FRIDA for iOS app penetration testing

This page is going to document all my FRIDA hooking journey against iOS application

Required Tools

1. Frida

   let you inject snippets of JS

2. Objection

   a runtime mobile exploration toolkit, help you to do the basic security assesment, such as disable cert-pin.

Preparation

Get your pentest machine with frida and objection

pip3 install frida-tools
pip3 install objection

Basic Usage

Check device connectivity

frida-ls-devices

List installed application

frida-ps -Uai #List running applications

Attach to a process

Inject objection into the process, it gives you a set of toolkits provided by objection

objection -g <com.client.xxx> explore