performing-ios-app-security-assessment
Conducts thorough iOS app security assessments using Frida and Objection for dynamic analysis and SSL pinning bypass.
Install this skill
Security score
The performing-ios-app-security-assessment skill was audited on Jun 12, 2026 and we found 17 security issues across 2 threat categories, including 7 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Access to system keychain/keyring
| 5 | for traffic interception, keychain extraction for credential analysis, and IPA static |
Access to system keychain/keyring
| 22 | - keychain |
Access to system keychain/keyring
| 51 | - Extracting and auditing iOS Keychain contents for insecure credential storage practices |
Access to system keychain/keyring
| 134 | ### Step 4: Keychain Extraction and Credential Analysis |
Access to system keychain/keyring
| 137 | # Dump all accessible keychain items via Objection |
Access to system keychain/keyring
| 138 | ios keychain dump |
Access to system keychain/keyring
| 140 | # Dump keychain with raw data output |
Access to system keychain/keyring
| 141 | ios keychain dump --json |
Access to system keychain/keyring
| 143 | # Check keychain item accessibility attributes |
Access to system keychain/keyring
| 148 | ios keychain dump | grep -i "password\|token\|secret\|oauth" |
Access to system keychain/keyring
| 232 | | **Objection** | Runtime mobile exploration toolkit built on Frida providing pre-built commands for common security tests including keychain dump, SSL pinning bypass, and method hooking | |
Access to system keychain/keyring
| 234 | | **Keychain** | iOS secure storage API for credentials and tokens; items have accessibility attributes that control when they can be read (e.g., only when device is unlocked) | |
Access to system keychain/keyring
| 253 | - **Keychain scope limitation**: Objection can only access keychain items within the app's keychain access group. System-wide keychain items require jailbreak-level tools like keychain-dumper. |
Access to system keychain/keyring
| 262 | ## Finding: Insecure Keychain Storage with kSecAttrAccessibleAlways |
Access to system keychain/keyring
| 270 | The application stores OAuth refresh tokens in the iOS Keychain with |
Access to system keychain/keyring
| 277 | 2. Execute: ios keychain dump |
External URL reference
| 127 | # Install Burp CA certificate on device via http://<burp_ip>:8080/cert |