HackerReposA FIELD GUIDE TO OPEN SOURCE
ProSponsor the shelf♧ 0
← Back to top all-time
stefanesser
dumpdecrypted
C2013–2016
stefanesser / dumpdecrypted

dumpdecrypted

Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.

2Distinct people
3Mentions
0Explicit recommenders
3KGitHub stars
REPOSITORY AT A GLANCE

What to know before exploring

What it is

Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.

GitHub

Where it is used

No documented product use has been verified yet.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 1:49:46 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by year3 dated mentions

Observed mentions: 2013-01-02 07:06:17 UTC to 2016-05-04 00:50:45 UTC.

012013-01-01 00:00:00 UTC to 2014-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments20132014-01-01 00:00:00 UTC to 2015-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments20142015-01-01 00:00:00 UTC to 2016-01-01 00:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments2016-01-01 00:00:00 UTC to 2017-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2016

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges
UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
PeriodStart (UTC)End (exclusive, UTC)MentionsSubmissionsComments
20132013-01-01 00:00:00 UTC2014-01-01 00:00:00 UTC101
20142014-01-01 00:00:00 UTC2015-01-01 00:00:00 UTC101
20152015-01-01 00:00:00 UTC2016-01-01 00:00:00 UTC000
20162016-01-01 00:00:00 UTC2017-01-01 00:00:00 UTC101

What Hacker News says

3 sources
I went through Apple's DMCA requests sent to Github and the only one that is remotely similar is this: https://github.com/github/dmca/blob/master/2014-11-04-Apple.... But even then they weren't claiming it was reverse engineered material, but instead material ripped directly from Apple's copyrighted and confidential docs. I think both Apple and Github understand the boundaries of the DMCA pretty well. According to Github they haven't attempted to take down any of the following: https://github.com/nygard/class-dump https://github.com/nst/iOS-Runtime-Headers https://github.com/brutella/hc https://github.com/KhaosT/HAP-NodeJS https://github.com/nfarina/homebridge https://github.com/lisimia/piMessage https://github.com/stefanesser/dumpdecrypted https://github.com/comex/imaon2 … etc
In PieMessage: iMessage on Android
Sure! It's a combination of static and dynamic analysis. I have a jailbroken phone, which allows me to access any file on the filesystem and decrypt any App Store binaries[1]. The first step is to find in which binaries the functionality lives. I know from searching that AirDrop lives in Sharing.framework[2], which has a supporting daemon, sharingd. Then, I open the binaries in a disassembler like IDA Pro[3] or Hopper[4] to determine how they work. Running class-dump is also helpful[5]. If I need to inspect a process like sharingd at runtime, I use Cycript[6], which gives me an Objective-C REPL into the process, or LLDB[7]. [1] https://github.com/stefanesser/dumpdecrypted [2] https://github.com/JaviSoto/iOS8-Runtime-Headers/tree/master... [3] https://www.hex-rays.com/products/ida/ [4] http://www.hopperapp.com/ [5] http://stevenygard.com/p
Read the rest
In WiFried: iOS 8 WiFi Issue
> Sounds like they haven't really broken apple's DRM Yes and no. No, in the sense that they are abusing the pay-for Apple developer services in order to get the software pushed to non-jailbroken devices. As such, they are still playing within the DRM system. But in the case of Zeusmos, yes, Apple's DRM (FairPlay) is broken in that "re-signing" involves signing a copy of the (App Store published) commercial app that had its original DRM removed. See here: https://github.com/stefanesser/dumpdecrypted These techniques were how tools like Crackulous worked, which allowed for the stealing of iOS App Store apps in the first place.
In New services bypass Apple DRM to allow pirated installs without jailbreaking

MAKE YOURSELF AT HOME

A few shortcuts

/
Search the collection
?
Open this guide
Esc
Close dialogs and navigation

Your saved repositories and interests stay in this browser.