It is also possible to set up monitoring tools for iOS, even though it may require some non-standard approaches. Luckily, there are multiple existing tools that make this possible:
- Cydia substrate: Formerly called MobileSubstrate, this is a framework for developing runtime patches for system functions on iOS.
- Theos: A suite of development tools for iOS. One of these utilities is logify, which can be used to generate files that allow us to hook class methods.
- Cycrypt: A set of tools that enable engineers to modify the functionality of the running app through injections of the required logic.
- Frida: Provides multiple useful features to affect the execution flow through JavaScript injections or to monitor it, for example, through method tracing using frida-trace.
- objection: A runtime exploration toolset based on Frida, it provides a solution to many real-world situations that engineers may face when analyzing iOS samples, such as bypassing SSL pinning.
- fsmon...
