Password Stealing (Keychain)
Demo here for stealing iCloud token from "Internet Accounts".
Demo here for stealing passwords from Google Chrome browser.
Demo here for BID attack against Evernote app, stealing private notes of the Evernote user.
Demo here for Websocket attack against 1Password app, stealing all passwords used in Chrome browser.
Demo here for port hijacking attack against Pushbullet app, stealing Pushbullet authentication token.
Demo here for iOS scheme hijacking, stealing Pinterest authentication token.
Demo here for OS X scheme hijacking, stealing Wunderlist authentication token.
Demo here for OS X scheme hijacking, phishing for OS X user credentials.