Динамический анализ безопасности iOS-приложений с Objection

★ 8.4 · security

analyzing-ios-app-security-with-objection is a Claude Code skill that conducts runtime security testing of iOS applications using Objection and Frida during authorized mobile penetration assessments. The skill walks through seven structured steps: setting up the environment for both jailbroken and non-jailbroken devices (including IPA repackaging via `objection patchipa`), attaching to a target app by bundle ID, dumping keychain and filesystem data, disabling SSL pinning and jailbreak detection, hooking Objective-C and Swift methods to inspect arguments and return values, and searching process memory for secrets such as API keys or Bearer tokens. Commands like `ios keychain dump`, `ios sslpinning disable`, `memory search`, and `ios hooking watch method` cover the full MASVS assessment surface. The skill is aimed at mobile security engineers who need to evaluate client-side protections without access to source code.