vincentcox / StaCoAn

StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
MIT License
828 stars 131 forks source link

[ERROR] .ipa files not implemented yet. #53

Closed slowmistio closed 6 years ago

slowmistio commented 6 years ago

[INFO] Decompiling app... [ERROR] .ipa files not implemented yet.

im used window

vincentcox commented 6 years ago

It's correct that IPA files are not implemented yet.

I broke my head multiple times thinking on a cross-platform solution to decompile IPA files. Unfortunately, all 64bit apps (which are the big majority of the applications) are encrypted and must be decrypted in runtime (on a running jailbroken device).

It is possible to just unzip the IPA file and go trough the resources, but 90% of the findings will not be found because the actual code can't be scanned.

If someone from the community knows a cross-platform way to face this issue, please let me know!

I will add the tag "help wanted" so we can keep this issue open.

slowmistio commented 6 years ago

oh thanks