I got task today to do security testing of an iOS app. I have read many articles and answers on google search and in this site. But still, none provide exact tricks for security testing of an iOS app.

Can anyone help? I would like to know the following :

1 - How to check sql injection in an iOS app.

2 - How to check XSS in an iOS app.

3 - How can I make sure that data transfer between user and database is safe.


You'll find OWASP to be a great resource for security/penetration testing. Start here for iOS.


There is now also the OWASP Mobile Security Testing Guide (MSTG), an essential reference for security testing of mobile apps, including iOS and android apps.

The MSTG is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the controls listed in the OWASP Mobile Application Verification Standard (MASVS). You can also read the MSTG on Gitbook or download it as an e-book

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.