Runtime manipulation iOS app breaking the PIN

Disclosed: 2016-11-16 19:01:00 By kaleemgiet To coinbase
Unknown
Vulnerability Details
I was able to bypass your pin protection by doing runtime manipulation in iOS app 1.Installed the snoop it in device 2.By going snoop it tool settings choose the coinbase app 3.I already set the the pin in coinbase app 4.Open the coinbase app it is asking for PIN 5.Now browsing the snoopit controlled window from the browser 6.Go to the Objective C-Classes in snoop it window 7.By directly invoking the userAutheticated method from the coinbase.CBPINViewController I was able to break the PIN protection 8. userAuthenticated method is not taking any arguments just invoking this method bypassed the scree Please see the POC video https://www.dropbox.com/s/acvr4g7lv63tti5/runtime%20manipulation%20coinbase.mov?dl=0 You can prevent run time manipulation by do not attaching a debugger to app process you see here how to prevent http://resources.infosecinstitute.com/ios-application-security-part-23-defending-runtime-analysis-manipulation/
Actions
View on HackerOne
Report Stats
  • Report ID: 80512
  • State: Closed
  • Substate: informative
  • Upvotes: 1
Share this report