Download
Needle is an open-source, modular framework to streamline the process of conducting security assessments of iOS apps. Needle was originally made to work with iOS 9 and iOS 10. Since then, Frida was released and become the defacto tool to use with mobile security assessments. Some common Frida mobile security scripts were later implemented within Needle, as some of these scripts worked better or addressed some issues that were present in Needle's custom tooling. Assessing the security of an iOS application typically requires a plethora of tools, each developed for a specific need and all with different modes of operation and syntax. The Android ecosystem has tools like "drozer" that have solved this problem and aim to be a ‘one-stop shop’ for the majority of use cases, however, iOS does not have an equivalent. Needle is the MWR's iOS Security Testing Framework, released at Black Hat USA in August 2016. It is an open-source modular framework.
Features
- Open source modular framework
- Streamline the entire process of conducting security assessments of iOS applications
- Needle has been presented at and used by workshops in various international conferences
- Data storage, inter-process communication, network communications
- Static code analysis, hooking and binary protections
- The only requirement in order to run Needle effectively is a jailbroken device
Project Samples
