Look, No Hands! -- The Remote, Interaction-less Attack Surface of the iPhone

This presentation explores the remote, interaction-less attack surface of iOS. It discusses the potential for vulnerabilities in SMS, MMS, Visual Voicemail, iMessage and Mail, and explains how to set up tooling to test these components. It also includes two examples of vulnerabilities discovered using these methods.

By Natalie Silvanovich