Tag Archives: Blackbox

Video: Implementing Blackbox Testing

Watch Sample Class recording: http://www.edureka.co/software-testin…

Software testing is a vital process without which no software release can occur, it makes the software usable. Software testing offers opportunities constantly to be exposed with new development methods, new platform technologies, new product innovations.

Video gives a brief insight of following topics:

1.What is Angularjs?
2.Basics of Angularjs
3.Use Cses of Angularjs
4.Angularjs job trends
5.Global opportunities for AngularJS
6.Why you Should Learn AngularJS
7.AngularJS Features
8.MVC Architecture
9.How to build a responsive single page application
10.Compare AngularJS, Backbone.js and Ember.js
11.Features of Angular.js

An on-path blackbox network traffic security testing tool

Nogotofail is a network security testing tool designed to help developers and security researchers spot and fix weak TLS/SSL connections and sensitive cleartext traffic on devices and applications in a flexible, scalable, powerful way. It includes testing for common SSL certificate verification issues, HTTPS and TLS/SSL library bugs, SSL and STARTTLS stripping issues, cleartext issues, and more. See more>>

Blackbox tool to disable SSL certificate validation – including certificate pinning – within iOS Apps

layout typo in version number 3 months ago
testapp Fix testapp a year ago
.gitattributes Update gitignore & gitattributes 2 years ago
.gitignore Ignore .deb package files 2 years ago
BH2012_MobileCertificatePinning.pdf Add BH 2012 slides 2 years ago
LICENSE.txt LICENSE 2 years ago
Makefile Update to 7.1 SDK 3 months ago
README.md typos 2 months ago
Tweak.xm Update README and release the new version a year ago

iOS SSL Kill Switch

Blackbox tool to disable SSL certificate validation – including certificate pinning – within iOS Apps.


Once installed on a jailbroken device, iOS SSL Kill Switch patches low-level SSL functions within the Secure Transport API, including SSLSetSessionOption() and SSLHandshake() in order to override and disable the system’s default certificate validation as well as any kind of custom certificate validation (such as certificate pinning).

It was successfully tested against various Apps implementing certificate pinning including the Apple App Store. iOS SSL Kill Switch was initially released at Black Hat Vegas 2012.

For more technical details on how it works, see http://nabla-c0d3.github.io/blog/2013/08/20/ios-ssl-kill-switch-v0-dot-5-released/


Installing this tweak allows anyone on the same network as the device to easily perform man-in-the-middle attacks against any SSL or HTTPS connection. This means that it is trivial to get access to emails, websites viewed in Safari and any other data downloaded by any App running on the device.


Users should first download the latest pre-compiled Debian package available in the release section of the project page at: https://github.com/iSECPartners/ios-ssl-kill-switch/releases

The tool was tested on iOS7 running on an iPhone 5S.


iOS SSL Kill Switch will only run on a jailbroken device. Using Cydia, make sure the following packages are installed:

  • dpkg
  • MobileSubstrate
  • PreferenceLoader

How to install

Download and copy the Debian package to the device; install it:

dpkg -i <package>.deb

Respring the device:

killall -HUP SpringBoard

There should be a new menu in the device’s Settings where you can enable the extension.

Finally, kill and restart the App you want to test.

How to uninstall

dpkg -r com.isecpartners.nabla.sslkillswitch

Intercepting the App Store’s traffic

Additional instructions are available here: http://nabla-c0d3.github.io/blog/2013/08/20/intercepting-the-app-stores-traffic-on-ios/


Most users should just download and install the Debian package. The build requires the Theos suite to be installed; see http://www.iphonedevwiki.net/index.php/Theos/Getting_Started . You first have to create a symlink to your theos installation:

ln -s /opt/theos/ theos

Make sure dpkg is installed. If you have Homebrew, use:

brew install dpkg

Then, the package can be built using:

make package


  • v0.6: Added support for iOS 7.
  • v0.5: Complete rewrite in order to add support for proxy-ing Apple’s App Store application.
  • v0.4: Added hooks for SecTrustEvaluate().
  • v0.3: Bug fixes and support for iOS 6.
  • v0.2: Initial release.




Alban Diquet – https://github.com/nabla-c0d3