Cycript

安装

官网：http://www.cycript.org/debs/?C=M;O=D
Github：https://github.com/iOS-Reverse-Engineering-Dev/Cycript
将cycript_0.9.501_iphoneos-arm.deb和libffi_1-3.0.10-5_iphoneos-arm.deb 拷贝到 /var/root/Media/Cydia/AutoInstall 重启iPhone（越狱iPhone）

查看运行APP的pid

ps aux | grep NewsLite(今日头条)

勾住进程

cycript -p 应用pid

桌面直接cycript -p SpringBoard

使用

var appLication = [UIApplication sharedApplication]
var keyWindow = appLication.keyWindow
var rootViewController = keyWindow.rootViewController
var firstNavigationController = rootViewController.childViewControllers[0]
var firstVc = firstNavigationController.viewControllers[0]
#""
var view = #0x125533fd0.view;