Core Data Storage
Core Data is an object-relational mapping (ORM) that creates a layer between UI & database.Developers prefer Core Data as it is faster in terms of record creation than the traditional SQLite Format.
Last updated
Core Data is an object-relational mapping (ORM) that creates a layer between UI & database.Developers prefer Core Data as it is faster in terms of record creation than the traditional SQLite Format.
Last updated
In this exercise, the app stores data in Core Data Format. Your task is to locate the CoreData file and find the sensitive data that it contains.
From security point of view, these files are similar to SQLite, with the only difference being that the tables are prefixed with Z.
Once we enter the Username and Password the records are stored successfully.
Let’s see whether user credentials are stored securely or not:
Application Data is usually stored in the below path:
Using Grep command we can easily identify the Appfolder which was created during the App installation as shown below;
Now try to access the Core Data Application files using Sqlite3 as shown below;
Notice that all tables starting with prefix Z and the table ZUSER contains the sensitive user credentials stored in plain text.
Although Core Data is easy to use and fast, it should never be used to store sensitive information.
