Help/Support [Question] IDA "The File is Encrypted"

[FateEX 1.6k iPhone Xs Max 13.4.1]

I downloaded an app straight from iTunes and dragged the binary to IDA Pro and it gave me a message saying it needed to be decrypted, otherwise it would be useless for disassembly.

 

So I'm wondering, is there a simple way to decrypt it? I also saw in a few threads to use a cracked app instead. How would I crack/decrypt the binary for use in IDA?

 

Also, would this work in Terminal:

you can install clutch and just type in:

clutch -e "appname"

that will just dump and decrypt the binary.

Updated November 24, 2014 by Javi Tech

[0xygen 396.1k iPad Mini 4 13.6]

go to terminal and type

 

clutch

then it should show the names of the apps with the order

 

like

1. CoC

2. xcx

 

just type clutch 1 or any number that u want the app to be cracked

[Goggwell 17.9k iPod Touch 1.0.0]

I just use CrackAddict when I crack an app.

Easy

[Rook 567.5k iPad Pro (2nd gen) 17.4 Donor]

I downloaded an app straight from iTunes and dragged the binary to IDA Pro and it gave me a message saying it needed to be decrypted, otherwise it would be useless for disassembly.

 

So I'm wondering, is there a simple way to decrypt it? I also saw in a few threads to use a cracked app instead. How would I crack/decrypt the binary for use in IDA?

 

Also, would this work in Terminal:

you can install clutch and just type in:

clutch -e "appname"

that will just dump and decrypt the binary.

You can't process the binary in IDA because it's encrypted. You need to crack the IPA or binary file then load it up in IDA.

 

Yes, you can just crack the Binary by typing:

Clutch -e <InBinary> <OutBinary>

"Cracks specific already-installed executable or one that has been scp'd to the device."

 

More info & commands: https://github.com/KJCracks/Clutch

 

I just use CrackAddict when I crack an app.

Easy

CrackAddict isn't available anymore Where did you get it from?

[FateEX 1.6k iPhone Xs Max 13.4.1]

go to terminal and type

 

clutch

then it should show the names of the apps with the order

 

like

1. CoC

2. xcx

 

just type clutch 1 or any number that u want the app to be cracked

Hmm. I had to capitalize the "C" in Clutch. Thanks for clarifying!

[Rook 567.5k iPad Pro (2nd gen) 17.4 Donor]

Hmm. I had to capitalize the "C" in Clutch. Thanks for clarifying!

Yeah, lol.

 

:thumbsup: