{"id":1216,"url":"https://github.com/Cy-clon3/awesome-ios-security","name":"awesome-ios-security","description":"A curated list of awesome iOS application security resources.","projects_count":134,"last_synced_at":"2026-10-03T22:00:27.121Z","repository":{"id":37041420,"uuid":"479983698","full_name":"Cy-clon3/awesome-ios-security","owner":"Cy-clon3","description":"A curated list of awesome iOS application security resources.","archived":false,"fork":false,"pushed_at":"2024-01-05T22:14:08.000Z","size":157,"stargazers_count":671,"open_issues_count":6,"forks_count":83,"subscribers_count":8,"default_branch":"main","last_synced_at":"2026-09-14T02:07:37.919Z","etag":null,"topics":["application-security","awesome","awesome-list","cybersecurity","ios","pentesting","security"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"cc0-1.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Cy-clon3.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"contributing.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2022-04-10T10:28:56.000Z","updated_at":"2026-09-10T21:21:00.000Z","dependencies_parsed_at":"2024-01-10T17:53:13.463Z","dependency_job_id":null,"html_url":"https://github.com/Cy-clon3/awesome-ios-security","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/Cy-clon3/awesome-ios-security","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Cy-clon3%2Fawesome-ios-security","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Cy-clon3%2Fawesome-ios-security/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Cy-clon3%2Fawesome-ios-security/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Cy-clon3%2Fawesome-ios-security/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Cy-clon3","download_url":"https://codeload.github.com/Cy-clon3/awesome-ios-security/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Cy-clon3%2Fawesome-ios-security/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343072799,"owners_count":37985174,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"ssl_error","status_checked_at":"2026-10-03T21:59:58.217Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"created_at":"2024-01-04T17:47:43.328Z","updated_at":"2026-10-03T22:00:27.122Z","primary_language":null,"list_of_lists":false,"displayable":true,"categories":["Tools","Tweaks","Frida Scripts","Courses","Books","Sessions \u0026 Workshops","Articles \u0026 Tutorials","Checklists \u0026 Cheatsheets","Labs","CTF","Writeups","Misc"],"sub_categories":["Reverse Engineering Tools","Dynamic Analysis Tools","Static Analysis Tools","Reverse Engineering Tweaks","Jailbrek Detection Bypass Tweaks","SSL Pinning Bypass Tweaks","Penetration Testing Articles","Reverse Engineering Articles","Jailbrek Detection Bypass Articles","SSL Pinning Bypass Articles"],"readme":"\u003c!--lint ignore double-link--\u003e\n\n\u003c!--lint disable awesome-heading--\u003e\n# Awesome iOS Security \u003ca href=\"https://github.com/Cy-clon3/awesome-ios-security/\"\u003e\u003cimg src=\"https://awesome.re/badge.svg\" alt=\"Awesome\"\u003e\u003c/a\u003e\n\n\u003ca href=\"https://github.com/Cy-clon3/awesome-ios-security/\"\u003e\u003cimg src=\"https://upload.wikimedia.org/wikipedia/commons/5/56/IOS_15_logo.png\" align=\"right\" width=\"70\" alt=\"iOS 15\"\u003e\u003c/a\u003e\n\n\u003e [\u003cimg src=\"https://upload.wikimedia.org/wikipedia/commons/thumb/1/1b/Apple_logo_grey.svg/30px-Apple_logo_grey.svg.png\" width=\"16\"\u003e]() A curated list of awesome iOS application security resources.\n\n\u003c!--lint enable double-link--\u003e\n\nA collection of awesome tools, books, courses, blog posts, and cool stuff about iOS Application Security and Penetration Testing.\n\n---\n\n## Contents\n\n- [Tools](#tools)\n  - [Reverse Engineering Tools](#reverse-engineering-tools)\n  - [Static Analysis Tools](#static-analysis-tools)\n  - [Dynamic Analysis Tools](#dynamic-analysis-tools)\n- [Tweaks](#tweaks)\n  - [Reverse Engineering Tweaks](#reverse-engineering-tweaks)\n  - [Jailbrek Detection Bypass Tweaks](#jailbrek-detection-bypass-tweaks)\n  - [SSL Pinning Bypass Tweaks](#ssl-pinning-bypass-tweaks)\n- [Frida Scripts](#frida-scripts)\n- [Courses](#courses)\n- [Books](#books)\n- [Sessions \u0026 Workshops](#sessions--workshops)\n- [Articles \u0026 Tutorials](#articles--tutorials)\n  - [Penetration Testing Articles](#penetration-testing-articles)\n  - [Reverse Engineering Articles](#reverse-engineering-articles)\n  - [Jailbrek Detection Bypass Articles](#jailbrek-detection-bypass-articles)\n  - [SSL Pinning Bypass Articles](#ssl-pinning-bypass-articles)\n- [Checklists \u0026 Cheatsheets](#checklists--cheatsheets)\n- [Labs](#labs)\n- [CTF](#ctf)\n- [Writeups](#writeups)\n- [Misc](#misc)\n\n## Tools\n\n\u003ca name=\"reverse-engineering-tools\"\u003e\u003c/a\u003e\n### Reverse Engineering Tools\n- [Hopper](https://www.hopperapp.com/) - A reverse engineering tool that will assist you in your static analysis of executable files.\n- [Ghidra](https://github.com/NationalSecurityAgency/ghidra) - A software reverse engineering (SRE) framework created and maintained by the National Security Agency Research Directorate.\n- [Radare2](https://github.com/radareorg/radare2) - UNIX-like reverse engineering framework and command-line toolset.\n- [Cutter](https://github.com/rizinorg/cutter) - Free and Open Source Reverse Engineering Platform powered by rizin.\n- [frida-ios-dump](https://github.com/AloneMonkey/frida-ios-dump) - A tool to pull a decrypted IPA from a jailbroken device.\n- [bagbak](https://github.com/ChiChou/bagbak) - Yet another frida based App decryptor. Requires jailbroken iOS device and frida.re.\n- [flexdecrypt](https://github.com/JohnCoates/flexdecrypt) - An iOS App \u0026 Mach-O binary decryptor.\n- [bfdecrypt](https://github.com/BishopFox/bfdecrypt) - Utility to decrypt App Store apps on jailbroken iOS 11.x.\n- [bfinject](https://github.com/BishopFox/bfinject) - Easy dylib injection for jailbroken 64-bit iOS 11.0 - 11.1.2. Compatible with Electra and LiberiOS jailbreaks.\n- [r2flutch](https://github.com/as0ler/r2flutch) - Yet another tool to decrypt iOS apps using r2frida.\n- [Clutch](https://github.com/KJCracks/Clutch) - A high-speed iOS decryption tool.\n- [dsdump](https://github.com/DerekSelander/dsdump) - An improved nm + objc/swift class-dump tool.\n- [class-dump](https://github.com/nygard/class-dump) - A command-line utility for examining the Objective-C segment of Mach-O files.\n- [SwiftDump](https://github.com/neil-wu/SwiftDump/) - A command-line tool for retriving the Swift Object info from Mach-O file.\n- [jtool](http://www.newosxbook.com/tools/jtool.html) - An app inspector, disassembler, and signing utility for the macOS, iOS.\n- [Sideloadly](https://sideloadly.io/) - An app to sideload your favorite games and apps to Jailbroken \u0026 Non-Jailbroken iOS devices.\n- [Cydia Impactor](http://www.cydiaimpactor.com/) - A GUI tool for sideloading iOS application.\n- [AltStore](https://altstore.io/) - Allows to sideload other apps (.ipa files) onto iOS device.\n- [iOS App Signer](https://github.com/DanTheMan827/ios-app-signer) - An app for macOS that can (re)sign apps and bundle them into ipa files that are ready to be installed on an iOS device.\n\n\u003ca name=\"static-analysis-tools\"\u003e\u003c/a\u003e\n### Static Analysis Tools\n- [iLEAPP](https://github.com/abrignoni/iLEAPP) - An iOS Logs, Events, And Plist Parser.\n- [Keychain Dumper](https://github.com/ptoomey3/Keychain-Dumper) - A tool to check which keychain items are available to an attacker once an iOS device has been jailbroken.\n- [BinaryCookieReader](https://github.com/as0ler/BinaryCookieReader) - A tool to read the binarycookie format of Cookies on iOS applications.\n- [PList Viewer](https://github.com/TingPing/plist-viewer) - Gtk application to view property list files.\n- [XMachOViewer](https://github.com/horsicq/XMachOViewer) - A Mach-O viewer for Windows, Linux and macOS.\n- [MachO-Explorer](https://github.com/DeVaukz/MachO-Explorer) - A graphical Mach-O viewer for macOS. Powered by Mach-O Kit.\n- [iFunbox](https://www.i-funbox.com/en/index.html) - A general file management software for iPhone and other Apple products.\n- [3uTools](http://www.3u.com/) - An All-in-One management software for iOS devices.\n- [iTools](https://www.thinkskysoft.com/itools/) - An All-in-One solution for iOS devices management.\n\n\u003ca name=\"dynamic-analysis-tools\"\u003e\u003c/a\u003e\n### Dynamic Analysis Tools\n- [Corellium](https://www.corellium.com/) - The only platform offering ARM-based mobile device virtualization using a custom-built hypervisor for real-world accuracy and high performance.\n- [Frida](https://github.com/frida/frida) - Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.\n- [frida-gum](https://github.com/frida/frida-gum) - Cross-platform instrumentation and introspection library written in C.\n- [Fridax](https://github.com/NorthwaveSecurity/fridax) - Fridax enables you to read variables and intercept/hook functions in Xamarin/Mono JIT and AOT compiled iOS/Android applications.\n- [r2frida](https://github.com/nowsecure/r2frida) - Radare2 and Frida better together.\n- [r2ghidra](https://github.com/radareorg/r2ghidra) - An integration of the Ghidra decompiler for radare2.\n- [iproxy](https://github.com/libimobiledevice/libusbmuxd) - A utility allows binding local TCP ports so that a connection to one (or more) of the local ports will be forwarded to the specified port (or ports) on a usbmux device.\n- [itunnel](https://code.google.com/archive/p/iphonetunnel-usbmuxconnectbyport/downloads) - Use to forward SSH via USB.\n- [objection](https://github.com/sensepost/objection) - A runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak.\n- [Grapefruit](https://github.com/ChiChou/grapefruit) - Runtime Application Instruments for iOS.\n- [Passionfruit](https://github.com/chaitin/passionfruit) - Simple iOS app blackbox assessment tool, powered by frida 12.x and vuejs.\n- [Runtime Mobile Security (RMS)](https://github.com/m0bilesecurity/RMS-Runtime-Mobile-Security) - Runtime Mobile Security (RMS), powered by FRIDA, is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime.\n- [membuddy](https://zygosec.com/membuddy.html) - Dynamic memory analysis \u0026 visualisation tool for security researchers.\n- [unidbg](https://github.com/zhkl0228/unidbg) - Allows you to emulate an Android ARM32 and/or ARM64 native library, and an experimental iOS emulation.\n- [Qiling](https://github.com/qilingframework/qiling) - An advanced binary emulation framework.\n- [fishhook](https://github.com/facebook/fishhook) - A library that enables dynamically rebinding symbols in Mach-O binaries running on iOS.\n- [Dwarf](https://github.com/iGio90/Dwarf) - Full featured multi arch/os debugger built on top of PyQt5 and frida.\n- [FridaHookSwiftAlamofire](https://github.com/neil-wu/FridaHookSwiftAlamofire) - A frida tool that capture GET/POST HTTP requests of iOS Swift library 'Alamofire' and disable SSL Pinning.\n- [ios-deploy](https://github.com/ios-control/ios-deploy) - Install and debug iOS apps from the command line. Designed to work on un-jailbroken devices.\n- [aah](https://github.com/zydeco/aah) - Run iOS arm64 binaries on x86_64 macOS, with varying degrees of success.\n- [LLDB](https://lldb.llvm.org/) - A next generation, high-performance debugger. \n- [mitmproxy](https://mitmproxy.org/) - A free and open source interactive HTTPS proxy.\n- [Burp Suite](https://portswigger.net/burp) - An advanced HTTPS proxy software.\n\n## Tweaks\n\n\u003ca name=\"reverse-engineering-tweaks\"\u003e\u003c/a\u003e\n### Reverse Engineering Tweaks\n- [FoulDecrypt](https://github.com/NyaMisty/fouldecrypt) - A lightweight and simpling iOS binary decryptor, supports iOS 13.5 and later.\n- [iGameGod](https://iosgods.com/repo/) - Cheat Engine, Speed Manager, Auto Touch, Device Spoofer \u0026 App Decryptor.\n- [CrackerXI](http://cydia.iphonecake.com/) - Tool to Decrypt iOS Apps, based on BFInject, Supports Electra as well as Unc0ver Jailbreaks.\n- [flexdecrypt](https://repo.packix.com/) - Command line tool for decrypting Mach-O binaries.\n- [Flex 3 Beta](https://getdelta.co/) - Flex gives you the power to modify apps and change their behavior, with no coding experience needed.\n- [Frida](https://build.frida.re) - Frida server for iOS.\n- [OpenSSH](https://cydia.saurik.com/package/openssh/) - Secure remote access between machines.\n- [Apple File Conduit \"2\"](https://cydia.saurik.com/package/com.saurik.afc2d/) - Unlocks filesystem access over USB on Windows or macOS on jailbroken devices.\n- [AppSync Unified](https://cydia.akemi.ai/?page/net.angelxwind.appsyncunified) - Enables the ability to install unsigned/fakesigned iOS applications.\n- [NewTerm 2](https://chariz.com/) - A powerful terminal app for iOS.\n- [Filza File Manager](http://cydia.saurik.com/package/com.tigisoftware.filza/) - A Powerful File Manager for iOS with IPA Installer, DEB Installer, Web viewer, and Terminal.\n\n\u003ca name=\"static-analysis-tweaks\"\u003e\u003c/a\u003e\n### Jailbrek Detection Bypass Tweaks\n- [Shadow](https://ios.jjolano.me/depiction/web/me.jjolano.shadow.html) - A lightweight general jailbreak detection bypass tweak.\n- [A-Bypass](https://repo.co.kr/package/com.rpgfarm.a-bypass) - A tool that helps block some apps from accessing unauthorized space or calling functions not authorized by Apple due to jailbreak.\n- [FlyJB X](https://repo.xsf1re.kr/) - A jailbreak bypass that allows you to bypass the in-app jailbreak detection mechanism.\n- [Liberty Lite (Beta)](https://ryleyangus.com/repo/) - A general purpose jailbreak detection bypass patch.\n- [vnodebypass](https://cydia.ichitaso.com/) - An expermental tool to hide jailbreak files for bypass detection.\n- [KernBypass (Unofficial)](https://cydia.ichitaso.com) - A kernel level jailbreak detection bypass tweak.\n- [HideJB](http://cydia.saurik.com/package/com.thuthuatjb.hidejb/) - Bybass jailbreak detection in certain apps.\n- [Hestia](https://repo.packix.com/) - A global jailbreak detection bypass tweak.\n- [Choicy](http://cydia.saurik.com/package/com.opa334.choicy/) - An advanced tweak configurator.\n\n\u003ca name=\"dynamic-analysis-tweaks\"\u003e\u003c/a\u003e\n### SSL Pinning Bypass Tweaks\n- [SSL Kill Switch 2](https://github.com/nabla-c0d3/ssl-kill-switch2) - A blackbox tool to disable SSL/TLS certificate validation - including certificate pinning - within iOS and macOS applications.\n- [SSLBypass](https://github.com/evilpenguin/SSLBypass) - An iOS SSL Pinning Bypass Tweak (iOS 8 - 14).\n\n## Frida Scripts\n- [FridaSwiftDump](https://github.com/neil-wu/FridaSwiftDump/) - A Frida script for retriving the Swift Object info from an running app.\n- [iOS 13 SSL Bypass](https://codeshare.frida.re/@federicodotta/ios13-pinning-bypass/) - SSL Pinning Bypass for iOS 13.\n- [iOS 12 SSL Bypass](https://codeshare.frida.re/@machoreverser/ios12-ssl-bypass/) - SSL Pinning Bypass for iOS 12.\n- [iOS Jailbreak Detection Bypass](https://codeshare.frida.re/@liangxiaoyi1024/ios-jailbreak-detection-bypass/) - A Frida script used for bypass iOS jailbreak detection by hooking some methods and functions.\n- [iOS App Static Analysis](https://codeshare.frida.re/@interference-security/ios-app-static-analysis/) - Script for iOS app's static analysis.\n- [Touch ID Bypass](https://highaltitudehacks.com/2018/07/26/ios-application-security-part-50-touch-id-bypass-with-frida/) - A Frida script for iOS Touch/Face ID Bypass.\n\n## Courses\n\n- [Pentesting iOS Applications](https://www.pentesteracademy.com/course?id=2) - By PentesterAcademy.\n- [iOS Pentesting](https://www.youtube.com/playlist?list=PL5Fxd3nu70eyqiqrVlD9QMoaOARr082TA) - By Mantis.\n- [iOS Application Pentesting Series](https://www.youtube.com/playlist?list=PLm_U3e1sSTMvgj1sbZ2Ng6VbxMWw8Wyk9) - By Sateesh Verma.\n- [IOS: Penetration Testing](https://www.youtube.com/playlist?list=PLanZMaPa4zzyGJ7IiW2zQNC40pWf2-7uE) - By Noisy Hacker.\n\n## Books\n\n- [iOS Hacking Guide](https://web.securityinnovation.com/hacking-ios-applications) - By Security Innovation.\n- [iOS Application Security: The Definitive Guide for Hackers and Developers](https://nostarch.com/iossecurity) - By David Thiel.\n- [iOS Penetration Testing: A Definitive Guide to iOS Security](https://link.springer.com/book/10.1007/978-1-4842-2355-0) - By Kunal Relan.\n- [Learning iOS Penetration Testing](https://www.packtpub.com/product/learning-ios-penetration-testing/9781785883255) - By Swaroop Yermalkar.\n- [Hacking and Securing iOS Applications](https://www.oreilly.com/library/view/hacking-and-securing/9781449325213/) - By Jonathan Zdziarski.\n- [iOS Hacker's Handbook](https://www.amazon.com/iOS-Hackers-Handbook-Charlie-Miller/dp/1118204123) - By Charlie Miller.\n\n## Sessions \u0026 Workshops\n\n- [iOS + Frida Tutorial](https://youtu.be/h070-YZKOKE) - A 3-parts workshop contains an introduction to Frida and iOS, low-level iOS interfaces (GCD, XPC, IOKit, Mach), and Objective-C instrumentation by @naehrdine.\n- [Exploiting Common iOS Apps' Vulnerabilities](https://www.youtube.com/watch?v=RLzbHHoEKo8\u0026t=19s) - A session by @ivRodriguezCA that walks through some of the most common vulnerabilities on iOS apps and shows how to exploit them.\n- [iOS Reverse Engineering With Frida](https://www.youtube.com/watch?v=miSg0Km2V-w) - How to get started in iOS RE with any PC/Mac, an iPhone, and Frida by @x71n3.\n- [iOS Application Vulnerabilities and how to find them](https://www.youtube.com/watch?v=2CKrw7ErzCY) - How to get started with hacking iOS apps, environment requirement, play ground etc. by @0ctac0der.\n\n## Articles \u0026 Tutorials\n\n\u003ca name=\"penetration-testing-articles\"\u003e\u003c/a\u003e\n### Penetration Testing Articles\n\n- [A Comprehensive guide to iOS Penetration Testing](https://www.getastra.com/blog/security-audit/ios-penetration-testing/)\n- [Getting Started with iOS Penetration Testing](https://blog.yeswehack.com/yeswerhackers/getting-started-ios-penetration-testing-part-1/)\n- [iOS Pentesting 101](https://www.cobalt.io/blog/ios-pentesting-101)\n- [Insecure iOS Storage - DVIAv2](https://philkeeble.com/ios/Insecure-iOS-Storage/)\n\n\u003ca name=\"reverse-engineering-articles\"\u003e\u003c/a\u003e\n### Reverse Engineering Articles\n\n- [iOS Pentesting Tools Part 1: App Decryption and class-dump](https://www.allysonomalley.com/2018/08/10/ios-pentesting-tools-part-1-app-decryption-and-class-dump/)\n- [Anti Anti Hooking/Debugging - DVIAv2](https://philkeeble.com/ios/reverse-engineering/iOS-Anti-Anti-Hooking/)\n- [Runtime Manipulation - DVIAv2](https://philkeeble.com/ios/reverse-engineering/iOS-Runtime-Manipulation/)\n- [Reverse Engineering iOS Apps - iOS 11 Edition](https://ivrodriguez.com/reverse-engineer-ios-apps-ios-11-edition-part2/)\n\n\n\u003ca name=\"jailbrek-detection-bypass-articles\"\u003e\u003c/a\u003e\n### Jailbrek Detection Bypass Articles\n\n- [Bypass Jailbreak Detection with Frida in iOS applications](https://blog.attify.com/bypass-jailbreak-detection-frida-ios-applications/)\n- [iOS Swift Anti-Jailbreak Bypass with Frida](https://syrion.me/blog/ios-swift-antijailbreak-bypass-frida/)\n- [Bypassing JailBreak Detection - DVIAv2](https://philkeeble.com/ios/reverse-engineering/iOS-Bypass-Jailbreak/)\n- [Gotta Catch 'Em All: Frida \u0026 jailbreak detection](https://www.romainthomas.fr/post/21-07-pokemongo-anti-frida-jailbreak-bypass/)\n\n\u003ca name=\"ssl-pinning-bypass-articles\"\u003e\u003c/a\u003e\n### SSL Pinning Bypass Articles\n\n- [SSL Pinning bypass in iOS application](https://sudonull.com/post/10665-SSL-Pinning-bypass-in-iOS-application)\n- [Bypass Facebook SSL Certificate Pinning for iOS](https://www.cyclon3.com/bypass-facebook-ssl-certificate-pinning-for-ios)\n- [Bypass SSL Pinning with LLDB on AppStore iOS apps](https://itnext.io/bypass-ssl-pinning-with-lldb-in-ios-app-b78f9e7cc9cd)\n\n\u003ca name=\"checklists-cheatsheets\"\u003e\u003c/a\u003e\n## Checklists \u0026 Cheatsheets\n\n- [HackTricks iOS Pentesting Checklist](https://book.hacktricks.xyz/mobile-apps-pentesting/ios-pentesting-checklist)\n- [OWASP Mobile Application Security Verification Standard (MASVS)](https://github.com/OWASP/owasp-masvs)\n- [iOS CheatSheet](https://github.com/randorisec/MobileHackingCheatSheet/blob/master/LEGACY.md#ios-cheatsheet)\n- [iOS Client-Side Attacks and Tests](https://appsec-labs.com/ios-attacks-tests/)\n\n## Labs\n\n- [Damn Vulnerable iOS Application (DVIA)](https://damnvulnerableiosapp.com/)\n- [OWASP iGoat](https://igoatapp.com/)\n- [WaTF Bank](https://github.com/WaTF-Team/WaTF-Bank)\n- [Myriam](https://github.com/GeoSn0w/Myriam)\n\n## CTF\n- [OWASP UnCrackable Mobile Apps](https://github.com/OWASP/owasp-mstg/tree/master/Crackmes)\n- [r2con Crackmes](https://github.com/hexploitable/r2con2020_r2frida)\n- [Headbook-CTF](https://github.com/ivRodriguezCA/Headbook-ctf)\n- [iOS CTF](https://www.optiv.com/insights/source-zero/blog/walkthrough-ios-ctf)\n- [DFA/CCSC Spring 2020 CTF – Apple iOS Forensics with iLEAPP](https://www.petermstewart.net/dfa-ccsc-spring-2020-ctf-apple-ios-forensics-with-ileapp/)\n- [NCC Con 2018 iOS CTF](https://ch1kpee.com/2018/01/08/ncc-con-2018-ios-ctf-solutions/)\n- [Cellebrite CTF 2021 - Beth's iPhone](https://www.stark4n6.com/2021/10/cellebrite-ctf-2021-beths-iphone.html)\n\n## Writeups\n\n- [A deep dive into an NSO zero-click iMessage exploit: Remote Code Execution](https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html)\n- [Airdrop: Symbolic Link Following](https://breakpoint.sh/posts/airdrop-symbolic-link-following)\n- [XSS STORED IN FILES.SLACK.COM VIA XML/SVG FILE (IOS)](https://omespino.com/write-up-xss-stored-in-files-slack-com-via-xml-svg-file-ios-1000-usd/)\n- [Facebook iOS address bar spoofing](https://servicenger.com/mobile/facebook-ios-address-bar-spoofing/)\n\n## Misc\n\n- [iOS Jailbreak Downloads](https://idevicecentral.com/jailbreak-tools/ios-jailbreak-downloads-download-jailbreak-tools-for-all-ios-versions/) - Download Jailbreak Tools for All iOS Versions.\n- [MOBEXLER](https://mobexler.com/) - A customised virtual machine, designed to help in penetration testing of Android \u0026 iOS applications.\n- [frida Workbench](https://marketplace.visualstudio.com/items?itemName=CodeColorist.vscode-frida) - Unofficial frida workbench for VSCode.\n- [Apple Configurator](https://apps.apple.com/app/apple-configurator-2/id1037126344) - Apple Configurator features a flexible, device-centric design that enables you to configure one or dozens of devices quickly and easily.\n- [Apple Platform Security](https://support.apple.com/en-gb/guide/security/welcome/web) - Explore Apple Platform Security.\n- [IPSW Downloads](https://ipsw.me/) - Download current and previous versions of Apple's iOS, iPadOS, macOS, watchOS, tvOS and audioOS firmware and receive notifications when new firmwares are released.\n- [theos](https://github.com/theos/theos) - A cross-platform suite of tools for building and deploying software for iOS and other platforms.\n\n## Contributing\n\nYour contributions are always welcome! Please read the [contribution guidelines](contributing.md) first.\n","projects_url":"https://awesome.ecosyste.ms/api/v1/lists/cy-clon3%2Fawesome-ios-security/projects"}