Starting iOS Applications Analysis

In DerScanner, the following methods of importing iOS applications for analysis are implemented:

• Upload file from a local device
  Upload a source code archive (as .ZIP, .7Z, .RAR (up to version 4.0), .EAR, .AAR, .tar.bz2, .tar.gz, .tar, .cpio) or the application executable file (.ipa file, which must contain an armv8 (aarch64) binary application file).

• Upload via link
  There are two possible ways to download the project via a link:

  • Specify a path to the repository with the project source code (Git and Subversion are supported). DerScanner’s server should have access to the specified repository. Via the link, it should be possible to download code from the repository using the git clone or svn export command. Example links:
    • https://gitlab.example.com/myproject.git (Git)
    • ssh://gitlab.example.com/myproject (Git)
    • https://svn.example.com/mysvnproject/trunk/ (Subversion)
    • svn://svn.example.com/mysvnproject/branches/my-branch (Subversion)
    • svn+ssh://svn.example.com/mysvnproject/ (Subversion)

  To upload code from a private repository, specify your username and password. For more information about analysis settings, see Settings.

  • Specify an App Store application link, e.g.,
    https://apps.apple.com/us/app/name/id23423432432?mt=8.

A list of supported file extensions can be found in the Appendix. To analyze nested archives, select the Analyze libraries and nested archives option.

To get an .ipa file supported by the system, you should:ss

1. Build an application in Xcode and find a directory with an .app extension.
2. Pack it into a ZIP archive.
3. Reformat the .zip to .ipa.

• When analyzing source code (either as an archive or by link to a repository), the project should be built without errors via standard Xcode (version <= 11.5) build commands.

For advanced analysis settings, click Show Settings. For details, see General.