ios-pentesting

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The document is a high-risk, dual‑use offensive iOS pentest guide that includes explicit techniques for credential theft and data exfiltration (Keychain / NSUserDefaults / cookies / memory dumps), active bypasses (SSL pinning, biometric and jailbreak checks), and app tampering (Frida gadget injection / patching & re-signing) which can be repurposed as backdoors or supply‑chain attacks.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The guide instructs adding the Cydia Frida repo (https://build.frida.re) and downloading/installing frida-server from GitHub Releases (frida-server-xx.x.x-ios-arm64.deb → dpkg -i), which are runtime steps that fetch and execute remote binaries required for the dynamic-analysis workflow.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.95). The skill explicitly instructs jailbreaking devices, gaining root access (ssh root@...), dumping Keychain, and using Frida/objection to disable SSL pinning, jailbreak/anti‑debug and biometric protections—actions that modify and weaken the target machine/device state and bypass security mechanisms.