Static analysis is the examination of an iOS application's IPA, binary, resources, and metadata without executing the app. It is almost always the first phase of an iOS penetration test, because it is ...
The iOS app is simply the client used to discover these issues — by proxying its traffic, reading its API calls out of the decompiled binary, and replaying/modifying requests with tools like Burp ...