Hacking Marzipan, Running iOS apps on Mac
summary
Shows how to run iOS binaries on macOS by repackaging simulator builds and using marzipan-nephi to patch frameworks and entitlements. Requires disable SIP and whitelist changes so Swift runtimes and private frameworks load. macOS runs a two-process model: a UIKit app process and a UIHost wrapper that provides menus, titlebar and event mapping. Real apps succeed after removing closed source libs like Realm and platform features like haptics and maps; demos like a tiled art viewer and a personal app run but this is experimental and not shippable.
AI-written summary · about
chapters (23)
- 0:00Introduction
- 3:09Marzipan History
- 7:14Competitors
- 8:58Voice Memos
- 10:32Future of UIKit
- 11:40How UIKit works
- 11:56UIKit on Mac
- 12:59How it currently works
- 13:47UIKitHost App
- 14:35UIKit Source App
- 15:36How does it work
- 16:36Imphonic
- 17:32Nells
- 17:47ActionJam
- 18:32Map
- 19:20Epic Line
- 19:49Ripping out stuff
- 20:30Demo
- 20:56Disable System Integrity Protection
- 21:50Disable Mirroring
- 25:01Inspect UIKit
- 26:46Running iOS apps on Mac
- 32:23Conclusion
related talks
44mRunning Apps on Your Own iOS Simulator
21mEffective Migration to Mac Catalyst
01h 08mPlaying With the Limits: Can Your App Run Arbitrary Binary
31mLeveraging AppKit to Improve Your Catalyst App
44mBehind the scenes of iOS and Mac Security
50mRo(o)tten Apples: Vulnerability Heaven in the iOS Sandbox
21mUIKit on macOS - The Holy Grail of Cross-Platform
02h 39mSu-A-Cyder: Homebrewing Malware for IOS Like a BO$$!