# IPA Decryption

If an IPA file is retrieved from the apple store, it must be decrypted.&#x20;

## **Decrypting an IPA**

Firstly, using your iOS testing device, download the IPA from the app store

### Frida Dump

To retrieve the IPA file, you can use Frida Dump. You will need an iOS testing device and a Mac.

* <https://github.com/AloneMonkey/frida-ios-dump>

To setup Frida Dump on your iOS testing device and Mac, conduct the following steps:

1. (On phone) Add the Frida source to your JailBreak app
   1. <https://build.frida.re/>
2. (on mac) use the command&#x20;
   1. `iproxy 2222 22`
3. (on mac) use the command&#x20;
   1. `python3 dump -l`
4. (on mac) use the command&#x20;
   1. `python3` [`dump.py`](http://dump.py) `-o ~/Desktop/<app.ipa> <app bundle from above cmd>`
5. (on mac) use the command&#x20;
   1. `unzip <app.ipa>`

Now check if IPA binary is encrypted or not (on mac) using the following command:

* `otool -l Payload/<app.app>/app_binary | grep cryptid`
  * 1 = encrypted
  * 0 = not encrypted


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://wiki.pentestlist.com/offensive-security/mobile-ios-android/ios/ipa-decryption.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
