Month: July 2012

Appleexploitfacebookiphonem$OSX security toolsPrivacySecuritytoolstwitterXSS

iOS SSL Kill Switch

This is a MobileSubstrate extension to disable certificate validation within NSURLConnection in order to facilitate black-box testing of iOS Apps. Once installed on a jailbroken device, iOS SSL Kill Switch patches NSURLConnection to override and disable the system's default certificate validation as well as any kind of custom certificate validation (such as certificate pinning).