dumpdecrypted StoreApp砸壳

dumpdecrypted: app砸壳 github开源,编译过后才能使用

  1. 从github上下载dumpdecrypted源码
git clone git://github.com/stefanesser/dumpdecrypted/
  1. 编译dumpdecrypted.dylib
make
  1. ps命令定位待砸壳的可执行文件位于
ps -e
 /var/mobile/Containers/Bundle/Application/54EC18C2-662D-416F-B4AC-4C3C740ED3BF/WeChat.app/WeChat
  1. Cycript找到TargetApp的Document目录路径
cycript -p TargetApp
cy#  NSHomeDirectory()
/var/mobile/Containers/Data/Application/12283242-8A90-40E5-91B1-7D98767BB2B8/Documents/
  1. 将dumpdecrypted.dylib拷贝到document目录下
scp ~/Desktop/dumpdecrypted/dumpdecrypted/dumpdecrypted.dylib [email protected]:/var/mobile/Containers/Data/Application/12283242-8A90-40E5-91B1-7D98767BB2B8/Documents/

6.开始砸壳

DYLD_INSERT_LIBRARIES=dumpdecrypted.dylib /var/mobile/Containers/Bundle/Application/54EC18C2-662D-416F-B4AC-4C3C740ED3BF/WeChat.app/WeChat
  1. 当前目录下会生成Target.decrypted.dylib即是砸壳过后的文件

你可能感兴趣的:(dumpdecrypted StoreApp砸壳)