
Pulls decrypted iOS app binaries from jailbroken devices so you can reverse engineer them properly. You'd reach for this when you need to analyze an iOS app's actual implementation, whether for security research, vulnerability hunting, or understanding proprietary APIs. The repo has 1.2K stars and 246 installs, so it's seeing real use in the reverse engineering community. No documentation in the skill itself though, which is pretty typical for tooling aimed at people who already know what dumping an IPA means. Saves you from manually SSHing into a device and fumbling with frida-ios-dump commands.
$ npx -y skills add p4nda0s/reverse-skills --skill rev-ios-dump --agent claude-codeInstalls into .claude/skills of the current project.
Dump decrypted iOS application binaries from jailbroken devices for security analysis and reverse engineering.
iOS apps distributed via the App Store are encrypted with Apple's FairPlay DRM. To perform static analysis (IDA/Ghidra/Hopper), the binary must first be decrypted at runtime — commonly called "砸壳" (dumping the shell). This skill uses Frida to instrument the running process and dump the decrypted Mach-O from memory.
| Requirement | Details |
|---|---|
| Jailbroken iOS device | With SSH access enabled |
| frida-server | Installed and running on the device |
| Python 3 | On the host machine |
| frida + frida-tools | pip3 install frida frida-tools |
| USB or network access | SSH connection to the device |
# Check frida-server on device via SSH
ssh mobile@<device_ip> "ps aux | grep frida-server"
# If not running, start it
ssh mobile@<device_ip> "/usr/sbin/frida-server -D &"
# Verify from host
frida-ls-devices
frida-ps -H <device_ip>
Repo: https://github.com/P4nda0s/frida-ios-dump
Sponsors