The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill guides the agent to install standard security tools from public registries and official sources.
Commands include pip install frida-tools, pip install objection, brew install class-dump, brew install ideviceinstaller, and brew install ios-deploy.
References the installation of frida-server on jailbroken devices and downloading CA certificates via http://burp.
[COMMAND_EXECUTION]: The skill provides a comprehensive set of command-line instructions for analyzing iOS applications and device environments.
Binary analysis is performed using otool, jtool2, and class-dump to inspect Mach-O headers, check for PIE/ARC/Stack Canaries, and extract class definitions.
File system and data auditing involves using find, cat, grep, unzip, and sqlite3 to locate and inspect sensitive files like Plists, Keychain data, and databases.
Network traffic analysis is facilitated by configuring system proxies and using tcpdump.
[DYNAMIC_EXECUTION]: The methodology utilizes dynamic instrumentation to inspect and modify application behavior at runtime.
Employs frida to inject custom JavaScript logic into running iOS processes for hooking Objective-C methods.
Provides code examples for bypassing security controls such as SSL pinning, jailbreak detection, and biometric authentication (FaceID/TouchID).
Uses objection for automated runtime exploration, including dumping Keychain items and monitoring encrypted communications.

ios-pentesting