Skip to content

Decrypt iOS Apps and Mach-O binaries

Notifications You must be signed in to change notification settings

vocaeq/flexdecrypt

 
 

Repository files navigation

iOS App & Mach-O binary decryption

This is a decryption tool for research purposes. It uses mremap_encrypted to decrypt a file from disk.

Installation

  1. Download the .deb package from the the latest release.
  2. Transfer it to your device.
  3. Use Filza to install it via UI, or use the command line: dpkg -i flexdecrypt.deb

If you're on iOS 12.1 or lower, use dpkg directly, and receive an error, you may need to resolve dependencies with: apt-get -f -y --allow-unauthenticated install

Latest release also includes the flexdecrypt binary in case you want to install it yourself.

Build from source

Open the project file with Xcode.
Use the Debug scheme to run directly on your device from Xcode, with debugger support.
Configure the run arguments with Xcode's scheme editor.
Make sure you have AppSync installed so the app installs despite the custom entitlements.

Information

Further reading at https://www.linkedin.com/pulse/decrypting-apps-ios-john-coates/

Contact: john@johncoates.dev

About

Decrypt iOS Apps and Mach-O binaries

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Swift 81.2%
  • Objective-C 13.2%
  • Objective-C++ 3.4%
  • Shell 2.2%