AppStore 上的app都是經(jīng)過加密的矿筝，如果想要砸殼窖维，或者干別的事情妙痹。首先要解密，最近在github上發(fā)現(xiàn)了一個(gè)比較牛掰的項(xiàng)目Clutch沛贪，可以給app解密震贵，所以在這里寫一個(gè)使用心得。
- git clone 最新版 clutch
localhost:~ wany$ git clone https://github.com/KJCracks/Clutch.git clutch
- 編譯clutch項(xiàng)目
localhost:~ wany$ cd clutch
localhost:clutch wany$ xcodebuild -project Clutch.xcodeproj -configuration Release ARCHS="armv7 armv7s arm64" build
編譯之后會(huì)在~/clutch/clutch 下生成一個(gè)可執(zhí)行clutch文件
- clutch 可執(zhí)行文件拷貝到iPhone 內(nèi)(我的iPhone的ip地址為：192.168.00.00)
localhost:clutch wany$cd clutch
localhost:clutch wany$ scp clutch root@192.168.00.00:/usr/bin
root@192.168.00.00's password:
localhost:clutch wany$ cd ~
- ssh 連接到iPhone
localhost:~ wany$ ssh root@192.168.00.00
root@192.168.00.00's password:
wany-iPhone:~ root# chmod 7777 /usr/bin/clutch
wany-iPhone:~ root# clutch -i (查看ipone中應(yīng)用列表)
1. app1<com.xx.app1>
2. app2<com.xxx.app2>
..... 省略部分......
wany-iPhone:~ root# clutch -d 2
Zipping Detection of color blindness.app
ASLR slide: 0xe7000
Dumping <Detection of color blindness> (armv7)
Patched cryptid (32bit segment)
Writing new checksum
DONE: /private/var/mobile/Documents/Dumped/com.xxx.app2-iOS7.0-(Clutch-2.0.4)-2.ipa
Finished dumping com.pinping.Seruodetection in 8.0 seconds
wany-iPhone:~ root# logout
Connection to 192.168.00.00 closed.
localhost:~ wany$
- 解密的ipa包媚送，保存在/private/var/mobile/Documents/Dumped/ 目錄下塘偎∧妹梗可使用ssh , 或者iTool Pro 導(dǎo)出
ssh 導(dǎo)出
localhost:~ wany$ scp root@192.168.00.00 ~/Desktop
password:
localhost:~ wany$ cd ~/Desktop
localhost:Desktop$ ls
com.xxx.app2-iOS7.0-(Clutch-2.0.4)-2.ipa
.....省略其他.....
localhost:~ wany$
