{
  "added_at": "2026-10-27",
  "additional_evidence_urls": [
    "https://github.com/ivRodriguezCA/RE-iOS-Apps/blob/183873adea6b07f951e1b49565000e2c83448429/Prerequisites.md",
    "https://github.com/ivRodriguezCA/RE-iOS-Apps/blob/183873adea6b07f951e1b49565000e2c83448429/Introduction.md",
    "https://github.com/ivRodriguezCA/RE-iOS-Apps/blob/183873adea6b07f951e1b49565000e2c83448429/Module-1/README.md",
    "https://github.com/ivRodriguezCA/RE-iOS-Apps/blob/183873adea6b07f951e1b49565000e2c83448429/Module-3/README.md",
    "https://github.com/ivRodriguezCA/RE-iOS-Apps/blob/183873adea6b07f951e1b49565000e2c83448429/Module-4/README.md",
    "https://github.com/ivRodriguezCA/RE-iOS-Apps/blob/183873adea6b07f951e1b49565000e2c83448429/Final-Thoughts.md",
    "https://github.com/ivRodriguezCA/RE-iOS-Apps-Extras-Github/tree/19ec1d21019caafb7b84b03496769445d01055be/Files"
  ],
  "category": "learning",
  "description_en": "Ivan Rodriguez's free English course (version 1.1) on reverse engineering iOS applications, aimed at beginners in iOS app security. Five Markdown modules cover setting up a jailbroken test device, decrypting App Store apps for analysis, static analysis of an IPA's files, frameworks, Objective-C classes and ARM binary in Hopper or Ghidra, runtime analysis with Cycript and Frida, and binary patching in Hopper. Exercises use CoinZa, a deliberately insecure Objective-C app the author built from vulnerability classes he reports finding in production App Store apps.",
  "description_zh": "Ivan Rodriguez 编写的免费英文课程（1.1 版），讲解 iOS 应用逆向工程，面向 iOS 应用安全初学者。五个 Markdown 模块依次介绍越狱测试设备的环境配置、为分析而解密 App Store 应用、对 IPA 中的文件、框架、Objective-C 类和 ARM 二进制进行静态分析（使用 Hopper 或 Ghidra）、用 Cycript 和 Frida 做运行时分析，以及在 Hopper 中修补二进制。练习使用 CoinZa：作者根据其所述在 App Store 正式应用中发现的漏洞类型，专门编写的一个故意不安全的 Objective-C 应用。",
  "entry_url": "https://awesomerea.org/resources/re-ios-apps-course/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/re-ios-apps-course/",
  "evidence_url": "https://github.com/ivRodriguezCA/RE-iOS-Apps/blob/183873adea6b07f951e1b49565000e2c83448429/README.md",
  "group": "learn",
  "id": "re-ios-apps-course",
  "json_url": "https://awesomerea.org/resources/re-ios-apps-course/record.json",
  "kind": "learning-resource",
  "markdown_url": "https://awesomerea.org/resources/re-ios-apps-course/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/re-ios-apps-course/index.md",
  "name": "Reverse Engineering iOS Applications",
  "name_zh": "iOS 应用逆向工程课程",
  "record_type": "resource",
  "relationship": "learning",
  "requirements": [
    "Reviewed at commit 183873a (2024-04-17). The course was written mainly in 2019; commits since mid-2020 are a few small wording and command fixes. Device instructions cover iOS 10 through 12, and many setup tools are from that period, so they may not work on current devices. The introduction excludes jailbreaking, iOS exploitation, tweak development, backend API testing and in-depth ARM assembly.",
    "The prerequisites page lists no mandatory knowledge but recommends a Mac (Xcode has no Windows alternative), basic Objective-C, Swift, JavaScript, HTML, SSH/SCP and man-in-the-middle concepts, and an ARM disassembler such as Ghidra, IDA or Hopper's trial. A jailbroken iPhone/iPad/iPod on iOS 10 or later is needed only for the decryption module and the Cycript and Frida exercises.",
    "No third-party app is needed for the exercises: the author ships CoinZa as an already-decrypted IPA, plus an EPUB of the course, in the companion repository RE-iOS-Apps-Extras-Github. The README says its vulnerabilities come from production apps but are reproduced in CoinZa instead of being published against those apps, and the closing page asks readers to report vulnerabilities responsibly.",
    "There is no separate license file; the README carries an MIT-style permission notice (Copyright 2019 Ivan Rodriguez) and an at-your-own-risk disclaimer; the closing page asks people who reuse the material to credit the author."
  ],
  "requirements_zh": [
    "审阅提交为 183873a（2024-04-17）。课程主要写于 2019 年，2020 年年中以后只有少量措辞和命令方面的小修正。设备相关说明覆盖 iOS 10 至 12，许多环境配置工具也出自那一时期，在当前设备上未必可用。导言明确不涉及越狱、iOS 系统漏洞利用、插件（tweak）开发、后端 API 测试以及深入的 ARM 汇编。",
    "前置知识页没有列出必备条件，但建议使用 Mac（Xcode 没有 Windows 替代品），具备 Objective-C、Swift、JavaScript、HTML、SSH/SCP 和中间人攻击概念的基础，并准备 Ghidra、IDA 或 Hopper 试用版等 ARM 反汇编工具。只有解密模块以及 Cycript 和 Frida 练习需要运行 iOS 10 或更高版本的越狱 iPhone/iPad/iPod。",
    "练习无需任何第三方应用：作者在配套仓库 RE-iOS-Apps-Extras-Github 中提供已解密的 CoinZa IPA 以及课程的 EPUB 版本。README 称这些漏洞源自正式上架的应用，但只在 CoinZa 中重现，而不针对原应用公开；结语也请读者以负责任的方式报告漏洞。",
    "仓库没有单独的许可证文件；README 附有 MIT 式许可声明（Copyright 2019 Ivan Rodriguez）和风险自负的免责声明；结语请复用材料的人注明作者。"
  ],
  "targets": [
    "app",
    "binary"
  ],
  "url": "https://github.com/ivRodriguezCA/RE-iOS-Apps",
  "verification": "source-reviewed",
  "verified_at": "2026-10-19"
}