ssh 链接默认密码:alpine
通过ssh 链接usb
dumpdecrypted 下载地址:https://github.com/stefanesser/dumpdecrypted
只能砸当前的主程序
cd -路径-dumpdecrypted-master
命令:make ----> 多出.dylib\.o 文件
scp -P 1250 dumpdecrypted.dylib root@127.0.0.1:~/ ----> 拷贝到手机中去根目录下去
![](https://img.haomeiwen.com/i11076374/33ba559ba3c36939.png)
ps -A | grep Cou (Cou--管到选择)
ps -e (查看进程)
cycript -p (附加进程)
![](https://img.haomeiwen.com/i11076374/cd436824361ab9b6.png)
进行砸壳命令
DYLD_INSERT_LIBRARIES=dumpdecrypted.dylib /var/mobile/Containers/Bundle/Application/16DFCEC1-C663-46A0-BAD1-3401A1845FBD/Course.app/Course
![](https://img.haomeiwen.com/i11076374/7a65f7ebd83ce66e.png)
![](https://img.haomeiwen.com/i11076374/aba20550d3c91b96.png)
进行拷贝桌面等到mach-o 文件 (去掉.decrypted)
scp -P 1250 root@127.0.0.1:~/AlipayWallet.decrypted ./
下载一个正版的.ipa 包,压缩zip,解压--显示包内容替换mach-o 文件(是解密的)
进行cd 显示包路径(里面包含:Payload文件) 执行:`zip -ry Course.ipa payload`命令得到.ipa包
![](https://img.haomeiwen.com/i11076374/b260965c68d39ccc.png)
网友评论