ktool icon indicating copy to clipboard operation
ktool copied to clipboard

Not able to dump iOS apps

Open Rov3r opened this issue 2 years ago • 4 comments

I use the command ktool dump --headers --out RandomHeaders some_random_binary but I just get a whooole lot of errors saying ERROR - ktool.objc:L#678:Class:from_image() - Loading a class failed.

Trying to dump SoundCloud headers. Yes the app is decrypted (anyipa). All that's generated is a SoundCloud.h file with 3 blank lines and then a SoundCloud-Struct.h file, which is empty.

Rov3r avatar May 12 '23 18:05 Rov3r

Same error with ktool dump --headers --fdec --out <directory> [filename]. Tried with both fat (x86_64 + arm64e) and thin binaries, but neither worked. Additionally also got a few errors like this in the output:

ERROR - ktool.objc:L#128:ObjCImage:from_image() - Failed to load a protocol with Address 0x32290 (0x10000000032290) not in VA Table or fallback map. (page: 0xc)

200ug avatar Jun 19 '23 14:06 200ug

I was able to get ktool to dump an older arm64 binary but on newer binaries I just get 2 empty files MyApp-Structs.h and MyApp.h in the output directory. I also tried to run ktool open it shows the same 2 files.

I was able to see the methods and classes symbols via hopper disassembler just fine though.

AT5HK avatar Oct 21 '23 07:10 AT5HK

If you're able to share binaries it would be highly helpful here

0cyn avatar Nov 11 '23 12:11 0cyn

@0cyn hello! i use ktool dump tiktok`s framework ,although I got a lot of header files, most of them were incomplete. image

KyoShio avatar Apr 12 '24 12:04 KyoShio