Look, No Hands! -- The Remote, Interaction-less Attack Surface of the iPhone

Look, No Hands! -- The Remote, Interaction-less Attack Surface of the iPhone

There have been rumors of remote vulnerabilities requiring no user interaction being used to attack the iPhone, but limited information is available about the technical aspects of these attacks on modern devices. This presentation explores the remote, interaction-less attack surface of iOS. It discusses the potential for vulnerabilities in SMS, MMS, Visual Voicemail, iMessage and Mail, and explains how to set up tooling to test these components. It also includes two examples of vulnerabilities discovered using these methods.

Presented by