Awesome iOS Security

A curated list of awesome iOS application security resources.

A collection of awesome tools, books, courses, blog posts, and cool stuff about iOS Application Security and Penetration Testing.

---

Contents

• Tools
  • Reverse Engineering Tools
  • Static Analysis Tools
  • Dynamic Analysis Tools
• Tweaks
  • Reverse Engineering Tweaks
  • Jailbrek Detection Bypass Tweaks
  • SSL Pinning Bypass Tweaks
• Frida Scripts
• Courses
• Books
• Sessions & Workshops
• Articles & Tutorials
  • Penetration Testing Articles
  • Reverse Engineering Articles
  • Jailbrek Detection Bypass Articles
  • SSL Pinning Bypass Articles
• Checklists & Cheatsheets
• Labs
• CTF
• Writeups
• Misc

Tools

Reverse Engineering Tools

• Hopper - A reverse engineering tool that will assist you in your static analysis of executable files.
• Ghidra - A software reverse engineering (SRE) framework created and maintained by the National Security Agency Research Directorate.
• Radare2 - UNIX-like reverse engineering framework and command-line toolset.
• Cutter - Free and Open Source Reverse Engineering Platform powered by rizin.
• frida-ios-dump - A tool to pull a decrypted IPA from a jailbroken device.
• bagbak - Yet another frida based App decryptor. Requires jailbroken iOS device and frida.re.
• flexdecrypt - An iOS App & Mach-O binary decryptor.
• bfdecrypt - Utility to decrypt App Store apps on jailbroken iOS 11.x.
• bfinject - Easy dylib injection for jailbroken 64-bit iOS 11.0 - 11.1.2. Compatible with Electra and LiberiOS jailbreaks.
• r2flutch - Yet another tool to decrypt iOS apps using r2frida.
• Clutch - A high-speed iOS decryption tool.
• dsdump - An improved nm + objc/swift class-dump tool.
• class-dump - A command-line utility for examining the Objective-C segment of Mach-O files.
• SwiftDump - A command-line tool for retriving the Swift Object info from Mach-O file.
• jtool - An app inspector, disassembler, and signing utility for the macOS, iOS.
• Sideloadly - An app to sideload your favorite games and apps to Jailbroken & Non-Jailbroken iOS devices.
• Cydia Impactor - A GUI tool for sideloading iOS application.
• AltStore - Allows to sideload other apps (.ipa files) onto iOS device.
• iOS App Signer - An app for macOS that can (re)sign apps and bundle them into ipa files that are ready to be installed on an iOS device.

Static Analysis Tools

• iLEAPP - An iOS Logs, Events, And Plist Parser.
• Keychain Dumper - A tool to check which keychain items are available to an attacker once an iOS device has been jailbroken.
• BinaryCookieReader - A tool to read the binarycookie format of Cookies on iOS applications.
• PList Viewer - Gtk application to view property list files.
• XMachOViewer - A Mach-O viewer for Windows, Linux and macOS.
• MachO-Explorer - A graphical Mach-O viewer for macOS. Powered by Mach-O Kit.
• iFunbox - A general file management software for iPhone and other Apple products.
• 3uTools - An All-in-One management software for iOS devices.
• iTools - An All-in-One solution for iOS devices management.