Cycript is a combination of Objective-C and JavaScript that allows interrogating and manipulating iOS or macOS applications during runtime. It can hook into a running process, modify the application dynamically, access classes and variables, perform runtime method swizzling, and create new classes, variables, and functions. Cycript enables listing an app's view hierarchy, tuning views, viewing all variables and functions, and listing classes used by the app.

1. Dynamic analysis with
Cycript
Mike 2016/1/8

2. Agenda
• Introduction
• Ability
• Usage
• Live demo

3. Introduction
• Pronunciation
• A combination interpreter of Obj-C++ & Javascript
• Interrogating & manipulating running application on
iOS or Mac OS X.
• Prototype development tool

4. Ability
• Can be hooked to a running process
• Modify application during runtime
• Access all classes and instance variables within the
app
• Runtime method swizzling
• Create new classes, variables, functions during runtime
• Call method manually during runtime

5. Usage
• List view hierarchy

6. • Tuning around with views

7. • List all variable & functions

8. • List all classes used by current application

9. Live Demo

10. References
• http://www.cycript.org/
• http://www.slideshare.net/eightbit/crikeycon-2015-ios-runtime-hacking-
crash-course
• http://www.rsaconference.com/writable/presentations/file_upload/hta-r04a-
hacking-ios-on-the-run-using-cycript.pdf

11. Q & A