Needle是一个开源、模块化的框架，用来测试和评估iOS应用的安全性。Needle需要在iPhoe手机上安装一个代理程序，该程序要求必须是越狱的iOS系统。
启动：
$ pytho eedle.py __ _ _______ _______ ______ ______ | \ | |______ |______ | \ | |______ | \_| |______ |______ |_____/ |_____ |______ Needle v1.0 [mwr.to/eedle] [MWR IfoSecurity (@MWRLabs) - Marco Lacii (@LaciiMarco)][eedle] > helpCommads (type [help|?] <topic>):---------------------------------back exit ifo kill pull reload search shell show useexec_commad help jobs load push resource set shell_local uset[eedle] > show optiosName Curret Value Required Descriptio------------ ------------- -------- -----------AGENT_PORT 4444 yes Port o which the Needle Aget is listeigAPP o Budle ID of the target applicatio (e.g., com.example.app). Leave empty to lauch wizardDEBUG False yes Eable debuggig outputIP 127.0.0.1 yes IP address of the testig device (set to localhost to use USB)OUTPUT_FOLDER /root/.eedle/output yes Full path of the output folder, where to store the output of the modulesPASSWORD ****** yes SSH Password of the testig devicePORT 2222 yes Port of the SSH aget o the testig device (eeds to be != 22 to use USB)PUB_KEY_AUTH True yes Use public key auth to autheticate to the device. Key must be preset i the ssh-aget if a SAVE_HISTORY True yes Persists commad history across sessiosSETUP_DEVICE False yes Set to true to eable auto-cofiguratio of the device (istallatio of all the tools eeded)USERNAME root yes SSH Userame of the testig deviceVERBOSE True yes Eable verbose output[eedle] >
评论