{"id":23630,"date":"2023-05-05T03:32:41","date_gmt":"2023-05-05T03:32:41","guid":{"rendered":"https:\/\/www.booksofall.com\/cn\/?post_type=product&p=23630"},"modified":"2023-05-05T03:59:32","modified_gmt":"2023-05-05T03:59:32","slug":"ios-app-reverse-engineering","status":"publish","type":"product","link":"https:\/\/www.booksofall.com\/cn\/ios-app-reverse-engineering\/","title":{"rendered":"iOS App Reverse Engineering"},"content":{"rendered":"
\n
\n

Introduction to iOS reverse engineering<\/h2>\n

Although the recipe of Coca-Cola<\/a> is highly confidential, some other companies can still copy its taste. Although we don\u2019t have access to the source code<\/a> of others\u2019 Apps, we can dig into their details by reverse engineering.<\/p>\n

1.1 \u00a0 Prerequisites of iOS reverse engineering<\/p>\n

iOS<\/a> reverse engineering refers to the process of reverse analysis at software-level. If you want to have strong skills on iOS reverse engineering, you\u2019d better be familiar with the hardware constitution of iOS and how iOS works. Also, you should have rich experiences in developing iOS Apps. If you can infer the project scale of an App after using it for a while, its related technologies, its MVC pattern, and which open source projects or frameworks it references, you can announce that you have a good ability on reverse engineering.<\/p>\n

Sounds demanding? Aha, a bit. However, all above prerequisites are not fully necessary. As long as you can keep a strong curiosity and perseverance in iOS reverse engineering, you can also become a good iOS reverse engineer. The reason is that during the process of reverse engineering, your curiosity will drive you to study those classical Apps. And it is inevitable that you will encounter some problems that you can\u2019t fix immediately. As a result, it takes your perseverance to support you to overcome the difficulties one by one. Trust me, you will surely get your ability improved and feel the beauty of reverse engineering after putting lots of efforts on programming, debugging and analyzing the logic of software.<\/p>\n

1.2 \u00a0What does iOS reverse engineering do<\/p>\n

Metaphorically speaking, we can regard iOS reverse engineering as a spear, which can break the seemingly safe protection of Apps. It is interesting and ridiculous to note that many companies that develop Apps are not aware of the existence of this spear and think their Apps are unbreakable.<\/p>\n<\/div>\n<\/div>\n

\n

For IM<\/a> Apps like WeChat<\/a> or WhatsApp<\/a>, the core of this kind of Apps is the information they exchange. For software of banks, payment or e-commerce, the core is the monetary transaction data and customer information. All these core data have to be securely protected. So developers have to protect their Apps by combining anti-debugging, data encryption and code obfuscation together. The aim is to increase the difficulty of reverse engineering and prevent similar security issues from affecting user experience.<\/p>\n

However, the technologies currently being used to protect Apps are not in the same dimension with those being used in iOS reverse engineering. For general App protections, they look like fortified castles. By applying the MVC architecture<\/a> of Apps inside the castle with thick walls outside, we may feel that they are insurmountable, as shown in figure 1-1.<\/p>\n

But if we step onto another higher dimension and overlook into the castle where the App resides, you find that structure inside the castle is no longer a secret, as shown in figure 1-2.<\/p>\n

All Objective-C interfaces, all properties, all exported functions, all global variables, even all logics are exposed in front of us, which means all protections have became useless. So if we are in this dimension, walls are no longer hindrances. What we should focus on is how can we find our targets inside the huge castle.<\/p>\n

At this point, by using reverse engineering techniques, you can enter the low dimension castle from any high dimension places without damaging walls of the castle, which is definitely tricky while not laborious. By monitoring and even changing the logics of Apps, you can learn the core information and design details easily.<\/p>\n

Sounds very incredible? But this is true. According to the experiences and achievements I\u2019ve got from the study of iOS reverse engineering, I can say that reverse engineering can break the protection of most Apps, all their implementation and design details can be completely exposed.<\/p>\n

The metaphor above is only my personal viewpoint. However, it vividly illustrates how powerful iOS reverse engineering is. In a nutshell, there are two major functions in iOS reverse engineering as below:<\/p>\n