ios_secrets_scanner
Scans iOS IPA files for hardcoded secrets and API keys by analyzing text resources and binary strings.
Instructions
Scans an IPA for hardcoded secrets and API keys. Layer 1: scans text resource files (JSON, XML, .strings, XML plists) inside the IPA. Layer 2: extracts the app binary and runs the strings command to find constants in compiled code.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ipa_path | Yes | Absolute path to the IPA file | |
| min_length | No | Minimum string length for binary extraction (default 8) |