Tool
MonkeyDev
Based on iOSOpenDev, MonkeyDev adds a MonkeyApp project template to Xcode for instrumenting iOS apps the developer is authorized to analyze. From Xcode it injects a developer-written dylib into a supplied decrypted app, builds Objective-C or Logos (CaptainHook) hooks, and re-signs, installs and debugs the result with source-level breakpoints; optional build settings restore Objective-C symbols, export the target's Objective-C headers and enable Reveal view inspection. The current version also builds jailbreak Logos/CaptainHook tweaks and command-line tools for rootless, rootful or roothide environments.
Requirements & limits
- The reviewed master commit f906af1 (last pushed 2026-10-20) documents version 4.10; the repository has no tagged release. The README reports the non-jailbreak flow verified on Apple Silicon Macs with Xcode 27.0 and an iPhone 14 Pro on iOS 18.6.2, covering build, repeat install, hooking, symbol breakpoints, header export and Reveal, and separately reports rootless tweak and command-line builds verified on device with rootful only build- and package-checked.
- Installation needs a full Xcode, a native arm64 shell and Theos installed separately under the current user's home directory; it installs to /opt/MonkeyDev and registers the templates in the user's Xcode template directory without modifying Xcode.app. The repository commits prebuilt native helper binaries (its own monkeyparser and a build of class-dump) and the libsubstitute.dylib library, plus a demo app under Resource/TargetApp.app used as the built-in validation input.
- Each MonkeyApp needs one target input the developer supplies: a decrypted .app or already-dumped IPA placed in the project's TargetApp folder, or the built-in demo when none is provided. The README states MonkeyDev does not decrypt apps on non-jailbroken devices. Signing requires a certificate available to the current team, a matching provisioning profile and device authorization, and the keep-bundle-ID toggle does not bypass signing entitlements.
- GPL-3.0 licensed; the bundled roothide SDK under Librarys/roothide is MIT. The repository ships the Xcode templates, install/packaging scripts, the helper binaries and the demo app, and contains no third-party target application. Nothing was installed, built or run.
About this entry
- Type
- Tool
- Category
- Debugging and dynamic analysis
- Relationship
- Foundation tool
- Targets
- App
Sources reviewed
The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.
Primary sources
- README.md GitHub · AloneMonkey/MonkeyDev · Revision f906af1
- change.log GitHub · AloneMonkey/MonkeyDev · Revision f906af1
- LICENSE GitHub · AloneMonkey/MonkeyDev · Revision f906af1
- Librarys/roothide/LICENSE GitHub · AloneMonkey/MonkeyDev · Revision f906af1
More in Native binaries
- Hollows Hunter · Tool
- restore-symbol · Tool
- FakeNet-NG · Tool
- DownUnderCTF: masked-squares flag checker · Case study
- Show Your Work: a measured dissection of REA's evidence architecture · Case study
- Windows loader: static malware analysis with REA and Codex · Case study