and I'm signing my API requests as an additional measure. I want to make reverse engineering as hard as possible, and having used Cycript to find signing keys of some real-world apps, I know it's not hard to find these keys by attaching to a process. I am absolutely aware that if someone is really skilled and tries hard enough , they eventually will exploit, but I'm trying to make it as hard as possible, while still being

Detect if Cycript/Substrate or gdb is attached to an iOS app's process?

此生再无相见时 提交于 2019-12-03 15:53:36
I am building an iOS app that transmits sensitive data to my server, and I'm signing my API requests as an additional measure. I want to make reverse engineering as hard as possible, and having used Cycript to find signing keys of some real-world apps, I know it's not hard to find these keys by attaching to a process. I am absolutely aware that if someone is really skilled and tries hard enough , they eventually will exploit, but I'm trying to make it as hard as possible, while still being convenient for myself and users. I can check for jailbroken status and take additional measures, or I can