Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SensitiveInformationDetailsVC Compiler Optimization #23

Open
chriszielinski opened this issue Oct 9, 2017 · 0 comments
Open

SensitiveInformationDetailsVC Compiler Optimization #23

chriszielinski opened this issue Oct 9, 2017 · 0 comments

Comments

@chriszielinski
Copy link

Compiler optimization strips the initialization of passwd within initializeLogin. Consequently, searching for it in the heap is futile. Below is the disassembled method from the included .ipa:

screen shot 2017-10-09 at 2 15 52 am

Tagging the variable volatile wasn't enough, but returning the pointer sufficed to throw the compiler off.

-(NSString *)initializeLogin {
    //DO random stuff
    NSString *passwd = @"MYw0r1d1821";
    //Finish doing random stuff
    return passwd;
}

screen shot 2017-10-09 at 3 07 49 am

screen shot 2017-10-09 at 3 10 38 am

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant