Exploring Info.plist: Essential Knowledge for iOS Reverse Engineering

In this video, we dive into the Info.plist and discover the relevant sections for iOS Reverse Engineering and security analysis. We also write a quick python script to manually decode binary plists!
---
Timestamp:
00:00 Intro
00:49 Filza File Manager Example
02:20 Binary Property List
05:15 Reading Plist Data
07:14 App Transport Security
09:42 CFBundleURLTypes
11:32 XML plist
13:00 Usage Descriptions
13:52 Recap
---
Links Mentioned in Video:
iOS Reverse Engineering Wiki:
github.com/LaurieWired/iOS_Re...
---
laurieWIRED Twitter:
/ lauriewired
laurieWIRED Website:
lauriewired.com
laurieWIRED Github:
github.com/LaurieWired
laurieWIRED HN:
news.ycombinator.com/user?id=...
laurieWIRED Reddit:
/ lauriewired

[@M93839]

I would love a series/playlist on iOS type content ❤

[@erc0re526]

I'm literally 30 seconds in, but I want to say I always love how the Lain references and the Apple look is omnipresent

[@haxguy0]

Oh how neat. I had no idea you had a YT channel. It's very high quality. Awesome job

[@tackvector]

Getting better and better always! Thank you so much for sharing.

[@mylosovich24]

You're great Laurie, thank you so much. Really enjoy how excited you are

[@Helios-it4nx]

Thanks for the video ❤

[@victor_vvinner74]

Hello LaurieWired! I just wanted to clarify that .plist comes in actually 3 variants alongside XML and Binary. The third one is JSON. But yeah, .ipa files usually contain precompiled binary versions of .plist content If you have macos machine you can convert .plist into different variants using plutil commandline tool

[@DarkLegends2008]

Hi Laurie! Please do a series about pentesting IOS applications! Thanks from Brazil!

[@jasonmousseau]

Hey, where do you get your wallpapers? They're awesome.

[@mw_lewlew]

Your videos are so relaxing! Do you have a spotify playlist or similar of the kind of music you use in your intros? I was a big fan of the Duvet - Bôa remix (:

[@vk8a8]

Helpful Thank’s

[@bgill7475]

Thank you 🙂

[@garrysingh4484]

Awesome 👍👍👍

[@salmanhaider786]

where can we find the same .ipa file or sample .ipa files

[@cavalR6]

So interesting nice

[@1mrhamel]

For registering URIs, can a new app install (regardless of malicious intent) take over a different apps registered URI, or would it function like Android which prompts the user to select the preferred app? I'm an Android user, not Apple, which is why I'm asking.

[@gianni_schicchi]

It does, I’ve made this mistake. Depends if you set the uri relationship to owner versus alternative or viewer / editor.

[@murtadha96]

Lol my immediate thought was "is that Asuka from Neon Genesis Evangelion" and then browsed the channel and boom, confirmed 😂

[@KarjokPangesty]

cool video

[@datrrico]

seems legit :)

[@Sekhon696]

It doesn't work for me please help i think my plist file is encrypted with UTF-8

[@gianni_schicchi]

I believe you mean encoded, UTF is not encryption

[@charles69xx]

i am the 1000th view, love you laurie

[@vk8a8]

Phone

[@toobdooter]

First

[@juanfelipeosoriozapata8504]

You look very pretty, the video was great, I will be attentive for a second part.

[@khuntasaurus88]

5:12 thats what she said about my Plist too ☺️

[@deadbeef2482]

😏

[@illegalsmirf]

when u say p-list it sounds like p-nis 🤭

[@lasindunuwanga5292]

is wired part of your actual name or are u really weird?