Find security weaknesses in your iOS apps.
What it does
Guides authorized security assessments of iOS apps to identify weaknesses in authentication, links, data storage, and transport security.
When to use it
Use when assessing iOS applications for keychain exposure, link hijacking, runtime manipulation, binary protections, storage issues, or transport security bypass.
How to use it
Give it an iOS app to assess; it works through binary analysis, runtime testing, and traffic inspection to identify security weaknesses.
What you provide
- An existing project
Uses
What you need · 5
Requires a device running the target app; jailbroken devices provide full testing capability, while non-jailbroken devices permit limited testing.
The quick audit uses frida-ios-dump to obtain a decrypted binary; the preferred extraction method requires a jailbroken device.
Access · 5
This skill
apple-app-site-association
Fetches app link association files
Keychain
Extracts accessible keychain secrets