{"id":110,"date":"2013-09-10T13:41:42","date_gmt":"2013-09-10T13:41:42","guid":{"rendered":"https:\/\/www.varutra.com\/blog\/?p=110"},"modified":"2022-12-02T17:18:02","modified_gmt":"2022-12-02T11:48:02","slug":"mobile-application-security-assessment-proxying-for-ios-iphone-ipad","status":"publish","type":"post","link":"https:\/\/www.varutra.com\/varutravrt3\/mobile-application-security-assessment-proxying-for-ios-iphone-ipad\/","title":{"rendered":"Mobile Application Security Assessment – Proxying for IOS (iPhone & iPad)"},"content":{"rendered":"


\nAfter an oversight on how to set up Proxying on Android devices and emulators<\/a> for Application security assessment, let us shed some light on doing the same for iOS devices.<\/p>\n

Setting up proxy on an iPhone and iPad is fairly simple. We will follow this simple algorithm:<\/p>\n

    \n
  1. Install proxy certificate on the device<\/li>\n
  2. Specify proxy settings on the device<\/li>\n
  3. Start the HTTP proxy<\/li>\n<\/ol>\n

    Now to actually get this done, do the following on your device:<\/p>\n

     <\/p>\n

    Generate SSL certificate of Proxy<\/span><\/b><\/h3>\n

    Steps to configure Firefox to use Burp<\/a> as proxy:<\/p>\n

    1. In Firefox, go to Tools->Options->Advanced.<\/p>\n

    2. Click on \u201cNetwork Tab\u201d and then on the first button that says \u201cSettings\u201d<\/p>\n

    3. Set up proxy IP and Port as shown in the image<\/p>\n

    4. Start Burp Proxy and make sure it is listening on port 8080<\/p>\n

    \"1\"<\/a><\/p>\n

    5. Now, visit any HTTPS site,\u00a0e.g. https:\/\/facebook.com<\/a> on Firefox<\/p>\n

    \"3\"<\/a><\/p>\n

    6. You will be displayed with\u00a0an \u201cUntrusted Connection\u201d page<\/p>\n

    7. Click on \u201cI Understand the\u00a0Risks\u201d -> \u201cAdd Exception\u201d<\/p>\n

    8. On the \u201cAdd Security Exception\u201d window,\u00a0click on \u201cView\u201d<\/p>\n

    \"4\"<\/a><\/p>\n

    9. On Next Window, Click on : \u201cDetails\u201d tab and then on \u201cExport\u201d<\/p>\n

    10. Save the certificate as \u201cBurp_Suite.crt\u201d and rename to \u201cBurp_Suite.cer\u201d<\/p>\n

    For CharlesProxy, download the certificate from http:\/\/charlesproxy.com\/charles.crt<\/a><\/p>\n

     <\/p>\n

    Installing Proxy Certificate on device<\/span><\/b><\/h3>\n

    Just transfer the certificate from workstation to device (via email, ftp, ssh etc.)<\/p>\n

    Once transferred, navigate to the transfer location and tap on the certificate file. The device will prompt to trust the certificate. Just allow the installation, and device will trust the certificate for any future connections.<\/p>\n

     <\/p>\n

    Setting up device to proxy traffic<\/span><\/b><\/h3>\n

    1. On iPhone\/iPad, navigate to Settings->Wifi<\/p>\n

    2. Tap on the \u201c>\u201d sign to the right end of the WiFi network to which we wish to connect<\/p>\n

    3. Under HTTP Proxy, click on \u201cManual\u201d<\/p>\n

    \"5\"<\/a><\/p>\n

    4. Enter Proxy IP and Port \u00a0(e.g. xxx.xxx.xxx.xxx:8080)<\/p>\n

    The application\/browser Http\/Https traffic can now be intercepted with ease.<\/p>\n

    \"5\"<\/a><\/p>","protected":false},"excerpt":{"rendered":"

    After an oversight on how to set up Proxying on Android devices and emulators for Application security assessment, let us shed some light on doing…<\/p>\n","protected":false},"author":3,"featured_media":3141,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"inline_featured_image":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[51,54,264,262],"tags":[],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t