github.com/londek/ipadecrypt

Highlights

Small release fixing bug on devices with PAC. Enjoy :)

Changelog

• 0a0bf0d: fix: make the inject sentinel a canonical pointer (#42) (@troublediosuser)
• e64bad7: fix: update star history chart to working endpoint (#41) (@FaintFlower)

Highlights

Minor release bringing support for purchased paid apps and longer timeout for dlopen to handle more edgecases.

Changelog

• 0d34f0b: Fix: increase dlopen timeout to 15 seconds (#39) (@efibalogh)
• c265b89: feat: add --owned flag (#38) (@0xdbug)
• 567de70: feat: remove --owned flag (@londek)

Highlights

A very minor release addressing one of complaints. Enjoy ;)

Changelog

• 755aba1: feat: do not delete decrypted ipa if decryption fails (@londek)

Highlights

A small hotfix by @efibalogh patching Apple's changes to auth endpoint.

Changelog

• f2bb3dc: Support dynamic App Store auth endpoint discovery (#29) (@efibalogh)

Highlights

Small patch release addressing Apple's latest rate limits with 429 and implementing new --storefront flag, which allows you to query specific storefront without rebootstraping.
Enjoy!

Changelog

• 3b681c7: feat: add --storefront flag (@londek)
• b947fee: fix: be verbose about rate limit (@londek)

Highlights

A huge release

• dyld patching - helper now patches target's dyld at runtime in order to fix several linking issues caused by missing libs.
• File streaming - we don't package stuff into ipa removing one of the main bottlenecks
• Minimal data transfer - we don't transfer entire app to the host, only the decrypted binaries
• Above and few more result in huge speed uplift. Few examples being 55s -> 19s, 13m -> 9m50s
• No more zip dependency - you don't have to install zip package now!
• Decrypted ipas preserve original values - thanks to @NohamR
• Graceful cleanup on CTRL+C - yet another way to limit bloat
• Auto-uninstall after decryption - it's triggered by default on install paths so we leave device in original state, without the decrypted app
• Stronger verify and --extra-verify - even more checks to ensure binaries are truly decrypted and valid
• New flags: --skip-appex, --force-uninstall/--no-uninstall, -v/--verbose, --redact
• ipadecrypt versions now shows minimum OS version for the given app
• Helper is rewritten from single file into actual module with structure
• Releases are now built automatically by Github workflow ensuring no tampering in binaries, should've done that way earlier
• Bundle ID matching is now case insensitive
• App directory detection no longer relies on app name so Apple Home and Google Home are distinguished correctly
• Arbitrary arm64e fixes
• And even more features!

Huge thanks for testers

@b1atant @vagvalas @MoritzHinterleitner

Changelog

• 5a0d067: Restore MinimumOSVersion in decrypted IPAs (#21) (@NohamR)
• 07359b5: ci: automate release tags (@londek)
• 7bb6c52: feat: --skip-appex, --force/no-uninstall (@londek)
• cd9d2a1: feat: add --redact flag (@londek)
• f7f8557: feat: add more extra verify checks (@londek)
• 4bed07d: feat: best-effort jailbreak detection (@londek)
• f59830f: feat: ensure we cleanup on interrupt (@londek)
• 8f873ac: feat: expose min os version in versions tool (@londek)
• cbbeb8c: feat: helper rewrite (@londek)
• f992643: feat: log ipadecrypt version in decrypt prologue (@londek)
• 6bec625: feat: log model in decrypt prologue (@londek)
• 47e2d7c: feat: remove zip dependency (@londek)
• 52ec106: feat: restore Info.plist values (@londek)
• 19ab634: feat: robust cross-OS decrypt across jailbreaks (@londek)
• 76fd286: feat: stream decrypted Mach-Os over stdout, assemble IPA on host, uninstall when done (@londek)
• 3b410a4: fix: do not rely on app name to detect app dir (@londek)
• d514ac9: fix: ensure we delete itunesmetadata (@londek)
• 4574b5c: fix: ignore cryptid=0 in extra-verify (@londek)
• 9d5ed27: fix: make bundle id matching case insensitive (@londek)
• 185086d: refactor: clean up log messages (@londek)
• cd8ecbb: refactor: remove dead restore code (@londek)
• c4b5611: refactor: remove useless message (@londek)
• 8a65a9e: refactor: separate macho into internal/macho (@londek)
• bce7618: refactor: simplify config (@londek)
• 6b71426: refactor: tighten device shell quoting + small cleanups (@londek)
• 8e5aa88: refactor: touchups (@londek)
• dd88ec7: refactor: unify verify into single pass (@londek)
• b630ae1: refactor: update warning message (@londek)
• a192cce: style: fix lint (@londek)
• 16c4c96: style: fix lint (@londek)
• 2519124: style: small style polishes (@londek)

Highlights

This release brings new mechanisms for decrypting ipas and speed improvements.

• Pre-upload patching uses raw zip stream copy, skipping a decompress/recompress cycle
• Install lookup replaces a per-file shell loop with a single grep across all top-level Info.plists
• New --use-installed flag picks the installed build directly without an App Store roundtrip - works in non-TTY environments
• New --extra-verify flag byte-compares every output Mach-O against the source outside the encrypted region, catching decrypt corruption that the cryptid==0 check can't see
• --force renamed to --from-appstore, which actually describes what it does
• Fixed frameworks where the helper picked a busy thread mid-syscall instead of an idle one

Changelog

• 8780ff8: feat: decrypt arbitrary cryptid=1 Mach-Os via target-context mremap_encrypted (@londek)
• a8dcdcd: feat: implement extra-verify flag (@londek)
• 4c865ef: feat: improve transfer speeds (@londek)
• a702b5e: feat: speed up helper launch (@londek)
• 6304a0f: feat: speed up packaging ipa (@londek)
• 94a3294: feat: speed up pre-upload pipeline (@londek)
• 9b728d4: fix: fix false cryptid=0 in some cases (@londek)
• 8a50767: fix: patch flow for non-tty (@londek)
• 1463f59: refactor: rename --force to --from-appstore (@londek)

Highlights

This update is not that important feature-wise, however I've implemented few QOL improvements.

• There is now an update checker builtin

• All code pushed to ipadecrypt now has golangci-lint powered linting

Changelog

• 7db45e7: ci: add lint check workflow (@londek)
• 4a486ee: feat: implement update checking (@londek)

Highlights

Minor release

• Removed posix_spawn path as SBSLaunch is a superset of it - it also calls posix_spawn eventually just through launchd.
• Improved text blinking under Windows Terminal.

Changelog

• c83ca18: feat: remove posix_spawn path and simplify (@londek)
• dd11433: fix: improve terminal blinking under windows (@londek)