‫-: Hi. Within this lecture we're going to see
‫some of the cool things that we can do when
‫we jail break iOS devices.
‫Okay? So right now I'm in my jail broken device
‫and I'm going to open the CD app that I have talked
‫about before because we're going to download couple
‫of things that we can use often in this kind of situation.
‫So once you open CD app, you may encounter some kind
‫of an update and I suggest you do the updates, okay?
‫And then search for whatever you're looking for.
‫So if you come over here
‫to the fourth tab where you can see the installed apps
‫on your iPad or iPhone you're gonna come across
‫with tools that you haven't seen before because
‫I assume this is the first time you're doing jail breaking.
‫Okay? So as you can see, we can actually see a lot
‫of tools that that is already installed
‫in our iPad or iPhone and they are actually very helpful.
‫But again, we are going to need some more
‫in order to complete reverse engineering sections.
‫Okay? So let me show you what are those.
‫So first of all, we want to SSH, we want to connect
‫to our iPad and just run some comments afterward.
‫So I'm going to search for SSH like this
‫and you will see a lot of results already.
‫So I believe SSH is already installed over here.
‫Like yeah, you see open SSH is already installed for me.
‫Okay? So if it's not installed for you,
‫you can come over here and search for open SSH
‫in the search bar and then you can just click on it.
‫And on the right hand side, on the upper right
‫hand side there is a button called modify.
‫You can just click on it,
‫you can just install it, and then start running it.
‫So I'm gonna show you how to use it, don't worry.
‫Just install the open SSH, then we will be good to go.
‫And of course there are other tools as well
‫but this is one of the most important ones
‫because again this will let us connect to our iPad
‫and run some comments within our own MacBook.
‫So this is a very powerful tool, okay?
‫We're gonna use it a lot.
‫So make sure you find open SSH and install it.
‫And then later on we are going to need other tools as well.
‫Like one of them is Cycript.
‫So it's spelled like this, C Y C, okay.
‫And this is it Cycript.
‫And the owner of this tool pronounces this
‫as script and rest of the world pronounces this Cycript.
‫So whatever you want to do, you can just do it.
‫Just click on install
‫and make sure Cycript is installed on your iPad or iPhone.
‫So this is a tool that we are going to use for
‫app manipulation during iOS reverse engineering sections.
‫Okay? So these are the essential tools
‫but I'm gonna show you some other tools as well
‫cause they can be very handy
‫in kind when it comes to browsing, for example
‫as you can see, I have an app over here called Filza.
‫So this is a file browser app.
‫But rather than browsing the downloaded files or something
‫you can browse everything inside your iPad.
‫Just let me open the Filza and show you what I mean.
‫Now we get to see the root files as well since we are root
‫since we are the administrator of this device.
‫So I can actually wonder around
‫in any application or any folder that I want like this
‫you can go to root folder, you can go to system folders
‫you can see every file and folder the iPad
‫or iOS uses in order to operate like this.
‫You don't get to see them in non jail broken devices,
‫but if you have jail broken device, your administrator
‫and you can do whatever you want with it.
‫So make sure you download the SSH and Cycript and Filza.
‫And I'm gonna show you how to SSH into your iPad.
‫So I'm going to open my terminal, okay?
‫You can just do that by hitting command space on your Mac
‫and search for terminal.
‫And I'm going to make this a little bit bigger
‫so you can see it in a better way.
‫So you can do that in your view on menu over here.
‫Okay, so let me do this couple of times more.
‫Yeah, I believe now it's much better.
‫So we are going to SSH into the iPad.
‫So it's fairly easy to do.
‫It's just one command SSH, okay?
‫And you just write the username and then hit an at
‫and then write the IP address of the iPad.
‫So this is where it gets critical.
‫So your host machine, your MacBook
‫and your iPad should have the same internet connection.
‫They should have, they should have been connected
‫to the same router on your house,
‫on your work, whatever it is, it doesn't matter
‫but they should be on the same location.
‫So if you go to your wifi, okay?
‫And if you click on this blue button
‫you can see your local IP address
‫which is 192.168.1.31 for me.
‫Okay? So this is how you find your device's
‫local IP address.
‫Another find, another way to find it is actually going
‫into the administrator settings of your router.
‫Like this 1, 9, 2, 1, 6, 8, 1 1.
‫This points to the router okay?
‫And in the router administrator panel like this
‫you can find all the local IPs assigned
‫to different kind of devices in your home.
‫Like as you can see, my iPad has 192.168.1.31.
‫Of course this is a little bit trickier,
‫so make sure you find the local IP address on your iPad.
‫So once you hit enter, if you're on the same network
‫it will find the iPad and it'll ask you for a password.
‫So I'm going to show you what a password is right now,
‫I just type my password I'm in
‫and my password is different from yours.
‫But your password will be the same
‫with everyone that is doing this jail breaking thing.
‫And it's not safe.
‫We are going to change it soon.
‫So let me show you what I mean.
‫If you go to Google and if you search for password
‫for jail broken iOS devices
‫like jail break password, okay
‫jail break route password for example,
‫then you're going to see the same result
‫in many of the websites.
‫So this is it.
‫This is Alpine, okay?
‫A L P I N E.
‫So make sure you write this and hit enter, Alpine.
‫That's how you connect to your SSH,
‫that's how we connect your device, okay?
‫And then we are gonna change it
‫because this is the same,
‫same password for everyone and it's not safe.
‫You can be hacked pretty easily
‫if someone knows your IP address
‫and if someone knows that you are iPad
‫or iPhone is jail broken.
‫So I'm going to write pass WD here
‫once I'm inside of my iPad, okay?
‫So after connection, just write pass WD
‫and it'll ask you for your new password.
‫Just write a password and hit enter.
‫It'll not appear on your screen like this, but it's typing.
‫Just retype it and hit enter
‫and your password will be changed.
‫And make sure you complete the step again
‫because Alpine is valid for everyone
‫and it's not very safe.
‫And if your own tool for jail breaking
‫suggests otherwise like something different
‫than Alpine, then of course
‫you should give that password over here.
‫So I'm inside my iPad, as you can see I ran LS command
‫and I see some modules or some kind of folders over here.
‫If I run PWD, I will see I'm in the route.
‫Then I'm gonna go out of the route and I'm going to run LS.
‫And as you can see, I'm inside of the home folder.
‫Right now I'm nowhere.
‫I can just see the files and folders.
‫Of course we can see them in Filza as well.
‫But we will do so much different things
‫on terminal later on.
‫For example, I can try to go into applications folder
‫I can try to run LS
‫and here is an app, for example, model player app.
‫So I get to see every file, every folder
‫and I get to see them on the Filza as well.
‫But again, we are going to use Cycript.
‫We are going to use other tools
‫in order to manipulate the apps,
‫in order to make reverse engineering
‫in a better way and stuff.
‫So there a lot of things
‫that you can do with jail broken devices.
‫If this is the first time that you're doing this,
‫I believe this is the first time
‫that you are actually seeing
‫your own files and folders
‫even though you own the device.
‫So if I run exit it will just log out
‫and close the connection.
‫Then if I want to connect one more time
‫then I will run the same thing SSH route
‫at IP address and it will ask me for my password.
‫And remember, we changed the password
‫so make sure you give your new one.
‫So this is how you jail break iOS devices
‫and this is how you work with them.
‫So far so good.
‫We are going to do the rest
‫of the things like app manipulation
‫and stuff in the iOS reverse engineering section.
‫So I'm going to leave this as it is.
‫I'm going to move on to Android devices and routing process.
‫See you in the next one.