OWASP top 10 mobile pentest platform

password min 8 - LM/ALM lanman hash

buffer  overflow attack

http://burp
install burp cert into browser -(added into trusted list)

active traffic analysis (burpsuite)
default username: root
default password :alpine
$ uname -a

UID - unique
GID - group id ex. same batch of phone

ios universal writable path
$ /var/root

ASLR
- allocate different memory space or ID everytime reboot

jailbreak-me.info

types - tethered, untethered

SFTP command
$ sftp <username>@<ip>
$ put <filename>
$ get <filename>

ios local storage is differ follow by ios version
for example version 7
$ cd /var/mobile/Applications
version 9
$ /private/var/mobile/Containers/Data/Application

$ find -name challenge1

source code path in version 9
$ /var/containers/Bundle/Application
name with asterik - binary file or source file

Filza - AppManager > app_name - container name plus local storage path
.plist is some kind of local storage file type

$ sw_vers (software version)

$ run scanner.provider.finduris