How do you audit an app?

In theory, there are several ways to audit an iOS application without the source code

Reverse engineering

Tools such as Hopper, IDA Pro, and otool can be used to disassemble the app’s binary code and examine the app’s functionality and behavior.

Dynamic analysis

By running the application on a jailbroken device and using tools like Cycript, Frida, and Cydia Substrate, the application’s behavior can be examined at runtime.

Network traffic analysis

Analyzing the network traffic generated by the app can reveal information about how the app communicates with servers, as well as any sensitive data that may be transmitted.

Third-party library analysis

An application may contain third-party libraries that can be analyzed to identify any vulnerabilities or malicious functionality.

File system analysis

An application may store files in the device’s file system, which can be analyzed to identify sensitive data or other information that may be of interest.

It’s important to note that even without access to the source code, it’s difficult to fully understand the application and the risks it may pose. An application’s source code is the foundation for understanding how an application works, the potential risks it may pose, and ensuring compliance with security standards.

🤜 AppScan combines multipe approach to audit an iOS app without the source code

Automate the ipa retrieval

An App can be complicated to get in the .ipa format. We have developed tools to simplify this.

Partial Reverse engineering

We use the binary version on the AppStore, we are able to scan all files and the binary structure, and we have developed a set of rules to check.

Third-party library analysis

We have a database of 100,000 libraries used in iOS projects, we have developed some rules to recommend you the right choices.

Genereate a report

An audit summary is generated specifically for you, your application, and the exact version requested.

AppScan has developped a methodology to analyze any App and get some insights without source code.

Discover AppScan offers