Help/Support [Question] IDA "The File is Encrypted"

FateEX · November 24, 2014

I downloaded an app straight from iTunes and dragged the binary to IDA Pro and it gave me a message saying it needed to be decrypted, otherwise it would be useless for disassembly.

So I'm wondering, is there a simple way to decrypt it? I also saw in a few threads to use a cracked app instead. How would I crack/decrypt the binary for use in IDA?

Also, would this work in Terminal:

you can install clutch and just type in:

clutch -e "appname"

that will just dump and decrypt the binary.

Updated November 24, 2014 by Javi Tech

0xygen · November 24, 2014

go to terminal and type

clutch

then it should show the names of the apps with the order

like

1. CoC

2. xcx

just type clutch 1 or any number that u want the app to be cracked

Goggwell · November 24, 2014

I just use CrackAddict when I crack an app.

Easy

Rook · November 24, 2014

I downloaded an app straight from iTunes and dragged the binary to IDA Pro and it gave me a message saying it needed to be decrypted, otherwise it would be useless for disassembly.

So I'm wondering, is there a simple way to decrypt it? I also saw in a few threads to use a cracked app instead. How would I crack/decrypt the binary for use in IDA?

Also, would this work in Terminal:
you can install clutch and just type in:

clutch -e "appname"

that will just dump and decrypt the binary.

You can't process the binary in IDA because it's encrypted. You need to crack the IPA or binary file then load it up in IDA.

Yes, you can just crack the Binary by typing:

Clutch -e <InBinary> <OutBinary>

"Cracks specific already-installed executable or one that has been scp'd to the device."

More info & commands: https://github.com/KJCracks/Clutch

I just use CrackAddict when I crack an app.

Easy

CrackAddict isn't available anymore Where did you get it from?

FateEX · November 24, 2014

go to terminal and type

clutch

then it should show the names of the apps with the order

like

1. CoC

2. xcx

just type clutch 1 or any number that u want the app to be cracked

Hmm. I had to capitalize the "C" in Clutch. Thanks for clarifying!