Sunday, July 15, 2012

Apple Apps Store - Proof Of Concept

Introduction

Few years back, we only get to know that, we can have the apple application for free after we have jailbreak our iDevices. But the trend now have changes and they are more vulnerabilities to be founded. Now we can have more genuine apps without jail breaking the iDevice. But i guess this won't last for few days:).


The developer have the following comments :

First. I did not steal any money. Nobody lost at least one cent from their iTunes store accounts. If you claiming, that money was stolen via in-app purchases, u're wrong. Zero in-app purchases were made in real appstore via this service.

Second. I did not hack anything. I just wrote app-store replacement. And it's a big idea to create yet another world of apple for our iDevices.

Third. Developers, your profits depends on quality of your apps. You have millions of loyal users, that won't use this service.

Forth. I did not steal or collect any passwords. For now, logging is total disabled.

Fifth. It's a good reason to proof, that something is not perfect. I helped everyone to move forward. Developers - to protect their apps. Apple - to improve their protocols. And, of course, hackers.

Apple has responded with the following statement:“The security of the App Store is incredibly important to us and the developer community,” Apple representative Natalie Harrison. “We take reports of fraudulent activity very seriously and we are investigating.”
  
Have a look to the steps below, but i guess the above steps by now have been fix by apple.

First 

Open this page into your iDevice. Install these certificates (just tap on links): First, Second. The order of installing is very important! Install first certificate first, second - second. 

Second 

Go to application where you want to buy in-apps, and make attempt to buy something. Tap "Cancel" on "Do you really want to purchase?" window. 

Third 

Open Wi-Fi settings on your iDevice and tap arrow on the right of your Wi-Fi network. Remove all data from DNS field and set it to this IP address: 91.224.160.136 (more to come) 

Forth 

Toggle your Wi-Fi 

Fifth

Go to your application and try to buy something! You will see dialog window asks you to Love apple!

Summary 
Stay tune with my next articles. Let us know what you though , learns and hope for next articles!. Connect with us on GOOGLE+ , TWITTER and FACEBOOK.

No comments:

Post a Comment