Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

awesome-ios-security

A curated list of awesome iOS application security resources.
https://github.com/Cy-clon3/awesome-ios-security

Last synced: 5 days ago
JSON representation

Articles & Tutorials

Jailbrek Detection Bypass Articles

Penetration Testing Articles

Reverse Engineering Articles

SSL Pinning Bypass Articles

Books

SSL Pinning Bypass Tweaks

Checklists & Cheatsheets

SSL Pinning Bypass Articles

Courses

SSL Pinning Bypass Tweaks

CTF

SSL Pinning Bypass Articles

Frida Scripts

SSL Pinning Bypass Tweaks

Labs

SSL Pinning Bypass Articles

Misc

SSL Pinning Bypass Articles

  • iOS Jailbreak Downloads - Download Jailbreak Tools for All iOS Versions.
  • MOBEXLER - A customised virtual machine, designed to help in penetration testing of Android & iOS applications.
  • frida Workbench - Unofficial frida workbench for VSCode.
  • Apple Configurator - Apple Configurator features a flexible, device-centric design that enables you to configure one or dozens of devices quickly and easily.
  • Apple Platform Security - Explore Apple Platform Security.
  • IPSW Downloads - Download current and previous versions of Apple's iOS, iPadOS, macOS, watchOS, tvOS and audioOS firmware and receive notifications when new firmwares are released.
  • theos - A cross-platform suite of tools for building and deploying software for iOS and other platforms.

Sessions & Workshops

SSL Pinning Bypass Tweaks

Tools

Dynamic Analysis Tools

  • Corellium - The only platform offering ARM-based mobile device virtualization using a custom-built hypervisor for real-world accuracy and high performance.
  • itunnel - Use to forward SSH via USB.
  • membuddy - Dynamic memory analysis & visualisation tool for security researchers.
  • LLDB - A next generation, high-performance debugger.
  • Burp Suite - An advanced HTTPS proxy software.
  • Frida - Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.
  • frida-gum - Cross-platform instrumentation and introspection library written in C.
  • Fridax - Fridax enables you to read variables and intercept/hook functions in Xamarin/Mono JIT and AOT compiled iOS/Android applications.
  • r2frida - Radare2 and Frida better together.
  • r2ghidra - An integration of the Ghidra decompiler for radare2.
  • iproxy - A utility allows binding local TCP ports so that a connection to one (or more) of the local ports will be forwarded to the specified port (or ports) on a usbmux device.
  • objection - A runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak.
  • Grapefruit - Runtime Application Instruments for iOS.
  • Passionfruit - Simple iOS app blackbox assessment tool, powered by frida 12.x and vuejs.
  • Runtime Mobile Security (RMS) - Runtime Mobile Security (RMS), powered by FRIDA, is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime.
  • unidbg - Allows you to emulate an Android ARM32 and/or ARM64 native library, and an experimental iOS emulation.
  • Qiling - An advanced binary emulation framework.
  • fishhook - A library that enables dynamically rebinding symbols in Mach-O binaries running on iOS.
  • Dwarf - Full featured multi arch/os debugger built on top of PyQt5 and frida.
  • FridaHookSwiftAlamofire - A frida tool that capture GET/POST HTTP requests of iOS Swift library 'Alamofire' and disable SSL Pinning.
  • ios-deploy - Install and debug iOS apps from the command line. Designed to work on un-jailbroken devices.
  • aah - Run iOS arm64 binaries on x86_64 macOS, with varying degrees of success.
  • mitmproxy - A free and open source interactive HTTPS proxy.

Reverse Engineering Tools

  • Hopper - A reverse engineering tool that will assist you in your static analysis of executable files.
  • jtool - An app inspector, disassembler, and signing utility for the macOS, iOS.
  • Sideloadly - An app to sideload your favorite games and apps to Jailbroken & Non-Jailbroken iOS devices.
  • Cydia Impactor - A GUI tool for sideloading iOS application.
  • AltStore - Allows to sideload other apps (.ipa files) onto iOS device.
  • Ghidra - A software reverse engineering (SRE) framework created and maintained by the National Security Agency Research Directorate.
  • Radare2 - UNIX-like reverse engineering framework and command-line toolset.
  • Cutter - Free and Open Source Reverse Engineering Platform powered by rizin.
  • frida-ios-dump - A tool to pull a decrypted IPA from a jailbroken device.
  • bagbak - Yet another frida based App decryptor. Requires jailbroken iOS device and frida.re.
  • flexdecrypt - An iOS App & Mach-O binary decryptor.