.ipa

on YouTube ↗48m

" summary

Breaks down an .ipa into Info.plist, SwiftSupport and _CodeSignature files, assets.car, frameworks and the executable, then shows concrete edits that work: changing URL schemes and orientation via Info.plist, merging bundles to speed CI (threefold build-time gain), injecting a simulator slice into a vendor .dylib to run on simulator, and repackaging + codesigning. Uses otool, nm, strings, Hopper and BinDiff to compare binaries — changing optimization flags shifts similarity ~30% and BinDiff reports ~0.72 similarity in a real case.

AI-written summary · about

" chapters (15)

1. 0:00Introduction
2. 2:12What is .ipa and structure
3. 6:05Info.plist file and features
4. 12:36CodeSignature folder and protection
5. 15:50assets.car format and resources
6. 18:41Bundles and modular structure
7. 20:46Modifying app without rebuild
8. 25:19Working with executable
9. 30:37Library dependencies analysis
10. 33:06Strings in binary and data leaks
11. 35:54Fighting fraudulent apps
12. 38:26Apple app comparison
13. 41:21Code analysis tools
14. 44:07Binary comparison factors
15. 47:17Summary and useful tools

" related talks

• 44mApplication Size OptimizationDmitriy Kurkin · РИТ++ 2017
• 36mTesting iOS Apps without Jailbreak in 2018Wojciech Reguła · OWASP AppSec Europe 2018
• 47mBASHing iOS ApplicationsJason Haddix, Dawn Isabel · AppSecUSA 2013
• 24mSecurity : protect the body of your appStéphane Mouawad · FrenchKit SE 2020
• 37mTake your iOS debugging skills to the next levelEwa Ludwiczak, Henryk Ratajczak · Mobilization 8
• 34mHacking Marzipan, Running iOS apps on MacTom Lokhorst · Do iOS 2018
• 53mRefactor Your Way ForwardJorge D. Ortiz-Fuentes · Mobile Era 2017
• 02h 39mSu-A-Cyder: Homebrewing Malware for IOS Like a BO$$!Chilik Tamir · Black Hat Asia 2016