Rev Ios Dump

Pulls decrypted iOS app binaries from jailbroken devices so you can reverse engineer them properly. You'd reach for this when you need to analyze an iOS app's actual implementation, whether for security research, vulnerability hunting, or understanding proprietary APIs. The repo has 1.2K stars and 246 installs, so it's seeing real use in the reverse engineering community. No documentation in the skill itself though, which is pretty typical for tooling aimed at people who already know what dumping an IPA means. Saves you from manually SSHing into a device and fumbling with frida-ios-dump commands.

skills.sh installs: 1.2K
GitHub stars: 2.4K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add p4nda0s/reverse-skills --skill rev-ios-dump --agent claude-code

Installs into .claude/skills of the current project.

Files

rev-ios-dump - iOS App Decryption (砸壳)

Dump decrypted iOS application binaries from jailbroken devices for security analysis and reverse engineering.

Overview

iOS apps distributed via the App Store are encrypted with Apple's FairPlay DRM. To perform static analysis (IDA/Ghidra/Hopper), the binary must first be decrypted at runtime — commonly called "砸壳" (dumping the shell). This skill uses Frida to instrument the running process and dump the decrypted Mach-O from memory.

Prerequisites

Requirement	Details
Jailbroken iOS device	With SSH access enabled
frida-server	Installed and running on the device
Python 3	On the host machine
frida + frida-tools	`pip3 install frida frida-tools`
USB or network access	SSH connection to the device

Verify frida-server is Running

# Check frida-server on device via SSH
ssh mobile@<device_ip> "ps aux | grep frida-server"

# If not running, start it
ssh mobile@<device_ip> "/usr/sbin/frida-server -D &"

# Verify from host
frida-ls-devices
frida-ps -H <device_ip>