However, there could be hope as it seems that roarijo89 is attempting to make a fully compatible modern day arm64 Clutch with fully signed entitlements.

These issues have somewhat confined a once very great tool to the archives unless using older devices. However, like much of the present-day techniques on iOS, DRM decryption is a cat and mouse game and these techniques, although remaining fundamentally the same, have differed as Apple pushes out more security for its operating system with each iOS version.Ĭlutch dumping the Testflight app on iOS 9.0.2ĭespite its roots surviving three iterations of iOS (8–10) Clutch seems to have numerous issues and errors attempting to dump any app on iOS 11+ due to Apple’s tighter restrictions on app entitlements and arm64 versioning. There are various tools that can “strip” this DRM, and they generally work by hooking into the device runtime and dumping the app from memory after examining the LC_ENCRYPTION_INFO flag. At install time, this header is decrypted with the private key stored in your device. This DRM works by placing a special header into the app binary which in turn is encrypted with the Apple specific App Store account public key. Disclaimer: This post is for educational purposes only and should not be used for any illegal or immoral activities against app developers.Īs part of an iOS pentest one of the first things to do is to strip the DRM off the ipa file so we can examine the content of the application, this provides meaningful strings rather than encrypted strings.Īpple’s DRM is known as Fairplay, every time an app is downloaded from the App Store, or Apple’s online service for OTA rollouts, Testflight, they will be encrypted.

Apple fairplay drm removal