# Installing and Obtaining IPA files on jailbroken iOS device

<mark style="color:orange;">**INSTALLING IPA FILE: Now that the environment is setup the first thing we need is an iOS application to test on here I am going to use the Damn Vulnerable iOS app DVIA-v2-swift.ipa.**</mark>

* <mark style="color:green;">**Connect your iOS device to your system.**</mark>
* <mark style="color:green;">**Verify the connection using the**</mark> <mark style="color:blue;">**`idevicename`**</mark> <mark style="color:green;">**command.**</mark>
* <mark style="color:green;">**Use the**</mark> <mark style="color:blue;">**`ideviceinstaller -i DVIA-v2-swift.ipa`**</mark> <mark style="color:green;">**command to install the IPA file.**</mark>
* <mark style="color:green;">**If the installation is successful, you should be able to access the app on your device.**</mark>

<figure><img src="https://miro.medium.com/v2/resize:fit:835/1*ANX3Ak5LLnfcld_Rc1iigQ.png" alt=""><figcaption></figcaption></figure>

<figure><img src="https://miro.medium.com/v2/resize:fit:805/1*RmxQ8yn8OIMHsKZHdxoADw.png" alt=""><figcaption></figcaption></figure>

<mark style="color:red;">**Note:**</mark>**&#x20;**<mark style="color:green;">**There are various methods to install IPA files or sideload them onto an iOS device, but using the**</mark> <mark style="color:blue;">**`ideviceinstaller -i`**</mark> <mark style="color:green;">**command is a reliable option. This is possible because of the AppSync Unified it is a tweak that allows users to freely install ad-hoc signed, fakesigned, unsigned, or expired IPA app packages on their iOS devices that iOS would otherwise consider invalid.**</mark>

<mark style="color:orange;">**OBTAINING INSTALLED IPA FILE: Most of the time we install the application using Appstore or using Testflight. So we dont have direct access to the IPA file. To obtain the IPA file we can ssh into our jailbroken iOS device.**</mark>\ <mark style="color:green;">**Use command find**</mark><mark style="color:blue;">**`find /var/ -name "*.app"`**</mark>**&#x20;**<mark style="color:green;">**and check for our application name after that go to tmp folder on iOS device make directory with name Payload**</mark>**&#x20;**<mark style="color:blue;">**`mkdir Payload`**</mark><mark style="color:green;">**copy the .app folder into the Payload folder using cp command and now zip the payload folder using**</mark> <mark style="color:blue;">**`zip -r Application_Name.ipa Payload/`**</mark> <mark style="color:green;">**as shown in the given screenshots and then use scp command to download the file on your system.**</mark>

<figure><img src="https://miro.medium.com/v2/resize:fit:1416/1*BKPpYYXd4nl3WHQe7yNu8A.png" alt=""><figcaption></figcaption></figure>

<figure><img src="https://miro.medium.com/v2/resize:fit:1821/1*mgil9nDlvrYj__S6z-RDRA.png" alt=""><figcaption></figcaption></figure>

<figure><img src="https://miro.medium.com/v2/resize:fit:875/1*e_tLfVjZoaxkLLgSebXl5g.png" alt=""><figcaption></figcaption></figure>
