Comment

Comment by lauriewired

Ghidra is very feature-rich for code decompilation, however it doesn't handle dropping in an entire application bundle; only single executables.

Apple application files are special, bundling up resources and (potentially multiple) executables into the same package.

Many of these resource files are important for analysis, but have custom encodings by Apple. Malimite "digests" this information into a logical way.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton