Reverse engineering the commonly used 3utools software to make it more open and learn about it.

Manage your data and files in your iOS device through your Windows PC with 3uTools. 3uTools is a free app for Windows which helps your iOS multimedia files and data be managed through your PC coupled with handy features. Through the app, you can perform a Jailbreak to your iOS device and thereby giving you access to certain restricted areas of the phone that could unlock some extra capabilities. 3uTools is a jailbreak tool for flashing and jailbreaking Apple’s iPhone, iPad, iPod touch, provides two ways, Easy Mode or Professional Mode, to flash Apple mobile devices, selects the appropriate firmware automatically and supports a rapid downloading speed.

1. Apr 13, 2020  3uTools-Forum. Welcome to 3uTools forum. Here you can find all information about iOS and 3uTools. Skip to content.
2. 3uTools is a tool for flashing and jailbreaking Apple’s iPhone, iPad, iPod touch, provides three ways: Easy Mode, Professional Mode or Multiple Flash to flash Apple mobile devices, selects the appropriate firmware automatically and supports a rapid downloading speed. 3uTools Free Download Latest Version for Windows PC.

Why

3utools is amazingly great software for managing iOS devices.
Not only does it show you a lot information about hardware integrity of your devices, it also helps you fix problems and jailbreak them.
3utools is not opensource but has an API for most of their functionality.
For the freedom of development I wanted to see if this API can be reused by developers as that would make the life of security researchers easier.

The Research

3utools has the ability to specify a proxy in the settings.
Since the traffic of 3utools is encrypted via TLS, I am using fiddler with its own CA certificate.
After launching fiddler I simply set the proxy server in the settings to be localhost with port 8888, which is what fiddler runs on.
Burpsuite is also possible the same way which is amazing for debugging API calls and reproducing / interacting with API calls. Dbms_sqltune set_auto_tuning_task_parameter.

First 0-day vulnerability reported

Without even using any research tools like burpsuite and fiddler I expected that most of the content loaded in 3utools is actually just a webpage with a lot of javascript, this due to the delays in rendering certain userinterface graphics because that could mean and turned out to be loaded over the network.

3utools was vulnerable to a low-risk cross site scripting vulnerability which I found by simply entering '<script>alert(1)</script>' in almost any of the input fields a user could access in the software.With that I also found the domain where their UI is located at.

3utools Waiting For Nand

Without further interruption or waiting, I immediately reported the vulnerability to 3utools and it got patched the same day.
However, I did not get any bounty. After all 3utools is free software anyway.

Amazing infrastructure

3utools seems to have amazing infrastructure.
They have a persitant file storage server where they store almost any iOS firmware related files, such as developer dmgs and jailbreaks.
This makes their service faster than Apple's and able to download files even when Apple's servers are down.
What is where and where is what is yet to be found out, but at least I discovered that when clicking the 'view screen' button you can see that the corresponding developer dmg image is downloaded for your device and mounted.
Probably because they use the 'screenshotr' xpc service to get the live screen.
For developers and researchers this means it is amazingly easy to quickly download the developer dmg from their servers as they are all named logically.

3utools Windows 10

Aside the filestorage they also have a REST json API with one can retrieve information about firmware.
One can ask the API to only give jailbreakable or jailbreakable and signed firmware or just any firmware for specific devices and OS versions.
Great feature if you ask me, again for developers and researchers a good way to automate their work a few more.

3utools Wikipedia

NOTE FOR DEVELOPERS: You can see the full documentation being developed when clicking the 'wiki' here on GitHub.

TLDR:Reverse engineering 3utools pays off and the first vulnerability has been fixed.
Developers and researchers benefit from 3utools rest API and filestorage.

3utools Windows 7 64 Bit

• Likes

  Replies

  Views

  Last post

3utools Windows 10 Download

• Top Digital Marketing Expert And Seo Service Provider
  

  Last post by datebookbackshift « 15 Apr 2020 22:31

  0 Likes

  0 Replies

  86 Views

  Last post by datebookbackshiftView the latest post
  15 Apr 2020 22:31

• Error 6 iOS11 Downgrade
  Replies: 8

  Attachment(s) by liljak » 18 Jul 2017 20:32

  0 Likes

  8 Replies

  6670 Views

  Last post by VayneView the latest post
  15 Apr 2020 13:31

• downgrade of firmware
  Replies: 2

  by rahil_techlearner » 11 Apr 2019 22:21

  0 Likes

  2 Replies

  882 Views

  Last post by blackshadyView the latest post
  14 Apr 2020 10:01

• not charging iphone when installed 3utools
  Replies: 2

  by josephhuan » 01 Feb 2019 12:04

  0 Likes

  2 Replies

  868 Views

  Last post by Yilia1988View the latest post
  13 Apr 2020 14:34

• Help - Error code -10 when I set vitrual location for my iPad
  

  Attachment(s) by sadtango289 » 11 Apr 2020 12:13

  0 Likes

  0 Replies

  148 Views

  Last post by sadtango289View the latest post
  11 Apr 2020 12:13

• iPhone unable to switch from DFU mode to Recovery Mode when flashing
  Replies: 1

  by lmaoski » 08 Jun 2019 09:32

  0 Likes

  1 Replies

  867 Views

  Last post by Yilia1988View the latest post
  08 Apr 2020 14:03

• error (-53) during flash iPhone7
  Replies: 4

  by donaldyg81 » 05 Apr 2018 20:50

  0 Likes

  4 Replies

  2048 Views

  Last post by VayneView the latest post
  07 Apr 2020 21:48

• -10 Error when updating my phone
  Replies: 2

  by Johnnyboi132 » 05 Jun 2019 03:32

  0 Likes

  2 Replies

  620 Views

  Last post by blackshadyView the latest post
  07 Apr 2020 19:43

• Turkish Language
  

  by onderazazi » 03 Apr 2020 02:16

  0 Likes

  0 Replies

  279 Views

  Last post by onderazaziView the latest post
  03 Apr 2020 02:16

• Error DFU Mode
  Replies: 5

  Attachment(s) by leobej » 26 Aug 2018 22:33

  0 Likes

  5 Replies

  2179 Views

  Last post by VayneView the latest post
  30 Mar 2020 19:53

• iPhone SE error -6 whilst flashing
  Replies: 3

  by MarnickV » 28 Sep 2018 09:44

  1 Likes

  3 Replies

  2379 Views

  Last post by Yilia1988View the latest post
  24 Mar 2020 10:56

• Iphone 5 64bit IOS 10.3.3 (14G60) not supported by 3uTools
  Replies: 5

  by snake1stRTR » 03 Feb 2020 23:32

  0 Likes

  5 Replies

  4170 Views

  Last post by Lily LeeView the latest post
  17 Mar 2020 17:20

• 3uTools doesnt recognize the installed apps on ipad2
  Replies: 1

  by razes » 16 Feb 2020 07:14

  0 Likes

  1 Replies

  4760 Views

  Last post by hovermoonView the latest post
  17 Mar 2020 17:03

• [Activation] [Help] Re-Activate iPhone 6s 9.3.3.
  Replies: 1

  by smythius » 18 Sep 2019 13:08

  0 Likes

  1 Replies

  1456 Views

  Last post by Yilia1988View the latest post
  16 Mar 2020 19:38

• Activation error
  Replies: 4

  by ashwin33 » 23 Nov 2018 04:48

  0 Likes

  4 Replies

  2283 Views

  Last post by VayneView the latest post
  16 Mar 2020 17:49

• ipad 4 black screen of death and dfu loop error
  Replies: 4

  by fritschi64 » 08 Jul 2019 12:19

  0 Likes

  4 Replies

  3878 Views

  Last post by Wlee2060View the latest post
  11 Mar 2020 11:28

• Update Errors
  Replies: 2

  by Yawe2099 » 11 Oct 2018 21:45

  0 Likes

  2 Replies

  2877 Views

  Last post by VayneView the latest post
  09 Mar 2020 11:14

• reset passcode 3utools
  Replies: 4

  Attachment(s) by atingbowest » 19 Dec 2018 02:35

  0 Likes

  4 Replies

  3183 Views

  Last post by VayneView the latest post
  01 Mar 2020 18:58

• Black screen ipad air 2 A1566
  Replies: 6

  by ig33ku » 26 Dec 2018 07:58

  0 Likes

  6 Replies

  5543 Views

  Last post by Wlee2060View the latest post
  28 Feb 2020 14:10

• Unable to switch DFU Mode to Recovery mode
  Replies: 4

  Attachment(s) by grnz9mn » 19 Nov 2017 11:43

  0 Likes

  4 Replies

  14022 Views

  Last post by Yilia1988View the latest post
  17 Feb 2020 21:42

• Strange problem with Ipad 2, cannot update to 9.3.5
  Replies: 7

  by solvbb » 14 Feb 2019 20:21

  0 Likes

  7 Replies

  4496 Views

  Last post by solvbbView the latest post
  17 Feb 2020 02:28

• Iphone 6s won't restore
  Replies: 5

  by dfsg98SADUak » 24 Aug 2019 23:46

  0 Likes

  5 Replies

  4997 Views

  Last post by Wlee2060View the latest post
  14 Feb 2020 12:32

• How to restore apps from backup
  Replies: 7

  by m2work » 08 Feb 2018 15:13

  0 Likes

  7 Replies

  5267 Views

  Last post by blackshadyView the latest post
  18 Jan 2020 11:48

• Iphone 6 - Stuck during IOS update/restore
  Replies: 6

  by Satheeshu » 24 Jul 2019 23:14

  0 Likes

  6 Replies

  3364 Views

  Last post by Wlee2060View the latest post
  16 Jan 2020 09:39

• iPhone 6S Failure to Restore (Possible Error 26/NAND Damage)
  Replies: 2

  by bridgetownrepair » 05 Apr 2018 15:05

  0 Likes

  2 Replies

  4393 Views

  Last post by VayneView the latest post
  06 Jan 2020 13:55