Agent skill · security · yaklang
ios-pentesting-tricks
iOS pentesting playbook. Use when testing iOS applications for keychain extraction, URL scheme hijacking, Universal Links exploitation, runtime manipulation, binary protection analysis, data storage issues, and transport security bypass during authorized mobile security assessments.
Why this skill is useful
Adds specific executable scripts and techniques for iOS pentesting that are not commonly known or documented.
What it needs
Requires frida, ideviceinstaller, ios-deploy, objection installed locally. About 8k tokens when loaded. Last updated 2026-06-16. 1,563 stars on the source repository.
What this skill does
SKILL: iOS Pentesting Tricks — Expert Attack Playbook AI LOAD INSTRUCTION: Expert iOS application security testing techniques. Covers jailbreak vs non-jailbreak methodology, keychain extraction, URL scheme/Universal Links abuse, Frida/Objection runtime hooks, binary protection checks, and data storage analysis. Base models miss protection class nuances and AASA misconfiguration patterns. 0. RELATED ROUTING Before going deep, consider loading: mobile-ssl-pinning-bypass for in-depth SSL pinning bypass (SecTrust hooks, SSL Kill Switch, framework-specific techniques) android-pentesting-tricks when also testing the Android version of the same app api-sec for backend API security testing once traffic is intercepted Advanced Reference Also load IOSRUNTIMETRICKS.md when you need: Frida recipes for iOS-specific hooks (ObjC class enumeration, method swizzling) Objection command reference for iOS Runtime hooking patterns and bypass templates --- 1. JAILBREAK VS NON-JAILBREAK TESTING Capability Jailbroken Non-Jailbroken --- --- --- SSL pinning bypass Frida, SSL Kill Switch 2, Objection Network debugging proxy, MITM profiles (limited) Keychain access keychain-dumper, Frida dump Only via backup extraction (limited) Filesystem inspection Full access to app sandbox Only via ideviceinstaller + backup Runtime manipulation Frida, Cycript, LLDB attach Frida on sideloaded apps (re-signed) Binary analysis Class-dump, Hopper on-device Decrypt IPA on Mac, analyze offline Method hooking Full Frida/Cycript capability Limited (needs re-signed app + Frida gadget) Non-Jailbreak Testing Setup --- 2. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills yaklang/ios-pentesting-tricks