ios-deploy

Install and debug iOS apps without using Xcode. Designed to work on un-jailbroken devices.

Requirements

• Mac OS X. Tested on 10.10 Yosemite and iOS 8.3
• You need to have a valid iOS Development certificate installed.
• Xcode 6 or greater should be installed

Installation

ios-deploy installation is made simple using the node.js package manager. If you use Homebrew, install node.js:

brew install node

Now install ios-deploy with the node.js package manager:

npm install -g ios-deploy

To install from source:

make install prefix=/usr/local

This will install ios-deploy in the bin folder of /usr/local, i.e. /usr/local/bin

Usage

Usage: ios-deploy [OPTION]...
  -d, --debug                  launch the app in GDB after installation
  -i, --id <device_id>         the id of the device to connect to
  -c, --detect                 only detect if the device is connected
  -b, --bundle <bundle.app>    the path to the app bundle to be installed
  -a, --args <args>            command line arguments to pass to the app when launching it
  -t, --timeout <timeout>      number of seconds to wait for a device to be connected
  -u, --unbuffered             don't buffer stdout
  -n, --nostart                do not start the app when debugging
  -I, --noninteractive         start in non interactive mode (quit when app crashes or exits)
  -L, --justlaunch             just launch the app and exit lldb
  -v, --verbose                enable verbose output
  -m, --noinstall              directly start debugging without app install (-d not required)
  -p, --port <number>          port used for device, default: 12345
  -r, --uninstall              uninstall the app before install (do not use with -m; app cache and data are cleared)
  -9, --uninstall_only         uninstall the app ONLY. Use only with -1 <bundle_id>
  -1, --bundle_id <bundle id>  specify bundle id for list, upload, and uninstall_only
  -l, --list                   list files
  -o, --upload <file>          upload file
  -w, --download               download app tree
  -2, --to <target pathname>   use together with up/download file/tree. specify target
  -D, --mkdir <dir>            make directory on device
  -R, --rm <path>              remove file or directory on device (directories must be empty)
  -V, --version                print the executable version
  -e, --exists                 check if the app with given bundle_id is installed or not
  -B, --list_bundle_id         list bundle_id

Examples

The commands below assume that you have an app called my.app with bundle id bundle.id. Substitute where necessary.

// deploy and debug your app to a connected device
ios-deploy --debug --bundle my.app

// deploy and launch your app to a connected device, but quit the debugger after
ios-deploy --justlaunch --debug --bundle my.app

// deploy and launch your app to a connected device, quit when app crashes or exits
ios-deploy --noninteractive --debug --bundle my.app

// Upload a file to your app's Documents folder
ios-deploy --bundle_id 'bundle.id' --upload test.txt --to Documents/test.txt

// Download your app's Documents, Library and tmp folders
ios-deploy --bundle_id 'bundle.id' --download --to MyDestinationFolder

// List the contents of your app's Documents, Library and tmp folders
ios-deploy --bundle_id 'bundle.id' --list

// deploy and debug your app to a connected device, uninstall the app first
ios-deploy --uninstall --debug --bundle my.app

// check whether an app by bundle id exists on the device (check return code `echo $?`)
ios-deploy --exists --bundle_id com.apple.mobilemail

// Download the Documents directory of the app *only*
ios-deploy --download=/Documents -bundle_id my.app.id --to ./my_download_location

// List ids and names of connected devices
ios-deploy -c

// Uninstall an app
ios-deploy --uninstall_only --bundle_id my.bundle.id

// list all bundle ids of all apps on your device
ios-deploy --list_bundle_id

Demo

The included demo.app represents the minimum required to get code running on iOS.

• make demo.app will generate the demo.app executable. If it doesn't compile, modify IOS_SDK_VERSION in the Makefile.
• make debug will install demo.app and launch a LLDB session.

Notes

• With some modifications, it may be possible to use this without Xcode installed; however, you would need a copy of the relevant DeveloperDiskImage.dmg (included with Xcode). lldb would also run slower as symbols would be downloaded from the device on-the-fly.

• find the dyld debug structure in memory (dyld_all_image_infos). IIRC there's a custom debugserver command to get its address.

  • qShlibInfoAddr
  • DNBProcessGetSharedLibraryInfoAddress
  • debugserver/source/DNB.cpp

• build a list of images by parsing dyld_all_image_infos (there is already some code in mac_debmod.cpp but it's OS X specific and has not really been updated to handle dyld_shared_cache so there is some work to do).

  • ~/lldb/source/Target/Process.cpp:Process::Launch
  • ~/lldb/source/Plugins/Process/gdb-remote/ProcessGDBRemote::DoLaunch
  • jGetLoadedDynamicLibrariesInfos,ProcessGDBRemote::GetLoadedDynamicLibrariesInfos
  • ~/lldb/include/lldb/Target/Process.h:1921
  • DynamicLoaderMacOSXDYLD::NotifyBreakpointHit,ABIMacOSX_arm64::GetArgumentValues,
  • DynamicLoaderMacOSXDYLD::AddModulesUsingImageInfosAddress
  • /Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS.sdk/usr/include/mach-o/dyld_images.h
  • ProcessGDBRemote::DoLaunch

• register the images as modules and their symbols as debug symbols

  • ~/lldb/source/Plugins/ObjectFile/Mach-O/ObjectFileMachO.cpp:2402,2667

• gdb tests on windows

• workaround with libqcocoa events - https://bugreports.qt.io/browse/QTBUG-41632

• breakpoints

• single step

• symbols

• process attach

• step out

• call stack

• process stop - fails when process is running (and maybe other times)

• disable ASLR

• dSYM files

• get memory info - work like mac_debmod

• 'load debug symbols' in module list context menu

• lldb cli

• sluggish ui when process is running

• fix all the TFIXMEs

• integrate ios-deploy into IDA