# FRIDA for iOS app penetration testing

## Required Tools

1. **Frida**

   let you inject snippets of JS&#x20;
2. **Objection**

   a runtime mobile exploration toolkit, help you to do the basic security assesment, such as disable cert-pin.

## Preparation

Get your pentest machine with frida and objection

```
pip3 install frida-tools
pip3 install objection
```

## Basic Usage

### Check device connectivity

```
frida-ls-devices
```

### List installed application

```
frida-ps -Uai #List running applications
```

### Attach to a process

Inject objection into the process, it gives you a set of toolkits provided by objection&#x20;

```
objection -g <com.client.xxx> explore
```
