美文网首页
ipa 破壳脚本

ipa 破壳脚本

作者: pipa | 来源:发表于2017-05-05 16:08 被阅读424次

    此篇为自用破壳流程,仅供参考。

    环境

    • 越狱手机
    • 手机需安装
      • OpenSSH
      • Clutch

    步骤

    • 下载 autoCracker
    • 推到越狱手机上
      电脑端 scp ~/Desktop/autoCracker.sh root@100.85.109.112:/var/root/autoCracker.sh

      推荐放到root目录下. 由于不是经常需要破壳,所以经常会忘了有此脚本。

    • 设置脚本权限
      手机 chmod +R 777 autoCracker.sh
    • 执行脚本
      手机 ./autoCracker.sh

    等待执行结果.

    破壳结果检查

    • 得到破壳后的ipa,copy到电脑端
      电脑端 scp root@100.85.109.167:/var/mobile/Documents/Dumped/net.openvpn.connect.app.ipa ~/Desktop

    otool -l 执行文件 | grep crypt
         cryptoff 16384
        cryptsize 2949120
          cryptid 0  /*0 破壳 , 1未破壳*/
    

    Weibo示例

    此处有一些Extension的错误

    iPhone:~ root# ./autoCracker.sh
    
    输入需要破壳的App名字:weibo  
    
    开始查找:  weibo
    
    找到以下结果:
    
     38: 微博-最新最热的热点资讯,最火最爆的视频直播 <com.sina.weibo>
    输入搜索结果中需要破壳 app 行首标号 : 38
    
    
    com.sina.weibo contains watchOS 2 compatible application. It's not possible to dump watchOS 2 apps with Clutch 2.0.4 at this moment.
    Zipping Weibo.app
    Error: Could not obtain mach port, either the process is dead (codesign error?) or entitlements were not properly signed!
    
    Error: Failed to dump <NotificationServiceExtension> with arch arm64
    
    2017-05-05 15:56:35.624 clutch[2614:367041] failed operation :(
    2017-05-05 15:56:35.626 clutch[2614:367041] application <NSOperationQueue: 0x136f657d0>{name = 'NSOperationQueue 0x136f657d0'}
    Error: Failed to dump <NotificationServiceExtension>
    
    2017-05-05 15:56:35.627 clutch[2614:367041] failed operation :(
    2017-05-05 15:56:35.627 clutch[2614:367041] application <NSOperationQueue: 0x136f657d0>{name = 'NSOperationQueue 0x136f657d0'}
    ASLR slide: 0x100040000
    Dumping <TodayExtension> (arm64)
    Patched cryptid (64bit segment)
    ASLR slide: 0x100008000
    Dumping <ShareExtension> (arm64)
    Patched cryptid (64bit segment)
    Writing new checksum
    Writing new checksum
    ASLR slide: 0x100098000
    Dumping <Weibo> (arm64)
    Patched cryptid (64bit segment)
    Writing new checksum
    Zipping NotificationServiceExtension.appex
    Zipping ShareExtension.appex
    Zipping TodayExtension.appex
    FAILED: <Weibo bundleID: com.sina.weibo>
    Finished dumping com.sina.weibo in 81.4 seconds
    电脑端操作. 参考
    scp root@100.85.109.167:/var/mobile/Documents/Dumped/net.openvpn.connect.app-iOS6.1-(Clutch-2.0.4).ipa ~/Desktop
    

    相关文章

      网友评论

          本文标题:ipa 破壳脚本

          本文链接:https://www.haomeiwen.com/subject/fdcstxtx.html