本文通过编写一个免越狱插件实现伪装定位
1.终端输入nic.pl新建tweak文件
2.在makefile文件中写入
(1) THEOS_DEVICE_IP = 你的ip地址
(2) location_FRAMEWORKS = UIkit CoreLocation
3.在tweak文件下写入
import <CoreLocation/CoreLocation.h>
%hook CLLocationManager
- (void)startUpdatingLocation {
CGFloat lat = 经度;
CGFloat lng = 纬度;
CLLocation *location = [[CLLocation alloc] initWithLatitude:lat longitude:lng ];
pragma clang diagnostic push
pragma clang diagnostic ignored "-Wdeprecated-declarations"
dispatch_after(dispatch_time(DISPATCH_TIME_NOW, (int64_t)(1.0f * NSEC_PER_SEC)), dispatch_get_main_queue(), ^{
[self.delegate locationManager:self didUpdateToLocation:location fromLocation:location];
});
pragma clang diagnostic pop
}
%end
4.在终端输入make编译动态库文件生产xxx.dylib
5.修改xxxx.dylib文件依赖
install_name_tool -change /Library/Frameworks/CydiaSubstrate.framework/CydiaSubstrate @loader_path/libsubstrate.dylib xxxx.dylib
6.移动libsubstrate.dylib(越狱手机库)、xxxx.dylib文件到xxx.app中
7.使用optool工具将xxx.dylib注入到二进制文件中
./optool install -c load -p "@executable_path/xxx.dylib" -t /xxx.app/xxx
8.使用App Signer重签名安装即可
网友评论