Jump to content

ProHex TutorialsProfessional

Senior Member
  • Posts

    2
  • Joined

  • Last visited

1 Follower

Recent Profile Visitors

The recent visitors block is disabled and is not being shown to other users.

ProHex TutorialsProfessional's Achievements

Newbie

Newbie (1/14)

  • Conversation Starter
  • One Year In
  • 2 Years In
  • One Month Later
  • Super Dedicated

Recent Badges

3

Reputation

  1. Sometimes you want to find strings in your IPAs, but not open every single file to do so. Using other search methods have been super unreliable for me, so I made a python script that allows you to exactly do that, search whatever string you are looking for, recursively, in the whole IPA files files and subfolder. The script is a lot more extensive than I want to describe, so feel free to just try it. Usage: usage: ipa-string-search.py [-h] [-s SEARCH] [-c] [-e] [-o OUTPUT] [-f {json,txt,csv}] [--min-length MIN_LENGTH] [--max-length MAX_LENGTH] [-i] ipa_path IPA String Scanner - Search and extract strings from iOS apps positional arguments: ipa_path Path to extracted IPA directory options: -h, --help show this help message and exit -s, --search SEARCH Search for specific string -c, --case-sensitive Perform case-sensitive search (default: case-insensitive) -e, --export-all Export all found strings -o, --output OUTPUT Output file path (default: strings_output.json) -f, --format {json,txt,csv} Output format (default: json) --min-length MIN_LENGTH Minimum string length (default: 4) --max-length MAX_LENGTH Maximum string length (default: 1000) -i, --interesting Find interesting strings (API keys, URLs, etc.) Examples: # Search for specific string (case-insensitive by default) python ipa_scanner.py /path/to/extracted/ipa -s "api_key" # Case-sensitive search python ipa_scanner.py /path/to/extracted/ipa -s "ViP" -c # Export all strings to JSON python ipa_scanner.py /path/to/extracted/ipa -e -o strings.json # Export all strings to CSV with custom length python ipa_scanner.py /path/to/extracted/ipa -e -o strings.csv -f csv --min-length 10 # Find interesting strings (API keys, URLs, etc.) python ipa_scanner.py /path/to/extracted/ipa -i # Search in Unity games python ipa_scanner.py /path/to/extracted/unity_app -s "PlayerPrefs" Code: [Hidden Content] Supports also UnityFrameworks, UnityAssets, SQLite Databases, Mach-O Binary files and many more...
      • 3
      • Like
  2. Sharing my revision of https://github.com/keowu/swiftstringinspector which worked fine, but didnt provide what I needed. So, basically here is a vastly improved version made by me, built on the github repo: Changes made: 1. Multiple String Detection Patterns Pattern 1: Original ADRL/SUB pattern Pattern 2: ADRP/ADD pattern for page-based addressing Inline strings: Detection of small strings stored directly in MOV instructions C strings: Scanning of __cstring section including Swift mangled symbols 2. Advanced Swift Structure Analysis Type Metadata Scanner: Finds Swift type information in __swift5_types Protocol Scanner: Detects protocol conformances Enhanced Array Scanner: Better analysis of Swift array structures with count/capacity info 3. Objective-C Bridge Support ObjC Selector Detection: Finds Objective-C selectors used in Swift @objc Class Detection: Identifies Swift classes bridged to Objective-C Essential for iOS apps that mix Swift and Objective-C 4. Cross-Reference Tracking Tracks all references to discovered strings Shows which functions use which strings Helps understand code flow and string usage 5. Enhanced UI Organized groups: Logical grouping of related functions Platform detection: Shows if analyzing iOS ARM64 binary Statistics view: Binary analysis statistics Debug mode toggle: Runtime debug control 6. Utility Features Export functionality: Save scan results to text files Comprehensive scan: Combines all detection methods Deduplication: Removes duplicate findings Better error handling: Safe memory reading with fallbacks 7. Performance & Reliability Progress indicators with show_wait_box Caching mechanisms for better performance Safe memory access with proper exception handling UTF-8 decoding with error recovery Just put the plugin (put in a file with .py extension) in the plugin folder of IDA (version 9+ is a MUST). Python Script File: [Hidden Content]
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines