[The Shark Inc.]

I try to make an executable shellcode (.ipa extension) file for Iphone.

I have 2 options.

1) Use eggshell (like metasploit for ios/macos) to generate a terminal command(shellcode) to run on the target device,
The problem here is i don't know how to make an executable program to execute terminal commands on Iphone (dont know what libraries to use , and also what programming language. like swift(only for ios/macos))
2)
Use metasploit , generate osx/armle/reverse_tcp payload but i dont know what file format should i use(e.g msfvenom -f exe) to meet my criteria.

Any answers?

[The Shark Inc.]

can you understand what i asked or you are useless?

[.eXe]

can you understand what i asked or you are useless?

You're the one that is asking how to run shellcode with no idea on where to begin. You're the useless one.

[hempuk]

calling us useless, when you are the one who has no idea what you are doing... no one will help you now... mug ..i.

[Smileツ]

Use .exe and good luck buddy.

[The Shark Inc.]

You're the one that is asking how to run shellcode with no idea on where to begin. You're the useless one.

I didn't want to offend you , i am sorry
So back on my question , i'd like to know if you have any answers on my problem.
Best regards

[CyberStrike]

OP check out the following

https://reverseengineering.stackexchange...s-ipa-apps
https://www.packtpub.com/mapt/book/netwo...cp-for-ios
exe will not work on an IOS device

[The Shark Inc.]

OP check out the following

https://reverseengineering.stackexchange...s-ipa-apps
https://www.packtpub.com/mapt/book/netwo...cp-for-ios
exe will not work on an IOS device

Thanks for your help but i already have read the second link yesterday.
my problem now is how to bypass the gatekeeper so the victim can install unn signed apps
i thought making a backdoored app and upload it to vshare (3rd party enterprise app certificate signing).
What's you opinion?

[CyberStrike]

Well I'll be honest, I don't mess with phones too often, more of network/webapp pentesting .. that said code signing certificates are a plus. If you try to upload to say ITunes you would never make it they actually check stuff, Google Play is a different story though.

[denizdifiesso]

This can help you man! :)

fastlane[.]tools/

github[.]com/fastlane/examples

firebase.google[.]com/docs/app-distribution/ios/distribute-fastlane

docs.fastlane[.]tools/actions/xcodebuild/

>>>  docplayer[.]net/191860791-The-xcsset-malware-inserts-malicious-code-into-xcode-projects-performs-uxss-backdoor-planting-in-safari-and-leverages-two-zero-day-exploits.html

You can take a hint from these links, I hope to have been helpful! :-)

My BTC Address: 123M7q7qYbP4gPxDdscXfZjC2tANiRskZa

---

This is for distributing your App and for installing via MobileSafari! :)

web.archive[.]org/web/20190824102915/bentedder[.]com/self-hosting-an-ad-hoc-distribution-ipa-file-for-app-development/

---

𝑨𝒅𝒅 𝒉𝒕𝒕𝒑:// 𝒂𝒏𝒅 𝒂𝒇𝒕𝒆𝒓 20190824102915 𝒕𝒉𝒆 𝒉𝒕𝒕𝒑://𝒘𝒘𝒘.

---

All links uncensored:

𝗵𝘁𝘁𝗽://𝘄𝗲𝗯.𝗮𝗿𝗰𝗵𝗶𝘃𝗲.𝗼𝗿𝗴/𝘄𝗲𝗯/𝟮𝟬𝟭𝟵𝟬𝟴𝟮𝟰𝟭𝟬𝟮𝟵𝟭𝟱/𝗵𝘁𝘁𝗽://𝘄𝘄𝘄.𝗯𝗲𝗻𝘁𝗲𝗱𝗱𝗲𝗿.𝗰𝗼𝗺/𝘀𝗲𝗹𝗳-𝗵𝗼𝘀𝘁𝗶𝗻𝗴-𝗮𝗻-𝗮𝗱-𝗵𝗼𝗰-𝗱𝗶𝘀𝘁𝗿𝗶𝗯𝘂𝘁𝗶𝗼𝗻-𝗶𝗽𝗮-𝗳𝗶𝗹𝗲-𝗳𝗼𝗿-𝗮𝗽𝗽-𝗱𝗲𝘃𝗲𝗹𝗼𝗽𝗺𝗲𝗻𝘁/

𝗵𝘁𝘁𝗽𝘀://𝗳𝗶𝗿𝗲𝗯𝗮𝘀𝗲.𝗴𝗼𝗼𝗴𝗹𝗲.𝗰𝗼𝗺/𝗱𝗼𝗰𝘀/𝗮𝗽𝗽-𝗱𝗶𝘀𝘁𝗿𝗶𝗯𝘂𝘁𝗶𝗼𝗻/𝗶𝗼𝘀/𝗱𝗶𝘀𝘁𝗿𝗶𝗯𝘂𝘁𝗲-𝗳𝗮𝘀𝘁𝗹𝗮𝗻𝗲

𝙝𝙩𝙩𝙥𝙨://𝙜𝙞𝙩𝙝𝙪𝙗.𝙘𝙤𝙢/𝙛𝙖𝙨𝙩𝙡𝙖𝙣𝙚/𝙚𝙭𝙖𝙢𝙥𝙡𝙚𝙨/

𝗵𝘁𝘁𝗽𝘀://𝗱𝗼𝗰𝗽𝗹𝗮𝘆𝗲𝗿.𝗻𝗲𝘁/𝟭𝟵𝟭𝟴𝟲𝟬𝟳𝟵𝟭-𝗧𝗵𝗲-𝘅𝗰𝘀𝘀𝗲𝘁-𝗺𝗮𝗹𝘄𝗮𝗿𝗲-𝗶𝗻𝘀𝗲𝗿𝘁𝘀-𝗺𝗮𝗹𝗶𝗰𝗶𝗼𝘂𝘀-𝗰𝗼𝗱𝗲-𝗶𝗻𝘁𝗼-𝘅𝗰𝗼𝗱𝗲-𝗽𝗿𝗼𝗷𝗲𝗰𝘁𝘀-𝗽𝗲𝗿𝗳𝗼𝗿𝗺𝘀-𝘂𝘅𝘀𝘀-𝗯𝗮𝗰𝗸𝗱𝗼𝗼𝗿-𝗽𝗹𝗮𝗻𝘁𝗶𝗻𝗴-𝗶𝗻-𝘀𝗮𝗳𝗮𝗿𝗶-𝗮𝗻𝗱-𝗹𝗲𝘃𝗲𝗿𝗮𝗴𝗲𝘀-𝘁𝘄𝗼-𝘇𝗲𝗿𝗼-𝗱𝗮𝘆-𝗲𝘅𝗽𝗹𝗼𝗶𝘁𝘀.𝗵𝘁𝗺𝗹

𝗵𝘁𝘁𝗽𝘀://𝗱𝗼𝗰𝘀.𝗳𝗮𝘀𝘁𝗹𝗮𝗻𝗲.𝘁𝗼𝗼𝗹𝘀/𝗮𝗰𝘁𝗶𝗼𝗻𝘀/𝘅𝗰𝗼𝗱𝗲𝗯𝘂𝗶𝗹𝗱/

𝗵𝘁𝘁𝗽𝘀://𝗳𝗮𝘀𝘁𝗹𝗮𝗻𝗲.𝘁𝗼𝗼𝗹𝘀/

Happy lucky! :)

---

Extra:

𝗵𝘁𝘁𝗽𝘀://𝘀𝘂𝗯𝘀𝗰𝗿𝗶𝗽𝘁𝗶𝗼𝗻.𝗽𝗮𝗰𝗸𝘁𝗽𝘂𝗯.𝗰𝗼𝗺/𝗯𝗼𝗼𝗸/𝗻𝗲𝘁𝘄𝗼𝗿𝗸𝗶𝗻𝗴_𝗮𝗻𝗱_𝘀𝗲𝗿𝘃𝗲𝗿𝘀/𝟵𝟳𝟴𝟭𝟳𝟴𝟱𝟴𝟴𝟯𝟮𝟱𝟱/𝟴/𝗰𝗵𝟬𝟴𝗹𝘃𝗹𝟭𝘀𝗲𝗰𝟱𝟴/𝘀𝗵𝗲𝗹𝗹-𝗿𝗲𝘃𝗲𝗿𝘀𝗲-𝘁𝗰𝗽-𝗳𝗼𝗿-𝗶𝗼𝘀

---

There's an app example, put into HelloWorld.xcodeproj files *.m and *.h your msfpayload C ShellCode or Payload!

transfer sh/S5qR8/AppDecompiledExample.zip

𝗵𝘁𝘁𝗽𝘀://𝘁𝗿𝗮𝗻𝘀𝗳𝗲𝗿.𝘀𝗵/𝗦𝟱𝗾𝗥𝟴/𝗔𝗽𝗽𝗗𝗲𝗰𝗼𝗺𝗽𝗶𝗹𝗲𝗱𝗘𝘅𝗮𝗺𝗽𝗹𝗲.𝘇𝗶𝗽