背景
之前用過越獄iPhone6 iOS12.4.1系統(tǒng)進(jìn)行clutch進(jìn)行脫殼時(shí)是成功的,但是后來發(fā)現(xiàn)同樣的app在iOS12.4.8系統(tǒng)無論是進(jìn)行clutch還是dumpdecrypted進(jìn)行脫殼時(shí)都不能成功梗顺,而且現(xiàn)在有的app里面都進(jìn)行了防clutch乐埠,所以這兩種方式用起來都是很不方便的悯嗓,進(jìn)行給大家介紹一種Frida脫殼纺腊。
準(zhǔn)備
準(zhǔn)備一臺越獄手機(jī)利职,筆者的是iPhone6滔灶,12.4.8系統(tǒng)。
iPhone啟動Cydia员魏,添加frida軟件源(https://build.frida.re)來安裝frida丑蛤,筆者選擇的是Frida for pre-A12 devices
安裝后可在Mac終端運(yùn)行 frida-ps -U 查看
MAC準(zhǔn)備
安裝Homebrew
安裝python:brew install python
安裝wget:brew install wget
安裝pip:
wget https://bootstrap.pypa.io/get-pip.py
sudo python get-pip.py
安裝usbmuxd:brew install usbmuxd
清理殘留:rm ~/get-pip.py
注意:使用brew install xxx如果一直卡在Updating Homebrew…可以control + z結(jié)束當(dāng)前進(jìn)程,再新開一個(gè)終端安裝逆趋,此時(shí)可以跳過更新。
安裝frida for mac:
終端執(zhí)行:
sudo pip install frida
假如報(bào)超時(shí)錯(cuò)誤晒奕,自己開一下梯子重新執(zhí)行命令
假如報(bào)一下錯(cuò)誤:
Uninstalling a distutils installed project (six) has been deprecated and will be removed in a future version. This is due to the fact that uninstalling a distutils project will only partially uninstall the project.
使用以下命令安裝:
sudo pip install frida –upgrade –ignore-installed six
配置frida-ios-dump環(huán)境
1.從Github下載工程:
sudo mkdir /opt/dump && cd /opt/dump && sudo git clone https://github.com/AloneMonkey/frida-ios-dump
2.安裝依賴:
sudo pip install -r /opt/dump/frida-ios-dump/requirements.txt --upgrade