iOS Penetration Testing
Course Description
iOS security testing requires specialized techniques. Learn to analyze, instrument, and exploit iOS applications.
Course Structure
Modules
Module 1: iOS Fundamentals (5h)
- iOS architecture
- Security model
- App sandbox
- Keychain
- Lab setup
Module 2: Static Analysis (6h)
- IPA structure
- Binary analysis
- Plist analysis
- Class extraction
- String analysis
Module 3: Jailbreak & Setup (5h)
- Jailbreak options
- Tool installation
- SSH setup
- File system access
Module 4: Dynamic Analysis (7h)
- Runtime manipulation
- Method hooking
- Function tracing
- Memory analysis
Module 5: Frida for iOS (7h)
- Frida setup
- Script development
- SSL pinning bypass
- Jailbreak detection bypass
- Method hooking
Module 6: Data Storage (5h)
- Keychain analysis
- Plist files
- SQLite databases
- Core Data
- NSUserDefaults
Module 7: Network Security (5h)
- Traffic interception
- Certificate pinning
- API analysis
- WebView testing
Module 8: Advanced Topics (5h)
- Binary patching
- Code signing bypass
- IPC attacks
- Extension testing
Tools
| Tool | Purpose |
|---|---|
| Frida | Instrumentation |
| Objection | Testing framework |
| Hopper | Disassembly |
| MobSF | Automated analysis |
| Clutch | Decryption |
📄️ Overview
iOS application security: runtime analysis, IPA analysis, and jailbreak exploitation