GitHub - OWASP/iGoat-Swift: OWASP iGoat (Swift) - A Damn Vulnerable Swift Applic...

README.md

OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS

This is a Swift version of original iGoat project. Using OWASP iGoat, you can learn exploiting and defending vulnerabilities in iOS Swift applications. Developed using

iGoat (Objective C) was presented at:        

Vulnerabilities Covered (version 1.0):

* Reverse Engineering
* Runtime Analysis
* Data Protection (Rest)
* Data Protection (Transit)
* Key Management
* Tampering
* Injection Flaws
* Broken Cryptography
* Memory Management
* URL Scheme Attack
* Social Engineering
* SSL Pinning
* Authentication
* Jailbreak Detection
* Side Channel Data Leaks
* Cloud Misconfiguration
* Crypto Challenges

Demo

Documentation: iGoat Wiki

iGoat Quick Setup git clone https://github.com/OWASP/iGoat-Swift.gitand open iGoat-Swift.xcodeproj with xcode. Setup iGoat Server Navigate to server > docker_packaging and then user command docker compose up
Using Cydia Repo - Open Cydia -> Sources -> Edit and add source http://swiftigoat.yourepo.com/ and then search for iGoat and install it.

Project Lead - Swaroop Yermalkar

Lead Developer - Anthony Gonsalves

Architecture

How to Contribute?

• You can add new exercises
• Testing iGoat and checking if any issues
• Suggest us new attacks
• Writing blogs / article about iGoat
• Spreading iGoat :)

To contribute to iGoat project, please contact Swaroop ( [email protected] or @swaroopsy )

Project Contributors -

Junard Lebajan
Tim
Your name can be here :) We give cool iGoat t-shirt and swag!