Malimite is an open-source decompiler for researchers and security engineers who analyze iOS and macOS applications. Built on Ghidra’s decompilation engine, it provides direct support for Swift and Objective-C binaries, automatically decodes Apple-specific resources, and integrates LLM-powered analysis to accelerate reverse engineering workflows.Documentation Index
Fetch the complete documentation index at: https://mintlify.com/LaurieWired/Malimite/llms.txt
Use this file to discover all available pages before exploring further.
Installation
Install Malimite via Homebrew or as a precompiled JAR. Set up Ghidra as the decompilation backend.
Analyzing apps
Open an IPA file or App Bundle, browse classes and functions, and navigate decompiled code.
AI features
Use built-in LLM integration to translate, summarize, and find vulnerabilities in decompiled methods.
Configuration
Configure Ghidra path, API keys, theme, and library filters through the Preferences dialog.
What Malimite does
When you open an IPA or App Bundle, Malimite:- Extracts and decompiles Mach-O executables (including Universal binaries)
- Reconstructs Swift class hierarchies by demangling mangled symbols
- Auto-decodes Info.plist, assets, and provisioning profiles
- Filters out known Apple framework code so you focus on app logic
- Stores all results in a local SQLite project database for fast navigation
Library management
Control which Apple frameworks are filtered from decompilation results.
Supported formats
IPA files, App Bundles, and Universal Mach-O binaries across ARM64 and x86_64.
Keyboard shortcuts
Speed up navigation and analysis with built-in keyboard shortcuts.
Contributing
Report issues, suggest improvements, or submit pull requests to the project.
Quick start
Install prerequisites
Install Ghidra and Java 11 or later. Malimite uses Ghidra’s headless analyzer as its decompilation backend.
Install Malimite
Download the precompiled JAR from the Releases page or install via Homebrew:
Set the Ghidra path
On first launch, open File → Preferences and set the path to your Ghidra installation directory (the folder containing
support/analyzeHeadless).