PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Getting Started with iOS Penetration Testing (Part 1)

yeswehack.com | blog | #mobile-security | #ios | #jailbreak | #penetration-testing | #ssl-pinning | #frida | #objection
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A beginner's guide to iOS penetration testing: proxy setup, jailbreak-detection bypass, using Frida and Objection to defeat SSL pinning and biometrics, and finding sensitive data in local stores.
Published
Collected

Related coverage

blog · bishopfox.com
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.
blog · netspi.com
Four Ways to Bypass iOS SSL Verification and Certificate Pinning
Ben Tindell covers four iOS SSL pinning bypass techniques with Burp Suite: installing a custom CA, SSLKillSwitch tooling, runtime hooking with Objection and Frida, and patching the IPA binary.
research · calif.io
Learning to Jailbreak an iPhone with Claude (Part 1)
Claude helped me take apart an iOS Safari exploit, and retune it for my Mac. It even wrote its own variant.
blog · yeswehack.com
Building an Android Bug Bounty lab: the ultimate guide to configuring emulators, real devices, proxies and other mobile hacking tools (featuring Magisk, Burp, Frida)
Guide to building an Android bug bounty lab: choosing emulators vs rooted real devices, and setting up Burp interception, Frida hooking and Magisk/Zygisk to defeat SSL pinning and root checks.
blog · netspi.com
Four Ways to Bypass Android SSL Verification and Certificate Pinning
Covers four Android SSL pinning bypass techniques of rising difficulty: injecting a custom CA, swapping packaged certs, hooking checks with Frida, and reversing custom certificate validation code.
vulnerability · calif.io
[CVE-2025-31207] Taking Apart iOS Apps: Anti-Debugging and Anti-Tampering in the Wild
# Taking Apart iOS Apps: Anti-Debugging and Anti-Tampering in the Wild Five apps, and what each of them does to stop you attaching a debugger. Huy Nguyen March 17, 2026 applereversing Contents 1....
Back