iOS Jailbreak Detection Bypass Vulnerability

Detects weak jailbreak detection implementations that can be easily bypassed.

zakirkun Updated

File contents

iOS Jailbreak Detection Bypass

Overview

Weak jailbreak detection that only checks for the existence of files like /Applications/Cydia.app can be bypassed by jailbreak tools that hide these files. Applications relying on security features that assume a trusted device environment need robust jailbreak detection.

Remediation

  • Use multiple detection methods (file system checks, process checks, environment checks)
  • Consider using an approved mobile security library (IOSSecuritySuite)
  • Defense-in-depth: assume some users will bypass detection and protect sensitive operations at the server

zakirkun/ice-tea/tree/main/skills/mobile/ios/jailbreak-bypass commit 199b877a52

Frequently asked questions

npx skillmds@latest add zakirkun/ios-jailbreak-detection-bypass-vulnerability