{"id":13468284,"url":"https://github.com/paradiseduo/appdecrypt","last_synced_at":"2025-05-15T04:00:11.965Z","repository":{"id":40200222,"uuid":"390659141","full_name":"paradiseduo/appdecrypt","owner":"paradiseduo","description":"appdecrypt is a tool to make decrypt application encrypted binaries on macOS when SIP-enabled  (macOS 11.3 or below)","archived":false,"fork":false,"pushed_at":"2025-05-07T08:23:26.000Z","size":94,"stargazers_count":823,"open_issues_count":7,"forks_count":109,"subscribers_count":8,"default_branch":"main","last_synced_at":"2025-05-07T09:29:24.302Z","etag":null,"topics":["app","dump","frida-ios-dump","ios","ipa","ipadump","m1","mac","macho","macho-parser","mini"],"latest_commit_sha":null,"homepage":"","language":"Swift","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/paradiseduo.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-07-29T08:44:31.000Z","updated_at":"2025-05-07T08:23:30.000Z","dependencies_parsed_at":"2024-12-13T19:07:11.223Z","dependency_job_id":"8cee245d-f9cf-4490-a240-349f71b55558","html_url":"https://github.com/paradiseduo/appdecrypt","commit_stats":{"total_commits":65,"total_committers":8,"mean_commits":8.125,"dds":0.3384615384615385,"last_synced_commit":"ebdacfa6dc03af154e4fd396fcd22f358fc12a5b"},"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/paradiseduo%2Fappdecrypt","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/paradiseduo%2Fappdecrypt/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/paradiseduo%2Fappdecrypt/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/paradiseduo%2Fappdecrypt/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/paradiseduo","download_url":"https://codeload.github.com/paradiseduo/appdecrypt/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":254270640,"owners_count":22042858,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["app","dump","frida-ios-dump","ios","ipa","ipadump","m1","mac","macho","macho-parser","mini"],"created_at":"2024-07-31T15:01:08.201Z","updated_at":"2025-05-15T04:00:11.854Z","avatar_url":"https://github.com/paradiseduo.png","language":"Swift","readme":"# appdecrypt\nDecrypt application's encrypted binaries on macOS when SIP-enabled (macOS 11.2.3 or below). *Even if it can decrypt all applications, some iOS apps won't be possible to run on the mac, even after decryption.*\n\nThis works well and compiles for iOS nicely, if you want use it at iOS devices, you can use build-ios.sh (Thanks @dlevi309).\n\n## How to use\n\n### On mac with M1 CPU\n\n```bash\n\u003e git clone https://github.com/paradiseduo/appdecrypt.git\n\u003e cd appdecrypt\n\u003e chmod +x build-macOS_arm.sh\n\u003e ./build-macOS_arm.sh\n\u003e ./appdecrypt\nVersion 2.1\n\nappdecrypt is a tool to make decrypt application encrypted binaries on macOS when SIP-enabled.\n\nExamples:\n    mac:\n        appdecrypt /Application/Test.app /Users/admin/Desktop/Test.app\n    iPhone:\n        appdecrypt /var/containers/Bundle/Application/XXXXXX /tmp\n\nUSAGE: appdecrypt encryptMachO_Path decryptMachO_Path\n\nARGUMENTS:\n  \u003cencryptApp_Path\u003e     The encrypt app file path.\n  \u003cdecrypt_Path\u003e        The path output file.\n\nOPTIONS:\n  -h, --help              Show help information.\n  --ignore-ios-check      Decrypt the app even if M1 can't run it.\n```\n\n#### For Example\n\n```bash\n\u003e ./appdecrypt /Applicaiton/Test.app /Users/admin/Desktop/Test.app\nSuccess to copy file.\nDump /Applications/Test.app/Wrapper/Test.app/Test Success\nDump /Applications/Test.app/Wrapper/Test.app/PlugIns/TestNotificationService.appex/TestNotificationService Success\nDump /Applications/Test.app/Wrapper/Test.app/Frameworks/trackerSDK.framework/trackerSDK Success\nDump /Applications/Test.app/Wrapper/Test.app/Frameworks/AgoraRtcKit.framework/AgoraRtcKit Success\n\u003e cd /Users/admin/Desktop/Test.app\n\u003e ls\nWrappedBundle Wrapper\n\u003e cd Wrapper\n\u003e ls\nBundleMetadata.plist Test.app            iTunesMetadata.plist\n```\n\n### On Jailbreak iPhone with arm64 CPU\n\nFirst you should connect jailbreak iPhone with USB.\n```bash\n\u003e brew install ldid\n\u003e git clone https://github.com/paradiseduo/appdecrypt.git\n\u003e cd appdecrypt\n\u003e chmod +x build-iOS.sh\n\u003e ./build-iOS.sh\n\u003e scp -P 2222 appdecrypt root@127.0.0.1:/tmp\n\n// In iPhone shell\n\u003e cd /tmp\n\u003e ./appdecrypt\nVersion 2.1\n\nappdecrypt is a tool to make decrypt application encrypted binaries on macOS when SIP-enabled.\n\nExamples:\n    mac:\n        appdecrypt /Applicaiton/Test.app /Users/admin/Desktop/Test.app\n    iPhone:\n        appdecrypt /var/containers/Bundle/Application/XXXXXX /tmp\n\nUSAGE: appdecrypt encryptMachO_Path decryptMachO_Path\n\nARGUMENTS:\n  \u003cencryptApp_Path\u003e     The encrypt app file path.\n  \u003cdecrypt_Path\u003e        The path output file.\n\nOPTIONS:\n  -h, --help              Show help information.\n```\n\n#### For Example\n```bash\n// In iPhone shell\n\u003e ./appdecrypt /var/containers/Bundle/Application/5B5D4E97-E760-4AC5-BFEE-F0FF72EBB19E /tmp\nSuccess to copy file.\nDump /var/containers/Bundle/Application/5B5D4E97-E760-4AC5-BFEE-F0FF72EBB19E/KingsRaid.app/KingsRaid Success\nDump /var/containers/Bundle/Application/5B5D4E97-E760-4AC5-BFEE-F0FF72EBB19E/KingsRaid.app/Frameworks/FBSDKGamingServicesKit.framework/FBSDKGamingServicesKit Success\nDump /var/containers/Bundle/Application/5B5D4E97-E760-4AC5-BFEE-F0FF72EBB19E/KingsRaid.app/Frameworks/FBLPromises.framework/FBLPromises Success\nDump /var/containers/Bundle/Application/5B5D4E97-E760-4AC5-BFEE-F0FF72EBB19E/KingsRaid.app/Frameworks/FBSDKShareKit.framework/FBSDKShareKit Success\nDump /var/containers/Bundle/Application/5B5D4E97-E760-4AC5-BFEE-F0FF72EBB19E/KingsRaid.app/Frameworks/GoogleUtilities.framework/GoogleUtilities Success\nDump /var/containers/Bundle/Application/5B5D4E97-E760-4AC5-BFEE-F0FF72EBB19E/KingsRaid.app/Frameworks/FBSDKLoginKit.framework/FBSDKLoginKit Success\nDump /var/containers/Bundle/Application/5B5D4E97-E760-4AC5-BFEE-F0FF72EBB19E/KingsRaid.app/Frameworks/nanopb.framework/nanopb Success\nDump /var/containers/Bundle/Application/5B5D4E97-E760-4AC5-BFEE-F0FF72EBB19E/KingsRaid.app/Frameworks/FBSDKCoreKit.framework/FBSDKCoreKit Success\nDump /var/containers/Bundle/Application/5B5D4E97-E760-4AC5-BFEE-F0FF72EBB19E/KingsRaid.app/Frameworks/Protobuf.framework/Protobuf Success\n\u003e cd Payload\n\u003e ls\nBundleMetadata.plist  KingsRaid.app/  iTunesMetadata.plist\n\u003e tar -cvf /tmp/dump.tar ./\n\n\n// In mac shell\n\u003e cd ~/Desktop\n\u003e scp -P 2222 root@127.0.0.1:/tmp/dump.tar .\ndump.tar\n```\n\n## Principle\nThis was discovered independently when analyzing kernel sources, but it appears that the technique was first introduced on iOS : \n\nhttps://github.com/JohnCoates/flexdecrypt\n\nbut now works on macOS:\n\nhttps://github.com/meme/apple-tools/tree/master/foulplay\n\n\n## LICENSE\n\nThis software is released under the GPL-3.0 license.\n\n\n## Stargazers over time\n\n[![Stargazers over time](https://starchart.cc/paradiseduo/appdecrypt.svg)](https://starchart.cc/paradiseduo/appdecrypt)\n\n","funding_links":[],"categories":["Swift"],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fparadiseduo%2Fappdecrypt","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fparadiseduo%2Fappdecrypt","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fparadiseduo%2Fappdecrypt/lists"}