Tutorvo
Menu
Courses Guides Pricing Log in Sign up
Cybersecurity Intermediate

iOS Application Security

Test your own iOS apps the OWASP MASTG way: Keychain and storage, TLS pinning, jailbreak detection, URL schemes and the mobile API. Authorized testing only.

11 lessons 1.1 h Certificate

  • One-time payment
  • 14-day money-back guarantee
  • Secure checkout with Stripe

About this course

If you build or own an iOS app, this course shows how to check its security the way professional testers do, aligned with the OWASP mobile testing guide. You begin by understanding FairPlay encryption and how a decrypted binary is pulled from memory, then read the Mach-O structure and its Info.plist for misconfigurations. With Frida and objection you observe the app at runtime, dump Keychain items, and find tokens stored insecurely in plists or NSUserDefaults. You proxy and inspect API calls by unpinning TLS on your own test build, look at jailbreak and anti-hook detection, examine URL schemes and background snapshot leaks, and finish on server-side authorization flaws like BOLA and IDOR. All practice uses your own app, the Simulator, or public learning apps, strictly for authorized testing. Quizzes and a final exam earn the Tutorvo certificate.

Curriculum

Course content

11 lessons · 1.1 h · final exam

  1. iOS App Security — Getting StartedReading6 min
    Unlocked when you buy the course
  2. Tooling & Getting the App BinaryReading6 min
    Unlocked when you buy the course
  3. Keychain & Insecure StorageReading6 min
    Unlocked when you buy the course
  4. Runtime Hooking & Jailbreak DetectionReading6 min
    Unlocked when you buy the course
  5. Traffic Interception & TLS PinningReading6 min
    Unlocked when you buy the course
  6. Static Analysis & the Mach-O BinaryReading6 min
    Unlocked when you buy the course
  7. Anti-Frida & Anti-Hook ChecksReading6 min
    Unlocked when you buy the course
  8. URL Schemes, Universal Links & IPCReading6 min
    Unlocked when you buy the course
  9. Side-Channel Data LeakageReading6 min
    Unlocked when you buy the course
  10. The Mobile Backend — IDOR, BOLA & TokensReading6 min
    Unlocked when you buy the course
  11. Final Exam — Assess an iOS AppReading6 min
    Unlocked when you buy the course
  12. Final exam8 questions, 70% to pass, unlimited retries.

Certificate

Finish with a certificate you can verify

Complete every lesson and pass the final exam to receive a certificate of completion for this course, with a unique credential ID and a public verification page.

  • Names the course, your score and the date of issue
  • A verification link for your CV or LinkedIn profile
  • 8 questions, 70% to pass, unlimited retries.

A Tutorvo certificate confirms that you completed a course. It is not an official or professional qualification.

Illustration. Your certificate shows your own name, course and credential ID.

Before you buy

Questions about this course

Is this a subscription?

No. You pay $9.99 once for this course. There is no subscription and nothing renews automatically. Prices are in US dollars; taxes may be added where required.

What exactly do I get?

All lessons and labs of this course, the final exam and the certificate, including later updates to the course, for as long as Tutorvo offers it. Access is personal and tied to your account.

Can I get a refund?

Yes. If you are not satisfied, email hello@tutorvo.com within 14 days of buying and we refund the course in full via Stripe. The guarantee does not apply once a certificate for the course has been issued to you, or where there are signs of abuse.

When can I start?

Right after payment. Access starts immediately at your request; for consumers in the EU/EEA the statutory right of withdrawal therefore ends once access has begun, while our 14-day money-back guarantee applies regardless.

Do I need Excel or other software?

No. The labs run in a spreadsheet inside your browser on a laptop, tablet or phone. Function names and syntax follow Excel.

Is the certificate an official qualification?

No. It confirms that you completed all lessons of the course and passed its final exam. It is not an official, state-recognised or professional qualification. The name is taken from your profile when the certificate is issued.

Full details are in our Terms · hello@tutorvo.com

Browse all Cybersecurity courses →
$9.99one-time payment
Buy course