iOS APP加固之越狱设备检测-code

Header File文件

新建Header File文件“LSDeviceDetection.h”

/*- - - - - - - - - - - - jailbroken check - - - - - - - - - - - - */
#import 
#import 
#import 
#import 
#import 

#import 

//static inline : 防止静态分析

//sandBox integrity check
static int check_jailbroken_sandbox () __attribute__((always_inline));
int check_jailbroken_sandbox () {
    int result = fork();
    if (!result) {
        exit(0);
    }
    if (result>=0) {
        return 1;
    }
    return 0;
}

//check a tweak
static int check_jailbroken_tweak () __attribute__((always_inline));
int check_jailbroken_tweak () {
    //链接：http://www.jianshu.com/p/bff550b3ead4
    uint8_t lmb[] = {'S', 'u', 'b', 's', 't', 'r', 'a', 't', 'e', '/', 'D', 'y', 'n', 'a', 'm', 'i', 'c', 0, };
    NSString *dir = [NSString stringWithFormat:@"/%@/%@%s%@", @"Library", @"Mobile", lmb, @"Libraries"];
    NSArray *dirFiles = [[NSFileManager defaultManager] contentsOfDirectoryAtPath:dir error:nil];
    NSArray *plistFiles = [dirFiles filteredArrayUsingPredicate:
                           [NSPredicate predicateWithFormat:
                            [NSString stringWithFormat:@"%@ %@%@ '.%@%@'",@"self", @"EN", @"DSWITH", @"pli", @"st"]]];
    int cnt = 0;
    for (NSString *file in plistFiles) {
        NSString *filePath = [dir stringByAppendingPathComponent:file];
        NSString *fileContent = [NSString stringWithContentsOfFile:filePath encoding:NSUTF8StringEncoding error:nil];
        if (fileContent && [fileContent rangeOfString:[[NSBundle mainBundle] bundleIdentifier]].location != NSNotFound) {
            cnt ++;
        }
    }
    // 返回有针对本 app 的 tweak 数量，为 0 说明没有
    return cnt;
}

//check plugin
static int check_jailbroken_cydia () __attribute__((always_inline));
int check_jailbroken_cydia () {
    struct stat s;
    int is_jailbroken =
    stat("Library/MobileSubstrate/MobileSubstrate.dylib", &s) == 0 || stat("/Applications/Cydia.app", &s) == 0 || stat("/var/lib/cydia/", &s) == 0 || stat("/var/cache/apt", &s) == 0;
    return is_jailbroken;
}

//check dylib
static int check_jailbroken_dylib () __attribute__((always_inline));
int check_jailbroken_dylib () {
    int ret;
    Dl_info dylib_info;
    int (*func_stat)(const char *,struct stat *) = stat;
    int is_jailbroken = 0;
    if ((ret = dladdr(func_stat, &dylib_info))) {
        if (strcmp(dylib_info.dli_fname, "/usr/lib/system/libsystem_kernel.dylib")) {
            is_jailbroken = 1;
        }
    }
    return is_jailbroken;
}

//check dyld
static int check_jailbroken_dyld () __attribute__((always_inline));
int check_jailbroken_dyld () {
    char *env = getenv("DYLD_INSERT_LIBRARIES");
    int is_jailbroken = 0;//no
    if (env != NULL || env != nil) {
        is_jailbroken = 1;//yes
    }
    return is_jailbroken;
}

static inline __attribute__((always_inline)) void found_jailbroken_device (){
    exit(-1);
}

pch文件

新建pch文件LSProject-Prefix.pch,导入头文件#import "LSDeviceDetection.h"
pch文件引用链接'Target-Build Setting',Precompile Prefix Header为YES，Prefix Header为$PROJECT_DIR/$PROJECT_NAME/LSProject-Prefix.pch

使用示例

if (check_jailbroken_sandbox() || check_jailbroken_tweak() || check_jailbroken_cydia() || check_jailbroken_dylib() || check_jailbroken_dyld()) {
            found_jailbroken_device();
            [[[UIAlertView alloc] initWithTitle:@"错误" message:@"app不支持越狱或破解版的手机." delegate:nil cancelButtonTitle:nil otherButtonTitles:nil, nil] show];
}

Tips:

• 利用static关键字裁掉函数符号
  原理如果函数属性为 static ，那么编译时该函数符号就会被解析为local符号。在发布release程序时（用Xcode打包编译二进制）默认会strip裁掉这些函数符号，无疑给逆向者加大了工作难度。
• static inline:防止静态分析
  可参考iOS安全–使用static inline方式编译函数，防止静态分析

感谢

1. http://www.jianshu.com/p/bff550b3ead4
2. http://www.blogfshare.com/ioss-static-inline.html
3. http://www.jianshu.com/p/0ea7f4468bec

地址链接:Demo