Skill UI

This expert playbook details advanced techniques for bypassing SSL pinning mechanisms (Certificate, Public Key, SPKI) on mobile applications running on Android and iOS. It provides practical methods using tools like Frida and Objection, covering various frameworks (Flutter, React Native, Xamarin) and multiple pinning types to enable the interception and analysis of encrypted HTTPS traffic.

A comprehensive skill for detecting and analyzing malicious behavior in mobile applications (Android/iOS). It employs multi-layered security analysis, including static indicator checking (permissions, manifest), dynamic instrumentation (Frida), network traffic monitoring, and automated scanning (MobSF). Use this skill when investigating suspicious apps for data exfiltration, C2 communication, or unauthorized access.

This comprehensive guide details the methodology for reverse engineering macOS and Mach-O binaries. It covers analyzing application bundles, deciphering Objective-C/Swift symbols, examining code signing and hardened runtime features, and performing both static (using tools like Ghidra, IDA) and dynamic analysis (using lldb, Frida) to aid in malware analysis and platform security research.