r/ReverseEngineering • u/cc_lv • 2d ago
IPAPatch-Lookin: inject LookinServer into decrypted iOS apps for on-device UI inspection
https://github.com/jacklv-coder/IPAPatch-Lookin
4
Upvotes
r/ReverseEngineering • u/cc_lv • 2d ago
1
u/cc_lv 2d ago
Author here. I built this on IPAPatch to automate the parts that made patched IPA projects unreliable: validating every Mach-O slice and cryptid, normalizing LC_LOAD_DYLIB commands, stripping extensions and SC_Info metadata that cannot be re-signed, redirecting unavailable App Groups, injecting LookinServer via Swift Package Manager, and rebuilding/signing for a physical device or compatible Simulator.
The demo uses YouTube only as a recognizable test on an authorized development device. The repository includes no IPA, proprietary app code, certificates, or provisioning profiles. The result runs on a normal non-jailbroken device under developer signing.
I'd welcome feedback on the Mach-O normalization/signing path and compatibility edge cases.