Swift
Pages29
Fixed salts in Swift
Fixed salts in Swift
Hardcoded HTTP URLs constructed with Foundation
Hardcoded HTTP URLs constructed with Foundation
Sensitive data sent through Swift NWConnection without TLS or DTLS
Sensitive data sent through Swift NWConnection without TLS or DTLS
DES and 3DES encryption in Swift
DES and 3DES encryption in Swift
ECB encryption mode in Swift
ECB encryption mode in Swift
Hardcoded public IP addresses in Swift
Hardcoded public IP addresses in Swift
Hostname regular expression validation bypass in Swift
Hostname regular expression validation bypass in Swift
Command injection in Swift
Command injection in Swift
Sensitive data stored in plaintext in a Swift local database
Sensitive data stored in plaintext in a Swift local database
Sensitive information logged in plaintext in Swift
Sensitive information logged in plaintext in Swift
Hostname validation disabled in an AFNetworking policy without pinning
Hostname validation disabled in an AFNetworking policy without pinning
iOS file protection disabled in Swift
iOS file protection disabled in Swift
Certificate pinning disabled in Swift TrustKit settings
Certificate pinning disabled in Swift TrustKit settings
Insufficient password hashing iterations in Swift
Insufficient password hashing iterations in Swift
Path injection in Swift
Path injection in Swift
Swift NSPredicate Injection
Swift NSPredicate injection
Swift Realm NoSQL Injection
Swift Realm NoSQL injection
Swift Regular Expression Injection
Swift regular expression injection
Swift SQL Injection
Swift SQL injection
Legacy TLS Versions Enabled in Apple Networking Configurations
Legacy TLS versions enabled in Apple networking configurations
Swift Static Initialization Vector
Use of a static initialization vector (IV)
Swift Uncontrolled Format String
Swift uncontrolled format string
Swift Dynamic JavaScript Evaluation in a WebView
Dynamic JavaScript evaluation in a WebView
Swift Unrestricted WebView HTML Loading
Unrestricted WebView HTML loading
Swift Cleartext Storage in UserDefaults
Sensitive data stored in cleartext in Swift UserDefaults
Swift Weak Keychain Accessibility
Weak Keychain accessibility settings in Swift
Swift Inappropriate Password Hashing
Inappropriate password hashing algorithms
Swift Weak Hashing of Sensitive Data
Weak hashing of sensitive data
Swift Foundation XML External Entities (XXE)
Swift Foundation XML external entities (XXE)