Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unable to dump apps on Apple Security research device #129

Open
cfossace opened this issue Nov 1, 2023 · 8 comments
Open

Unable to dump apps on Apple Security research device #129

cfossace opened this issue Nov 1, 2023 · 8 comments

Comments

@cfossace
Copy link

cfossace commented Nov 1, 2023

There is an error dumping the app.

➜ bagbak -U my.app.testing.triggerdebug.testing-app
[info] pulling app bundle from device, please be patient

[info] app bundle downloaded
node:internal/process/promises:288
triggerUncaughtException(err, true /* fromPromise */);
^

[Error: ENOENT: no such file or directory, scandir '/var/folders/rr/n_90hxwd49gc5n3nwyrw6qdr0000gp/T/bagbak/my.app.testing.triggerdebug.testing-app/Payload/testing app.app'] {
errno: -2,
code: 'ENOENT',
syscall: 'scandir',
path: '/var/folders/rr/n_90hxwd49gc5n3nwyrw6qdr0000gp/T/bagbak/my.app.testing.triggerdebug.testing-app/Payload/testing app.app'
}

Node.js v18.18.2

To Reproduce
Steps to reproduce the behavior:

bagbak -U my.app.testing.triggerdebug.testing-app

Expected behavior
I expect it to dump the decrypted app, but it seems like there is a problem.

Desktop (please complete the following information):

  • OS: MacOS 13.5
  • ➜ npm --version
    9.8.1
    ➜ node --version
    v18.18.2
  • frida on device version 16.1.4
  • iOS and jailbreak version Apple Security research device iOS 17 (non jailbroken, Frida installed with cryptex)
@ChiChou
Copy link
Owner

ChiChou commented Nov 2, 2023

I can't find this bundle id. Are you side-loading it?

@cfossace
Copy link
Author

cfossace commented Nov 3, 2023

Oh yeah sorry I was doing this with a test app. To confirm though, no apps work at all. They all get this same error :(

@cfossace
Copy link
Author

cfossace commented Nov 3, 2023

It seems like frida-ios-dump has the exact same error, so I can't tell if it is maybe something Frida-side? AloneMonkey/frida-ios-dump#180

@ChiChou
Copy link
Owner

ChiChou commented Nov 4, 2023

To side load an app, the app must be already decrypted. It makes no sense to "decrypt" again. What do you wanna implement?

@ChiChou
Copy link
Owner

ChiChou commented Nov 4, 2023

I don't think it has anything to do with frida. Your ipa must have some broken symbolic link inside

@cfossace
Copy link
Author

cfossace commented Nov 8, 2023

No I can't dump any apps with frida. I am not sideloading apps, I am dumping app store apps. I was just testing the dumping with a sideloaded app to see if that would help, but that didn't work either.

@ChiChou
Copy link
Owner

ChiChou commented Nov 8, 2023

No I can't dump any apps with frida. I am not sideloading apps, I am dumping app store apps. I was just testing the dumping with a sideloaded app to see if that would help, but that didn't work either.

but same error for store apps?

@cfossace
Copy link
Author

Yeah, even App Store apps get the same error. It seems like all apps are having this problem :(

@ChiChou ChiChou changed the title Unable to dump apps Unable to dump apps on Apple Security research device Dec 2, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants