📄️ Configure an Intercept Proxy
You will need to configure your device to use an intercept proxy such as Burp Suite.
📄️ Web Application Backend Testing
Using the information collected so far, you should have a pretty good idea of what kind of environment the backend web server is running, and the URL's that are used to access it. A full web application penetration test should be performed against the backend environment.
📄️ Using FLEXible to Record HTTP Communications
FLEXible is a tweak that can easily enable/disable the debugging tool FLEX in any application. The FLipboard EXplorer (FLEX) is a suite of in-app debugging and exploration tools for iOS that allows for the tester to view and interact with many aspects of the running application. One of its main advantages are the ability to record HTTP requests and responses.