問題總結(jié)
1，使用usbmuxd SSH連接手機(jī)
iOS 12 需要用cydia在手機(jī)上安裝 openssh，后才能連接ssh，執(zhí)行命令
iproxy 2222 22
ssh -p 2222 root@127.0.0.1
root@127.0.0.1's password:
需要輸入密碼 iPhone root權(quán)限默認(rèn)密碼alpine
注意：這里有時(shí)候如果你外接鼠標(biāo)了會(huì)連接錯(cuò)誤，需要把鼠標(biāo)拔掉或者指定id連接
2, dump.py 應(yīng)用名或bundle id進(jìn)行砸殼.
執(zhí)行導(dǎo)出ipa操作時(shí)報(bào)錯(cuò) ~/.cache/frida/gadget-ios.dylib
$ gunzip frida-gadget-xx.y.zz-ios-universal.dylib.gz
$ mkdir -p ~/.cache/frida
$ cp frida-gadget-xx.y.zz-ios-universal.dylib ~/.cache/frida/gadget-ios.dylib
下載frida-gadget-xx.y.zz-ios-universal.dylib.gz，解壓縮后執(zhí)行命令 然后把文件copy到目標(biāo)文件夾，注意改名字gadget-ios.dylib
3，導(dǎo)出文件時(shí)報(bào)權(quán)限問題報(bào)錯(cuò)
zip I/O error: Permission denied
zip error: Could not create output file (/opt/dump/frida-ios-dump/抖音短視頻.ipa)
Command '(u'zip', u'-qr', u'/opt/dump/frida-ios-dump/\u6296\u97f3\u77ed\u89c6\u9891.ipa', u'./Payload')' returned non-zero exit status 15
解決辦法：在命令行前面加了 sudo提升權(quán)限
frida-ios-dump git:(master) sudo python dump.py com.ss.iphone.ugc.Aweme
Start the target app com.ss.iphone.ugc.Aweme
Dumping 抖音短視頻 to /tmp
[frida-ios-dump]: ByteRtcEngineKit.framework has been loaded.
[frida-ios-dump]: AgoraRtcEngineKit.framework has been loaded.
[frida-ios-dump]: EffectSDK_iOSShell.framework has been loaded.
start dump /var/containers/Bundle/Application/CED00218-4BAA-45BC-A92E-1694482BF9F0/Aweme.app/Aweme
Aweme.fid: 100%|██████████| 117M/117M [00:03<00:00, 34.6MB/s]
start dump /private/var/containers/Bundle/Application/CED00218-4BAA-45BC-A92E-1694482BF9F0/Aweme.app/Frameworks/AgoraRtcEngineKit.framework/AgoraRtcEngineKit
AgoraRtcEngineKit.fid: 100%|██████████| 7.69M/7.69M [00:00<00:00, 20.3MB/s]
start dump /private/var/containers/Bundle/Application/CED00218-4BAA-45BC-A92E-1694482BF9F0/Aweme.app/Frameworks/ByteRtcEngineKit.framework/ByteRtcEngineKit
ByteRtcEngineKit.fid: 100%|██████████| 7.80M/7.80M [00:00<00:00, 20.7MB/s]
start dump /var/containers/Bundle/Application/CED00218-4BAA-45BC-A92E-1694482BF9F0/Aweme.app/Frameworks/EffectSDK_iOSShell.framework/EffectSDK_iOSShell
EffectSDK_iOSShell.fid: 100%|██████████| 20.8M/20.8M [00:00<00:00, 30.8MB/s]
Assets.car: 384MB [00:25, 16.0MB/s]
0.00B [00:00, ?B/s]Generating "抖音短視頻.ipa"
0.00B [00:00, ?B/s]
? frida-ios-dump git:(master)
