How to Exploit BundleName in the iOS Settings App - App Permissions Hack

Опубликовано: 07 Август 2021
на канале: Get Swifty
389
14

This hack allows you to hide your own app behind that of another within the Settings App.
Generally Apple uses the BundleID to uniquely identify your app, but for some reason, when it comes to permissions and displaying them within Settings, they use BundleName.

Where BundleIDs are unique, BundleNames are not. Using this exploit you can the permission settings for your app behind another. Your app will NOT show in Settings. This also means that if you hijack at the right time, you can disable the internet for apps like Facebook, Instagram, Twitter, and... well any app at all really. Providing you copy their BundleName.

I've been reporting it to Apple since mid 2018, both through the feedback system (FB5725635) and bug bounty program. It's a significant issue and very simple to pull off.

Maybe now that more people know about it, they will fix it.

---------------------
Want to chat or ask questions about Swift or a career in software development?

Discord
  / discord  

Patreon - Get my book and code created on this channel!
  / beaunouvelle  

Play tabletop games? I made a music and sound effects app for you called Summoning Stone.
https://apps.apple.com/app/apple-stor...

------------------

#swiftui #iosdeveloper #swiftuitutorial


Смотрите видео How to Exploit BundleName in the iOS Settings App - App Permissions Hack онлайн без регистрации, длительностью часов минут секунд в хорошем качестве. Это видео добавил пользователь Get Swifty 07 Август 2021, не забудьте поделиться им ссылкой с друзьями и знакомыми, на нашем сайте его посмотрели 389 раз и оно понравилось 14 людям.