From 51923c2a18dd44ef67369a2ab7fa7af1279dea57 Mon Sep 17 00:00:00 2001 From: Swaroop Yermalkar Date: Fri, 5 May 2017 12:16:52 +0530 Subject: [PATCH] iGoat version 3.0 release. --- iGoat/iGoat.xcodeproj/project.pbxproj | 60 --------------------------- iGoat/iGoat/Assets.plist | 4 +- iGoat/iGoat/iGoat-Info.plist | 2 +- 3 files changed, 3 insertions(+), 63 deletions(-) diff --git a/iGoat/iGoat.xcodeproj/project.pbxproj b/iGoat/iGoat.xcodeproj/project.pbxproj index 69095a8..2425536 100644 --- a/iGoat/iGoat.xcodeproj/project.pbxproj +++ b/iGoat/iGoat.xcodeproj/project.pbxproj @@ -105,34 +105,6 @@ /* End PBXBuildFile section */ /* Begin PBXContainerItemProxy section */ - A2590B351EB9C17E00CBA9D7 /* PBXContainerItemProxy */ = { - isa = PBXContainerItemProxy; - containerPortal = A2590B2C1EB9C17E00CBA9D7 /* sqlcipher.xcodeproj */; - proxyType = 2; - remoteGlobalIDString = 4C0041981BFC382400ED2AD5; - remoteInfo = "SQLCipher iOS"; - }; - A2590B371EB9C17E00CBA9D7 /* PBXContainerItemProxy */ = { - isa = PBXContainerItemProxy; - containerPortal = A2590B2C1EB9C17E00CBA9D7 /* sqlcipher.xcodeproj */; - proxyType = 2; - remoteGlobalIDString = 4C0041B11BFC3B2200ED2AD5; - remoteInfo = "SQLCipher OSX"; - }; - A2590B391EB9C17E00CBA9D7 /* PBXContainerItemProxy */ = { - isa = PBXContainerItemProxy; - containerPortal = A2590B2C1EB9C17E00CBA9D7 /* sqlcipher.xcodeproj */; - proxyType = 2; - remoteGlobalIDString = 4C0041C31BFC3CC000ED2AD5; - remoteInfo = "SQLCipher tvOS"; - }; - A2590B3B1EB9C17E00CBA9D7 /* PBXContainerItemProxy */ = { - isa = PBXContainerItemProxy; - containerPortal = A2590B2C1EB9C17E00CBA9D7 /* sqlcipher.xcodeproj */; - proxyType = 2; - remoteGlobalIDString = 4C0041D61BFC3E2500ED2AD5; - remoteInfo = "SQLCipher watchOS"; - }; A2590B3D1EB9C17E00CBA9D7 /* PBXContainerItemProxy */ = { isa = PBXContainerItemProxy; containerPortal = A2590B2C1EB9C17E00CBA9D7 /* sqlcipher.xcodeproj */; @@ -621,10 +593,6 @@ A2590B2D1EB9C17E00CBA9D7 /* Products */ = { isa = PBXGroup; children = ( - A2590B361EB9C17E00CBA9D7 /* SQLCipher.framework */, - A2590B381EB9C17E00CBA9D7 /* SQLCipher.framework */, - A2590B3A1EB9C17E00CBA9D7 /* SQLCipher.framework */, - A2590B3C1EB9C17E00CBA9D7 /* SQLCipher.framework */, A2590B3E1EB9C17E00CBA9D7 /* libsqlcipher.a */, ); name = Products; @@ -723,34 +691,6 @@ /* End PBXProject section */ /* Begin PBXReferenceProxy section */ - A2590B361EB9C17E00CBA9D7 /* SQLCipher.framework */ = { - isa = PBXReferenceProxy; - fileType = wrapper.framework; - path = SQLCipher.framework; - remoteRef = A2590B351EB9C17E00CBA9D7 /* PBXContainerItemProxy */; - sourceTree = BUILT_PRODUCTS_DIR; - }; - A2590B381EB9C17E00CBA9D7 /* SQLCipher.framework */ = { - isa = PBXReferenceProxy; - fileType = wrapper.framework; - path = SQLCipher.framework; - remoteRef = A2590B371EB9C17E00CBA9D7 /* PBXContainerItemProxy */; - sourceTree = BUILT_PRODUCTS_DIR; - }; - A2590B3A1EB9C17E00CBA9D7 /* SQLCipher.framework */ = { - isa = PBXReferenceProxy; - fileType = wrapper.framework; - path = SQLCipher.framework; - remoteRef = A2590B391EB9C17E00CBA9D7 /* PBXContainerItemProxy */; - sourceTree = BUILT_PRODUCTS_DIR; - }; - A2590B3C1EB9C17E00CBA9D7 /* SQLCipher.framework */ = { - isa = PBXReferenceProxy; - fileType = wrapper.framework; - path = SQLCipher.framework; - remoteRef = A2590B3B1EB9C17E00CBA9D7 /* PBXContainerItemProxy */; - sourceTree = BUILT_PRODUCTS_DIR; - }; A2590B3E1EB9C17E00CBA9D7 /* libsqlcipher.a */ = { isa = PBXReferenceProxy; fileType = archive.ar; diff --git a/iGoat/iGoat/Assets.plist b/iGoat/iGoat/Assets.plist index 3c7f9df..e11a445 100755 --- a/iGoat/iGoat/Assets.plist +++ b/iGoat/iGoat/Assets.plist @@ -626,14 +626,14 @@ Pinning is the process of a mobile app verifying an SSL server's identity t Broken Cryptography description - This exercise category contains exercises relating to authentication issues. On iOS, local authentication is generally not an issue, but authenticating securely to a server application is. So, some or most of these exercises include some server-side code that needs to be run in order for the exercise to work. See each exercise's instructions for details. + exercises creditsFile Swaroop.html description - In this exercise, you're going to idenfiy insecure mechanism for storing sensitive data locally. You will observe encryption key hard coded in code using which you can decrypt sensitive data into plain text. + In this exercise, you're going to idenfiy insecure mechanism for storing sensitive data locally. You will observe encryption key hard coded in code using which you can decrypt sensitive data into plain text. For more information, Refer: (https://www.owasp.org/index.php/Mobile_Top_10_2014-M6). hints Can you identify hard coded encryption key in code? diff --git a/iGoat/iGoat/iGoat-Info.plist b/iGoat/iGoat/iGoat-Info.plist index c45607f..69399be 100644 --- a/iGoat/iGoat/iGoat-Info.plist +++ b/iGoat/iGoat/iGoat-Info.plist @@ -28,7 +28,7 @@ CFBundlePackageType APPL CFBundleShortVersionString - 2.9 + 3.0 CFBundleSignature ???? CFBundleVersion