> For the complete documentation index, see [llms.txt](https://riteshs4hu.gitbook.io/infosec-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://riteshs4hu.gitbook.io/infosec-notes/ios-appsec/checklist.md).

# CheckList

* Insufficient Runtime Debugging Protections
* Lack of Jailbreak Detection
* Lack of SSL Pinning in iOS Application
* SSL Pinning Bypass

#### Static Analysis

* Insecure Transport Layer
* unsafe random functions \_random
* Use of the malloc Function
* Binary may contain the [insecure apis](https://github.com/facebook/react-native/issues/25414)
* weak HASH APIs \[CC\_SHA1, CC\_MD5]