taken from the compiled executables ▪ https://github.com/nygard/class-dump ▪ https://github.com/JaviSoto/iOS8-Runtime-Headers/ ▪ IMO better version: https://github.com/mmmulani/class-dump-o-tron ▪ dumps C functions ▪ tells you where to find the implementation
separate the binary into relevant parts (e.g. strings from code) ▪ let you follow branches ▪ show selectors and strings in-line ▪ usually can produce pseudo-code/C
great for Mac/iOS/Objective-C ▪ good pseudo-code output ▪ IDA Pro ($1,119, €869 and a pretty serious background check) ▪ supports every architecture on the planet ▪ a bit slow
`help`) ▪ pinvocation Print the stack frame, receiver, and arguments of the current invocation. ▪ binside Set a breakpoint for a relative address within the framework/library that's currently running.
call to /tmp/msgSends-#### ▪ F-Script GUI for looking at classes of random applications and basic message calling ▪ cycript Ultra legit shimming and playing around ▪ `sample` Great for simply seeing what messages are generally called when you do something ▪ Apple Open Source
instruments faster for automated testing ▪ xctool Replacement for `xcodebuild`, command line tool to build/test projects ▪ ios-sim command-line utility to start iOS apps in the simulator https://github.com/jhaynie/iphonesim