ssh_decrypt_automation tool

What is this?

This tool automates the process of dumping decrypted iOS apps for jailbroken devices.

Disclaimer

Check out LICENSE before using this software.
Do not use Clutch or bfdecrypt for piracy!
I am not responsible for any damage or data lost that might occur for using this software.

You've been warned

Compatibility

Tested with:

Device	iOS Version	Jailbreak
iPhone XR (A12)	15.1	XinaA15 1.1.6.2
iPad Mini 5 (A12)	15.1	XinaA15 1.1.6.2
iPhone XR (A12)	14.7.1	unc0ver 8.0.2
iPhone SE 2016 (A9)	15.7.5	palera1n 2.0.0 Beta 6 (rootless)

This tool should work with rootful and rootless jailbreaks (at the moment, bfdecrypt is the only decryption method supported for rootless jailbreaks).

Operating System	Python Version
macOS Monterey 12.5 (ARM64)	3.9.6
Debian 11 (ARM64)	3.10.4
Windows 11 (ARM64)	3.11.2 (x86-64)

Note: At the moment, paramiko is not compatible with the ARM64 version of Python 3 for Windows.

Dependencies

Python >= 3.9
- If you're on Windows, you'll need to add python to PATH under installer options.
paramiko
Clutch
bfdecrypt
- bfdecrypt requires altList from the BigBoss or opa334 repository.
SSH client for your PC and SSH server for your iOS device.
- If you're using XinaA15, make sure to activate open SSH server under the Option tab.
- Most Linux distros have an SSH client installed by default.
- Windows (10, 11) and macOS will have an SSH client installed by default.

Notes:

You'll need Clutch or bfdecrypt (or both, if you'd like).
If you already have a version of bfdecrypt working on your device, it should work just fine with this tool.

Usage

Open your preferred terminal
Clone this repo

$ git clone https://github.com/cdelaof26/ssh_decrypt_automation_tool.git

# If you don't have git, click "Code" -> "Download ZIP"

Provide a copy of Clutch or bfdecrypt (or both)

#   Clutch:
#  * You can skip this if you don't want to use Clutch.
#
# Download the latest version from: 
#     https://github.com/NyaMisty/Clutch/releases
# Copy "Clutch_troll" to /path/to/ssh_decrypt_automation_tool

#   bfdecrypt:
#  * You can skip this if you don't want to use bfdecrypt.
#
# Download the latest version from: 
#     https://www.ios-repo-updates.com/repository/level3tjg/package/com.level3tjg.bfdecrypt/
# Copy "com.level3tjg.bfdecrypt.deb" to /path/to/ssh_decrypt_automation_tool
# Rename "com.level3tjg.bfdecrypt.deb" as "bfdecrypt.deb"

Move into the project directory

$ cd ssh_decrypt_automation_tool

Install the Python dependencies

# You might need elevated privileges!

$ pip install -r requirements.txt
# or
$ pip3 install -r requirements.txt

Run the tool using Python

# If you're on Linux or macOS
$ python3 main.py

# If you're on Windows
$ python main.py

FAQ

How do I find my iOS device IP?

Open the Settings App
Go to Wi-Fi section
Click on the i icon of your Wi-Fi network
Under IPV4 ADDRESS section, copy IP ADDRESS field

Note: Your PC must be connected to the same network

I keep getting "Please, consider changing ssh default password!" message, how do I change root password?

Open your preferred terminal
Run: ssh <user>@<your_ios_device_ip>
- e.g: ssh root@10.0.1.5 or ssh mobile@192.168.1.150
Enter alpine as the password
Run: passwd
Enter your password
- You won't see anything typed on the screen (this is normal)
- Type your new password and then press enter
Confirm your password by re-typing it and then pressing enter

I can't find the option to dump apps, where is it?

Connect your iOS device
Select 3. Select decrypt utility (needed to decrypt apps) in the main menu
Select your preferred option
- Fallback means that if the first decryption method fails, the second one will be used

I don't want to enter the IP address, username, or password each time I use this software, is there any solution?

Yes:

Run the project
Connect your iOS device
Select S. Setting on the main menu
Enable / disable features as you wish
- Note: the username and password are saved as plain text!
Done

Should I use Clutch or bfdecrypt?

Depends on which works better for you, for me: bfdecrypt

App name	Clutch	bfdecrypt
Terraria	Success	Success
Apollo	Failed	Failed
RedditApp	Failed	Success
WhatsApp	Failed	Success
Telegram	Failed	Success
Discord	Failed	Success

My app keeps failing when dumping, what can I do?

Unfortunately, some applications might fail to decrypt using both Clutch and bfdecrypt decryption methods.

Changelog

v0.0.4_1

Fixed bug where decrypt method won't be saved if the option is selected from the main menu

v0.0.4

Added support for bfdecrypt
Fixed Windows experience

v0.0.3

Minor bug fixes
Fixed bug where the script couldn't connect (Time out!) and it keeps trying until "too many attempts" error is raised
Fixed bug where the script would crash when attempting to delete temporary data but there isn't a cache directory

v0.0.2

Improved app detection

v0.0.1

Initial project

joshuaseltzer / ssh_decrypt_automation_tool