sensepost / objection

📱 objection - runtime mobile exploration
GNU General Public License v3.0
7.46k stars 854 forks source link

Patching IPA Not Working for my iPhone #422

Closed diptilenka closed 3 years ago

diptilenka commented 3 years ago

Describe the bug 1-->Downloadedthe ipa file from appstore uploaded app. 2-->Tryig to follow the process using the patching of ipa as mentioned

To Reproduce Steps to reproduce the behavior:

  1. Run command '...'

objection patchipa --source /Users/xxxx/Documents/AAAA/whatsapp/xxxx.ipa --codesign-signature 53E8C2D187Axxxxxxxxx

  1. Run command '...'

Similar issues Please link the issues in this repository that is similar to yours.

For example: #358, #229 etc.

Codesigning patched IPA... Error: This IPA is encrypted at Applesign.signAppDirectory (/usr/local/lib/node_modules/applesign/index.js:137:15) at Applesign.signIPA (/usr/local/lib/node_modules/applesign/index.js:100:18) at processTicksAndRejections (internal/process/task_queues.js:97:5) at async main (/usr/local/lib/node_modules/applesign/bin/applesign.js:55:7)

Expected behavior A clear and concise description of what you expected to happen.

Evidence / Logs / Screenshots Any output from objection, such as stack traces or errors that occurred. Be sure to run objection with the --debug flag so that errors from the agent are verbose enough to debug. For example:

objection --debug explore

Environment (please complete the following information):

Application If possible, please attach the target application where you can reproduce this bug to the issue.

Additional context Add any other context about the problem here.

leonjza commented 3 years ago

Error: This IPA is encrypted

It is not possible to patch encrypted IPA's.

diptilenka commented 3 years ago

@leonjza so we can not patch encrypted iPA's. but any other way if we have. Like for android we can pactched which was downloaded from play store. So only ioS has the. solution for jail breaking as solution?

leonjza commented 3 years ago

The only way is to strip DRM using a jailbroken device and something like bfinject first.