====== 網路安全練習主機與電文資訊 ====== 主機URL: "http://class.softarts.cc/AppSecurity/encryptData.json" Package 加密 Key: "zaq1xsw2cde3vfr4" Password 加密 Key Prefix: "1qaz2wsx" ===== Exception Domains 設定 Key 值 ===== NSExceptionAllowsInsecureHTTPLoads NSIncludesSubdomains ==== UDID登記表 ==== [[https://docs.google.com/spreadsheets/d/1lWJeJszvQkPqZ3tLY9-ZEjtqrANw1lCOOZnjU5mfhlc/edit?usp=sharing|UDID登記表]] ==== DataProtection練習憑證 ==== 僅支援有登記UDID的裝置. [[https://www.dropbox.com/s/q2lovjevtarpf3k/DataProtectionDemo%E6%86%91%E8%AD%89.zip?dl=0|憑證下載]] Bundle ID: com.kent.dataprotectiondemo P12密碼: 1qaz2wsx ==== 假 Pinning Hash ==== "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=", "BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=" ==== main.swift 預設內容 ==== import Foundation import UIKit autoreleasepool { UIApplicationMain( CommandLine.argc, UnsafeMutableRawPointer(CommandLine.unsafeArgv) .bindMemory( to: UnsafeMutablePointer.self, capacity: Int(CommandLine.argc)), nil, NSStringFromClass(AppDelegate.self) //Or your class name ) } ==== Objective-C 混淆方式參考 ==== [[https://github.com/kaich/codeobscure|codeobscure]] [[https://github.com/kongcup/ZMConfuse|ZMConfuse]]