iOS一键砸壳

ios端配置:

打开cydia 添加源: https://build.frida.re

打开刚刚添加的源 安装 frida

安装完成!检查是否工作可以可在手机终端运行 frida-ps -U 查看

mac端配置:

安装Homebrew

安装python:

brew install python

安装wget:

brew install wget

安装pip:

wget https://bootstrap.pypa.io/get-pip.py

sudo python get-pip.py

安装usbmuxd:

brew install usbmuxd

清理残留:

rm ~/get-pip.py

安装frida for mac:
终端执行:

sudo pip install frida

假如报以下错误:

Uninstalling a distutils installed project (six) has been deprecated and will be removed in a future version. This is due to the fact that uninstalling a distutils project will only partially uninstall the project.

使用以下命令安装:

sudo pip install frida –upgrade –ignore-installed six

配置frida-ios-dump环境:
从Github下载工程:

sudo mkdir /opt/dump && cd /opt/dump && sudo git clone 

https://github.com/AloneMonkey/frida-ios-dump

安装依赖:

sudo pip install -r /opt/dump/frida-ios-dump/requirements.txt --upgrade

修改dump.py参数:

vim /opt/dump/frida-ios-dump/dump.py

找到如下几行(32~35):

User = 'root'
Password = 'alpine'
Host = 'localhost'
Port = 2222
按需修改 如把`Password` 改成自己的

在终端输入:

vim ~/.bash_profile

在末尾新增下面一段:

alias dump.py="/opt/dump/frida-ios-dump/dump.py"


source ~/.bash_profile

打开终端 设置端口转发:

iproxy 2222 22

dump.py -l

 PID  Name          Identifier
----  ------------  -------------------------------------
5109  App Store     com.apple.AppStore
5169  Cydia         com.saurik.Cydia
5311  微信            com.tencent.xin

dump.py 微信

生成ipa文件,之后就可以动态调试了。

你可能感兴趣的:(iOS一键砸壳)