Individual skill
ios-pentest
iOS mobile application penetration testing with Frida and Objection on jailbroken or non-jailbroken devices. Use for static + dynamic analysis of IPAs, SSL pinning / jailbreak / biometric bypass, keychain & local-storage extraction, network interception, and OWASP MASTG iOS assessments. Triggers on requests to pentest iOS apps, analyze IPAs, bypass iOS security controls, or produce MASTG-aligned findings.
skills/ios-pentest/SKILL.md
Source commit a1a68f7010a9c97b22336dcbcfde539c492a7109
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Not checked yet
- Last checked
- Nov 5, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 108
- Repository last updated
- Apr 19, 2026
- License
- Not available
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- security Derived category
- testing Derived category
- security-application Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 9,736 bytesSKILL.mdcore · 9,736 byteschecklists/owasp_mastg_ios.mddoc · 6,887 bytesexamples/initial_setup.mddoc · 630 bytesexamples/keychain_dump.mddoc · 767 bytesexamples/ssl_bypass_run.mddoc · 649 bytesmethodology/auth_testing.mddoc · 1,626 bytesmethodology/crypto_testing.mddoc · 1,379 bytesmethodology/data_storage.mddoc · 2,389 bytesmethodology/dynamic_analysis.mddoc · 1,401 bytesmethodology/network_testing.mddoc · 1,700 bytesmethodology/recon.mddoc · 1,199 bytesmethodology/static_analysis.mddoc · 1,522 bytespayloads/jailbreak_detection_paths.txtdoc · 929 bytespayloads/url_scheme_tests.txtdoc · 3,670 bytesreferences/bounty_patterns_2024_2026.mddoc · 7,152 bytesreferences/frida_ios_snippets.mddoc · 6,953 bytesreferences/ios_vulns.mddoc · 2,403 bytesreferences/troubleshooting.mddoc · 1,679 bytesschemas/finding.jsonasset · 2,153 bytesscripts/biometric_bypass.jsruns · 4,017 bytesscripts/crypto_hooks.jsruns · 8,889 bytesscripts/jailbreak_bypass.jsruns · 8,650 bytesscripts/keychain_hooks.jsruns · 7,152 bytesscripts/method_tracer.jsruns · 7,010 bytesscripts/ssl_pinning_bypass.jsruns · 6,055 bytestemplates/finding_report.mddoc · 1,143 bytesworkflows/auth_testing.mddoc · 1,783 bytesworkflows/complete_assessment.mddoc · 2,198 bytesworkflows/ipa_decryption.mddoc · 1,428 bytesworkflows/jailbreak_detection_bypass.mddoc · 1,668 bytesworkflows/keychain_extraction.mddoc · 1,845 bytesworkflows/ssl_pinning_bypass.mddoc · 1,696 bytes
No licensed excerpt is available. You can inspect the pinned source.