Skip to content

devoteam-cybertrust/needle

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Needle

Black Hat Arsenal

Needle is an open source, modular framework to streamline the process of conducting security assessments of iOS apps.

Description

Assessing the security of an iOS application typically requires a plethora of tools, each developed for a specific need and all with different modes of operation and syntax. The Android ecosystem has tools like "drozer" that have solved this problem and aim to be a ‘one stop shop’ for the majority of use cases, however iOS does not have an equivalent.

Needle is an open source modular framework which aims to streamline the entire process of conducting security assessments of iOS applications, and acts as a central point from which to do so. Given its modular approach, Needle is easily extensible and new modules can be added in the form of python scripts. Needle is intended to be useful not only for security professionals, but also for developers looking to secure their code. A few examples of testing areas covered by Needle include: data storage, inter-process communication, network communications, static code analysis, hooking and binary protections.​ The only requirement in order to run Needle effectively is a jailbroken device.

Needle is open source software, maintained by MWR InfoSecurity.

Installation

See the Installation Guide in the project Wiki for details.

Supported Platforms

  • Workstation: Needle has been successfully tested on both Kali and OSX
  • Device: both iOS 8 and 9 are currently supported

Usage

Usage instructions (for both standard users and contributors) can be found in the project Wiki.

A complete walkthrough on how to quickly get up to speed with Needle can be found on the MWR Labs website: https://labs.mwrinfosecurity.com/blog/needle-how-to/

License

Needle is released under a 3-clause BSD License. See the LICENSE file for full details.

Contact

Feel free to submit issues or ping us on Twitter - @mwrneedle, @lancinimarco

Packages

No packages published

Languages

  • Python 100.0%