Skip to content

Add iDump as alternative to frida-ios-dump in MASTG-TOOL-0050 - #3799

Open
Fi5t wants to merge 1 commit into
OWASP:masterfrom
Fi5t:patch-1
Open

Add iDump as alternative to frida-ios-dump in MASTG-TOOL-0050#3799
Fi5t wants to merge 1 commit into
OWASP:masterfrom
Fi5t:patch-1

Conversation

@Fi5t

@Fi5t Fi5t commented May 14, 2026

Copy link
Copy Markdown
Contributor

Description

frida-ios-dump is currently broken with Frida 17+ and appears unmaintained,
leaving users without a working alternative for iOS binary decryption.
iDump was built as a modern drop-in replacement.


AI Tool Disclosure

Check exactly one option.

  • This contribution does not include AI-generated content.
  • This contribution includes AI-generated content.

If AI tools were used to generate or substantially modify code or text, complete the following.

  • AI tools used: e.g. ChatGPT, GitHub Copilot, Claude.
  • Models and versions: e.g. GPT-, Claude .
  • Prompt summary: brief description of the key prompts or instructions.
  • Your mobile security expertise level: low, medium, high.

For first-time contributors using AI tools.

  • Provide an export of the AI chat or session, for example a shared link or PDF attachment.
  • Ensure the commit history shows an initial commit with AI-generated content followed by commits that demonstrate review, correction, and improvement.

Undisclosed use of AI tools will result in the PR being closed. Large rewrites or bulk changes generated by AI require explicit prior approval from the maintainers. Learn more in "Use of AI tools in contributions".


Contributor Checklist

  • I have read and understood the contributing guidelines.
  • I followed the project style guide.
  • I validated the technical correctness of my changes and understand the topic.
  • This PR adds clear value and is not spam or low-effort content.

Relevant documentation.

Contributors are expected to understand basic git and GitHub workflows, including forks, branches, commits, and pull requests. The project does not provide training. Pull requests that do not meet these minimum requirements may be closed without review.

@github-actions

Copy link
Copy Markdown

Thank you for your contribution! However, this PR does not reference any issues.

To contribute to this project, please:

  1. Find an existing issue you'd like to work on, or create a new one
  2. Get assigned to the issue
  3. Reference the issue in your PR using keywords like "Fixes 0x4 - About Burp Suite #123" or "Closes 0x4 - About Burp Suite #123"

Please reopen this PR once you have linked it to an issue you are assigned to.

@github-actions github-actions Bot closed this May 14, 2026
@sushi2k

sushi2k commented May 14, 2026

Copy link
Copy Markdown
Collaborator

Thanks for sharing!

As this tool was just released: on which iOS devices and jailbreak types could you test the tool?

In case an iOS app can only be installed on iOS versions > 17 (where no jailbreak is available), was it possible for you to dump apps with your tool by changing the minimumOSVersion as described here: https://dvuln.com/blog/modern-ios-pentesting-no-jailbreak-needed.

@sushi2k sushi2k reopened this May 14, 2026
@Fi5t

Fi5t commented May 14, 2026

Copy link
Copy Markdown
Contributor Author

@sushi2k I tested it on iOS 16.7.15 with palera1n jailbreak installed. Unfortunately, I don't have a device with iOS 17+ right now to test my utility. But I can try to find a suitable device from my team.

@Fi5t

Fi5t commented May 16, 2026

Copy link
Copy Markdown
Contributor Author

@sushi2k I guess I misunderstood you the first time. I read the article, and my answer is yes, of course. If the app, after all modifications, can be installed on an iOS below 17 (after changing the minimumOSVersion), then my utility will be able to dump it from the device. But if your question is whether my utility can replace the Apple configurator(I mean the flow described in the article), the answer is no, it can't.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants