Skip to content

Instantly share code, notes, and snippets.

@MacKentoch

MacKentoch/decompile-IPA.md

Last active March 8, 2024 14:39
Show Gist options
  • Save MacKentoch/98d5d1da017874f85c1fd9be565478f5 to your computer and use it in GitHub Desktop.
Save MacKentoch/98d5d1da017874f85c1fd9be565478f5 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
decompile-IPA.md

🔎Analyse assets

Generate an IPA with xcode (archiving -> adhoc -> in adhoc options "App Thinning" set to "None", see explantions).

NOTE: If you want to reverse and study 3rd party application, you need a jailbroken device to extract IPA.

NOTE: you can for example change assets and rename back from zip to ipa.

Prepare

  • rename APP_TO_STUDY.ipa to APP_TO_STUDY.zip
  • unzip (you should see a payload new directory as a result)
  • you have now APP_TO_STUDY.app in the payload directory.

Study assets

  • in Finder, right click on APP_TO_STUDY.app then select view all content
  • you have now access to assets, plists, storyboards etc...

Disassemble code (Hopper or any other disassembler)

  • open APP_TO_STUDY.app in Hopper (should be automatic, but be sure to open with loader Mach-O AArch64)
  • in search input, type for example: appDelegate to see related ARM code related to appDelegate in the application.
@trminhphu79
Copy link

Let me try

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment