iOS11.3 越狱逆向

2018-08-01 本文已影响226人 CAICAI0

系统iOS11.3 iPhone6P 使用Eletra 越狱
1.1 进入飞行模式
1.2 iPhone储存空间中的系统更新（iOS11.4.1）删除
1.3 Eletra开发版（Electra1131-1.0.3-mptcp.ipa）和正式版（Electra1131-1.0.3-vfs.ipa）交替使用。没有实际证据，但是每次越狱成功，之前（不是临近）都启动过开发版。
1.4 有耐心，基本上要试不少于10次。当然如果脸黑就不知道多少次了。
1.5 神技，在Electra启动后不断点击home键，使程序不断前后台切换，概率会明显增高。

越狱成功后出现Cydia
2.1 如果Cydia不能联网。能不能联网的标准如图!

8C418644-6433-4826-9CDD-AE9330A79A11.png

B58066C8-C015-490D-A2CE-8D66D6646D3D.png
2.1.1 下载乐网

CD19A267-7CDC-4982-A7A1-B0A7DC3448B7.png
2.1.2 打开乐网app，打开全局拦截开关

IMG_0020.PNG
2.1.3 打开Cydia，此时应该能够上网了。添加雷锋源（http://apt.abcydia.com）

IMG_0021(20180801-220451).jpg
2.1.4 搜索ConditionalWIFI3

IMG_0022.PNG
2.1.5 进入系统设置开发者下面多了一个ConditionalWiFi3,进入后可以看到所有应用的网络开关。

IMG_0023(20180801-221112).jpg

IMG_0024(20180801-221200).jpg
2.2 添加必要的源，下面是我安装的源。

IMG_0025(20180801-222630).jpg
2.3 如果不知道怎么就搞乱了，想大侠从头再来。unjailbreak.sh，通过ssh连接远程运行一次，然后抹掉iPhone。基本就回到解放前了。

 if [ "$EUID" -ne 0 ]; then
   echo "ERROR! You are not logged in as root user!"
   echo "Please login as root user before executing this script."
   exit
 fi

 echo "Electra uninstaller by KirovAir for Electra 1.0.x"
 echo "This has ONLY been tested on a few devices and might kill your JB."
 echo "Assuming you have not installed any other jailbreak or modified the rootfs directly yourself, you should be on stock iOS once this is complete."
 read -p "Press enter to continue. Press Ctrl + C to exit"

 echo "Killing Cydia.."
 killall Cydia

 # exploit generated
 echo "Removing exploit generated.."
 rm -f /var/mobile/test.txt
 rm -f /.bit_of_fun

 # cleanupPotentialManualFiles
 echo "Removing potential manual files.."
 rm -f /bin/bash
 rm -f /authorize.sh
 rm -rf /Applications/jjjj.app/
 rm -rf /Applications/Extender.app/
 rm -rf /Applications/GBA4iOS.app/
 rm -rf /Applications/Filza.app/
 rm -rf /Library/dpkg/
 rm -rf /Library/Cylinder/
 rm -rf /Library/LaunchDaemons/*
 rm -rf /Library/Zeppelin/
 rm -rf /etc/alternatives/
 rm -rf /etc/apt/
 rm -rf /etc/dpkg/
 rm -rf /etc/pam.d/
 rm -rf /etc/profile.d/
 rm -rf /etc/ssh/
 rm -rf /usr/include/
 rm -rf /usr/lib/apt/
 rm -rf /usr/lib/dpkg/
 rm -rf /usr/lib/pam/
 rm -rf /usr/lib/pkgconfig/
 rm -rf /usr/lib/cycript0.9/
 rm -rf /usr/libexec/cydia/
 rm -rf /usr/libexec/gnupg/
 rm -rf /usr/share/bigboss/
 rm -rf /usr/share/dpkg/
 rm -rf /usr/share/gnupg/
 rm -rf /usr/share/tabset/
 rm -rf /var/cache/apt/
 rm -rf /var/db/stash/
 rm -rf /var/lib/apt/
 rm -rf /var/lib/dpkg/
 rm -rf /var/stash/
 rm -rf /var/tweak/

 # removeElectraBeta
 echo "Removing electra beta files.."
 rm -rf /Applications/Anemone.app/
 rm -rf /Applications/SafeMode.app/
 rm -f /usr/lib/SBInject.dylib
 rm -rf /usr/lib/SBInject/
 rm -f /usr/lib/libsubstitute.0.dylib
 rm -f /usr/lib/libsubstitute.dylib
 rm -f /usr/lib/libsubstrate.dylib
 rm -f /usr/lib/libjailbreak.dylib
 rm -f /usr/bin/recache
 rm -f /usr/bin/killall
 rm -rf /usr/share/terminfo/*
 rm -f /usr/libexec/sftp-server
 rm -f /usr/lib/SBInject.dylib
 rm -rf /Library/Frameworks/* # This is VERY important to keep the BETAs working
 mkdir /Library/Frameworks/ # Just to be sure
 rm -rf /System/Library/Themes/
 #rm -rf /bootstrap/ # moved to bottom
 rm -rf /Library/Themes/
 rm -f /usr/lib/SBInject.dylib
 rm -rf /Library/MobileSubstrate/*
 rm -rf /etc/dropbear

 # Non-beta files
 rm -f /usr/lib/TweakInject.dylib
 rm -rf /usr/lib/TweakInject/
 rm -rf /Library/TweakInject/

 # For who forgot CB. (ehm, me..)
 rm -rf /Applications/circuitbreaker.app/
 rm -f /var/mobile/Library/Preferences/com.thecomputerwhisperer.cbtweaks.plist
 rm -f /var/mobile/Library/Preferences/com.thecomputerwhisperer.cbprefs.plist
 rm -f /var/mobile/Library/Preferences/com.thecomputerwhisperer.CBPrefsList.plist
 rm -f /var/mobile/Library/Preferences/aaa.thecomputerwhisperer.fuku.plist
 rm -f /var/mobile/Library/Preferences/com.thecomputerwhisperer.CircuitBreakerPrefs.plist

 #big fat bootstrap motherfucker
 echo "Removing Cydia bootstrap.. (Please pray from here onwards)"
 rm -rf /Applications/Cydia.app/
 rm -f /bin/bash
 rm -f /bin/bunzip2
 rm -f /bin/bzcat
 rm -f /bin/bzip2
 rm -f /bin/bzip2recover
 rm -f /bin/cat
 rm -f /bin/chgrp
 rm -f /bin/chmod
 rm -f /bin/chown
 rm -f /bin/cp
 rm -f /bin/date
 rm -f /bin/dd
 rm -f /bin/dir
 rm -f /bin/echo
 rm -f /bin/egrep
 rm -f /bin/false
 rm -f /bin/fgrep
 rm -f /bin/grep
 rm -f /bin/gtar
 rm -f /bin/gunzip
 rm -f /bin/gzexe
 rm -f /bin/gzip
 rm -f /bin/kill
 rm -f /bin/ln
 rm -f /bin/ls
 rm -f /bin/mkdir
 rm -f /bin/mknod
 rm -f /bin/mktemp
 rm -f /bin/mv
 rm -f /bin/pwd
 rm -f /bin/readlink
 #rm -f /bin/rm #move to bottom?
 rm -f /bin/rmdir
 rm -f /bin/run-parts
 rm -f /bin/sed
 #rm -f /bin/sh #move to bottom?
 rm -f /bin/sleep
 rm -f /bin/stty
 rm -f /bin/su
 rm -f /bin/sync
 rm -f /bin/tar
 rm -f /bin/touch
 rm -f /bin/true
 rm -f /bin/uname
 rm -f /bin/uncompress
 rm -f /bin/vdir
 rm -f /bin/zcat
 rm -f /bin/zcmp
 rm -f /bin/zdiff
 rm -f /bin/zegrep
 rm -f /bin/zfgrep
 rm -f /bin/zforce
 rm -f /bin/zgrep
 rm -f /bin/zless
 rm -f /bin/zmore
 rm -f /bin/znew
 rm -rf /Library/dpkg/
 rm -f /Library/LaunchDaemons/com.openssh.sshd.plist
 rm -f /Library/LaunchDaemons/com.saurik.Cydia.Startup.plist
 rm -rf /private/etc/alternatives/
 rm -rf /private/etc/apt/
 rm -rf /private/etc/default/
 rm -rf /private/etc/dpkg/
 rm -rf /private/etc/profile.d/*
 rm -rf /private/etc/ssh/
 rm -rf /private/etc/ssl/
 rm -f /private/etc/profile
 rm -rf /private/var/backups/
 rm -rf /private/var/cache/
 rm -rf /private/var/empty/
 rm -rf /private/var/lib/apt/
 rm -rf /private/var/lib/cydia/
 rm -rf /private/var/lib/misc/
 rm -f /private/var/lib/dpkg
 rm -rf /private/var/local/*
 rm -rf /private/var/lock/*
 rm -rf /private/var/log/*
 rm -rf /private/var/spool/*
 rm -f /sbin/dmesg
 rm -f /sbin/dynamic_pager
 rm -f /sbin/halt
 rm -f /sbin/nologin
 rm -f /sbin/reboot
 rm -f /sbin/update_dyld_shared_cache
 rm -f /usr/bin/apt-key
 rm -f /usr/bin/arch
 rm -f /usr/bin/bashbug
 rm -f /usr/bin/captoinfo
 rm -f /usr/bin/cfversion
 rm -f /usr/bin/clear
 rm -f /usr/bin/cmp
 rm -f /usr/bin/c_rehash
 rm -f /usr/bin/dbsql
 rm -f /usr/bin/db_archive
 rm -f /usr/bin/db_checkpoint
 rm -f /usr/bin/db_deadlock
 rm -f /usr/bin/db_dump
 rm -f /usr/bin/db_hotbackup
 rm -f /usr/bin/db_load
 rm -f /usr/bin/db_log_verify
 rm -f /usr/bin/db_printlog
 rm -f /usr/bin/db_recover
 rm -f /usr/bin/db_replicate
 rm -f /usr/bin/db_sql_codegen
 rm -f /usr/bin/db_stat
 rm -f /usr/bin/db_tuner
 rm -f /usr/bin/db_upgrade
 rm -f /usr/bin/db_verify
 rm -f /usr/bin/df
 rm -f /usr/bin/diff
 rm -f /usr/bin/diff3
 rm -f /usr/bin/dirname
 rm -f /usr/bin/dpkg
 rm -f /usr/bin/dpkg-architecture
 rm -f /usr/bin/dpkg-buildflags
 rm -f /usr/bin/dpkg-buildpackage
 rm -f /usr/bin/dpkg-checkbuilddeps
 rm -f /usr/bin/dpkg-deb
 rm -f /usr/bin/dpkg-distaddfile
 rm -f /usr/bin/dpkg-divert
 rm -f /usr/bin/dpkg-genbuildinfo
 rm -f /usr/bin/dpkg-genchanges
 rm -f /usr/bin/dpkg-gencontrol
 rm -f /usr/bin/dpkg-gensymbols
 rm -f /usr/bin/dpkg-maintscript-helper
 rm -f /usr/bin/dpkg-mergechangelogs
 rm -f /usr/bin/dpkg-name
 rm -f /usr/bin/dpkg-parsechangelog
 rm -f /usr/bin/dpkg-query
 rm -f /usr/bin/dpkg-scanpackages
 rm -f /usr/bin/dpkg-scansources
 rm -f /usr/bin/dpkg-shlibdeps
 rm -f /usr/bin/dpkg-source
 rm -f /usr/bin/dpkg-split
 rm -f /usr/bin/dpkg-statoverride
 rm -f /usr/bin/dpkg-trigger
 rm -f /usr/bin/dpkg-vendor
 rm -f /usr/bin/find
 rm -f /usr/bin/getconf
 rm -f /usr/bin/getty
 rm -f /usr/bin/gpg
 rm -f /usr/bin/gpg-zip
 rm -f /usr/bin/gpgsplit
 rm -f /usr/bin/gpgv
 rm -f /usr/bin/gssc
 rm -f /usr/bin/hostinfo
 rm -f /usr/bin/infocmp
 rm -f /usr/bin/infotocap
 rm -f /usr/bin/iomfsetgamma
 rm -f /usr/bin/killall
 rm -f /usr/bin/ldrestart
 rm -f /usr/bin/locate
 rm -f /usr/bin/login
 rm -f /usr/bin/lzcat
 rm -f /usr/bin/lzcmp
 rm -f /usr/bin/lzdiff
 rm -f /usr/bin/lzegrep
 rm -f /usr/bin/lzfgrep
 rm -f /usr/bin/lzgrep
 rm -f /usr/bin/lzless
 rm -f /usr/bin/lzma
 rm -f /usr/bin/lzmadec
 rm -f /usr/bin/lzmainfo
 rm -f /usr/bin/lzmore
 rm -f /usr/bin/ncurses5-config
 rm -f /usr/bin/openssl
 rm -f /usr/bin/pagesize
 rm -f /usr/bin/passwd
 rm -f /usr/bin/renice
 rm -f /usr/bin/reset
 rm -f /usr/bin/sbdidlaunch
 rm -f /usr/bin/sbreload
 rm -f /usr/bin/scp
 rm -f /usr/bin/script
 rm -f /usr/bin/sdiff
 rm -f /usr/bin/sftp
 rm -f /usr/bin/ssh
 rm -f /usr/bin/ssh-add
 rm -f /usr/bin/ssh-agent
 rm -f /usr/bin/ssh-keygen
 rm -f /usr/bin/ssh-keyscan
 rm -f /usr/bin/sw_vers
 rm -f /usr/bin/tabs
 rm -f /usr/bin/tar
 rm -f /usr/bin/tic
 rm -f /usr/bin/time
 rm -f /usr/bin/toe
 rm -f /usr/bin/tput
 rm -f /usr/bin/tset
 #rm -f /usr/bin/uicache # Remove to bottom?
 rm -f /usr/bin/uiduid
 rm -f /usr/bin/uiopen
 rm -f /usr/bin/unlzma
 rm -f /usr/bin/unxz
 rm -f /usr/bin/update-alternatives
 rm -f /usr/bin/updatedb
 rm -f /usr/bin/which
 rm -f /usr/bin/xargs
 rm -f /usr/bin/xz
 rm -f /usr/bin/xzcat
 rm -f /usr/bin/xzcmp
 rm -f /usr/bin/xzdec
 rm -f /usr/bin/xzdiff
 rm -f /usr/bin/xzegrep
 rm -f /usr/bin/xzfgrep
 rm -f /usr/bin/xzgrep
 rm -f /usr/bin/xzless
 rm -f /usr/bin/xzmore
 rm -rf /usr/include/*
 rm -f /usr/lib/apt
 rm -f /usr/lib/libapt-inst.2.0.0.dylib
 rm -f /usr/lib/libapt-inst.2.0.dylib
 rm -f /usr/lib/libapt-inst.dylib
 rm -f /usr/lib/libapt-pkg.5.0.1.dylib
 rm -f /usr/lib/libapt-pkg.5.0.dylib
 rm -f /usr/lib/libapt-pkg.dylib
 rm -f /usr/lib/libapt-private.0.0.0.dylib
 rm -f /usr/lib/libapt-private.0.0.dylib
 rm -f /usr/lib/libcrypto.1.0.0.dylib
 rm -f /usr/lib/libcrypto.a
 rm -f /usr/lib/libcrypto.dylib
 rm -f /usr/lib/libcurses.a
 rm -f /usr/lib/libdb-6.2.dylib
 rm -f /usr/lib/libdb-6.dylib
 rm -f /usr/lib/libdb.dylib
 rm -f /usr/lib/libdb_sql-6.2.dylib
 rm -f /usr/lib/libdb_sql-6.dylib
 rm -f /usr/lib/libdb_sql.dylib
 rm -f /usr/lib/libdpkg.a
 rm -f /usr/lib/libdpkg.la
 rm -f /usr/lib/libform.a
 rm -f /usr/lib/libform_g.a
 rm -f /usr/lib/liblzma.a
 rm -f /usr/lib/liblzma.la
 rm -f /usr/lib/libmenu.a
 rm -f /usr/lib/libmenu_g.a
 rm -f /usr/lib/libncurses.a
 rm -f /usr/lib/libncurses_g.a
 rm -f /usr/lib/libpanel.a
 rm -f /usr/lib/libpanel_g.a
 rm -f /usr/lib/libssl.1.0.0.dylib
 rm -f /usr/lib/libssl.a
 rm -f /usr/lib/libssl.dylib
 rm -f /usr/lib/terminfo
 rm -rf /usr/lib/bash/
 rm -rf /usr/lib/engines/*
 rm -rf /usr/lib/pkgconfig/
 rm -rf /usr/lib/ssl/
 rm -f /usr/libexec/bigram
 rm -f /usr/libexec/code
 rm -f /usr/libexec/frcode
 rm -f /usr/libexec/rmt
 rm -f /usr/libexec/sftp-server
 rm -f /usr/libexec/ssh-keysign
 rm -f /usr/libexec/ssh-pkcs11-helper
 rm -rf /usr/libexec/apt/
 rm -rf /usr/libexec/cydia/
 rm -rf /usr/libexec/dpkg/
 rm -rf /usr/libexec/gnupg/
 rm -rf /usr/local/lib/*
 rm -f /usr/sbin/ac
 rm -f /usr/sbin/accton
 rm -f /usr/sbin/halt
 rm -f /usr/sbin/iostat
 rm -f /usr/sbin/mkfile
 rm -f /usr/sbin/pwd_mkdb
 rm -f /usr/sbin/reboot
 rm -f /usr/sbin/sshd
 rm -f /usr/sbin/startupfiletool
 rm -f /usr/sbin/sysctl
 rm -f /usr/sbin/vifs
 rm -f /usr/sbin/vipw
 rm -f /usr/sbin/zdump
 rm -f /usr/sbin/zic
 rm -rf /usr/share/bash-completion/
 rm -rf /usr/share/bigboss/
 rm -rf /usr/share/dict/
 rm -rf /usr/share/doc/
 rm -rf /usr/share/dpkg/
 rm -rf /usr/share/gnupg/
 rm -rf /usr/share/tabset/
 rm -rf /usr/share/terminfo/*

 # electra bootstrap
 echo "Removing electra bootstrap.."
 rm -rf /electra/
 rm -f /.bootstrapped_electra

 # part of electra bootstrapping
 echo "Removing launchctl and jailbreakd process leftovers.."
 rm -f /bin/launchctl
 rm -f /var/tmp/jailbreakd.pid
 rm -f /var/run/jailbreakd.pid

 # Topanga
 echo "Removing possible topanga junk (just to make sure you can rejailbreak in case of emergency)"
 rm -f /bin/bzip2_64
 rm -f /bin/hostname
 rm -f /Library/LaunchDaemons/0.reload.plist
 rm -f /Library/LaunchDaemons/dropbear.plist
 rm -f /Library/MobileSubstrate/DynamicLibraries/patcyh.plist
 rm -f /Library/test_inject_springboard.cy
 rm -f /private/etc/alternatives/README
 rm -f /private/etc/pam.d/chkpasswd
 rm -f /private/etc/pam.d/login
 rm -f /private/etc/pam.d/other
 rm -f /private/etc/pam.d/passwd
 rm -f /private/etc/pam.d/samba
 rm -f /private/etc/pam.d/sshd
 rm -f /private/etc/pam.d/su
 rm -f /private/etc/pam.d/sudo
 rm -f /private/etc/profile.d/terminal.sh
 rm -f /private/var/run/utmp
 rm -f /usr/bin/apt
 rm -f /usr/bin/apt-get
 rm -f /usr/bin/chfn
 rm -f /usr/bin/chsh
 rm -f /usr/bin/cycc
 rm -f /usr/bin/cycript
 rm -f /usr/bin/cynject
 rm -f /usr/bin/dselect
 rm -f /usr/bin/env
 rm -f /usr/bin/gnutar
 rm -f /usr/bin/gtar
 rm -f /usr/bin/ldid
 rm -f /usr/bin/ncursesw5-config
 rm -f /usr/lib/_ncurses
 rm -f /usr/lib/libapt-inst.dylib.1.1
 rm -f /usr/lib/libapt-inst.dylib.1.1.0
 rm -f /usr/lib/libapt-pkg.dylib.4.6
 rm -f /usr/lib/libapt-pkg.dylib.4.6.0
 rm -f /usr/lib/libcurl.4.dylib
 rm -f /usr/lib/libcurses.dylib
 rm -f /usr/lib/libcycript.0.dylib
 rm -f /usr/lib/libcycript.cy
 rm -f /usr/lib/libcycript.db
 rm -f /usr/lib/libcycript.dylib
 rm -f /usr/lib/libcycript.jar
 rm -f /usr/lib/libform.5.dylib
 rm -f /usr/lib/libform.dylib
 rm -f /usr/lib/libformw.5.dylib
 rm -f /usr/lib/libformw.dylib
 rm -f /usr/lib/libhistory.5.2.dylib
 rm -f /usr/lib/libhistory.5.dylib
 rm -f /usr/lib/libhistory.6.0.dylib
 rm -f /usr/lib/libhistory.6.dylib
 rm -f /usr/lib/libhistory.dylib
 rm -f /usr/lib/liblzmadec.0.0.0.dylib
 rm -f /usr/lib/liblzmadec.0.dylib
 rm -f /usr/lib/liblzmadec.dylib
 rm -f /usr/lib/liblzmadec.la
 rm -f /usr/lib/libmenu.5.dylib
 rm -f /usr/lib/libmenu.dylib
 rm -f /usr/lib/libmenuw.5.dylib
 rm -f /usr/lib/libmenuw.dylib
 rm -f /usr/lib/libncurses.5.dylib
 rm -f /usr/lib/libncurses.dylib
 rm -f /usr/lib/libncursesw.5.dylib
 rm -f /usr/lib/libncursesw.dylib
 rm -f /usr/lib/libpam.1.0.dylib
 rm -f /usr/lib/libpam.1.dylib
 rm -f /usr/lib/libpam.dylib
 rm -f /usr/lib/libpam_misc.1.dylib
 rm -f /usr/lib/libpam_misc.dylib
 rm -f /usr/lib/libpamc.1.dylib
 rm -f /usr/lib/libpamc.dylib
 rm -f /usr/lib/libpanel.5.dylib
 rm -f /usr/lib/libpanel.dylib
 rm -f /usr/lib/libpanelw.5.dylib
 rm -f /usr/lib/libpanelw.dylib
 rm -f /usr/lib/libpatcyh.dylib
 rm -f /usr/lib/libreadline.5.2.dylib
 rm -f /usr/lib/libreadline.5.dylib
 rm -f /usr/lib/libreadline.6.0.dylib
 rm -f /usr/lib/libreadline.6.dylib
 rm -f /usr/lib/libreadline.dylib
 rm -f /usr/lib/libsubstrate.0.dylib
 rm -f /usr/libexec/MSUnrestrictProcess
 rm -f /usr/libexec/reload
 rm -f /usr/libexec/substrate
 rm -f /usr/local/bin/dropbear
 rm -f /usr/local/bin/dropbearconvert
 rm -f /usr/local/bin/dropbearkey
 rm -f /usr/local/lib/libluajit.a
 rm -f /usr/sbin/start-stop-daemon
 rm -f /usr/sbin/update
 rm -f /usr/share/dict
 rm -rf /private/var/lib/dpkg/
 rm -rf /usr/libexec/cydia/

 # Resetting hosts file
 echo "Fixing up hosts file.."
 echo "##" > /etc/hosts
 echo "# Host Database" >> /etc/hosts
 echo "#" >> /etc/hosts
 echo "# localhost is used to configure the loopback interface" >> /etc/hosts
 echo "# when the system is booting.  Do not change this entry." >> /etc/hosts
 echo "##" >> /etc/hosts
 echo "127.0.0.1 localhost" >> /etc/hosts
 echo "255.255.255.255   broadcasthost" >> /etc/hosts
 echo "::1             localhost" >> /etc/hosts

 #moved to bottom (from big fat bootstrap)
 echo "Removing last tools and clearing ui cache.."
 uicache
 rm -f /usr/bin/uicache
 rm -rf /bootstrap/
 rm -f /bin/sh
 rm -f /bin/rm

 echo "All jailbreak related files are removed! (At least all included in the iOS 11 electra JB)"
 echo "Rebooting... (Keep praying my friend!)"
 kill 1

应用砸壳
3.1 Cydia,搜索并安装frida。电脑端按照官网https://github.com/AloneMonkey/frida-ios-dump操作，中途有可能会需要用pip install update pip 更新pip版本。
3.2 brew install usbmuxd 安装usbmuxd，才能运行 iproxy 2222 22 命令
3.3 dump.py 文件内部找到用户名，密码，主机，端口。根据实际情况修改
```
 User = 'root'
 Password = 'alpine'
 Host = 'localhost'
 Port = 2222
```

3.4 这个应用砸壳的时候必须通过usb与iPhone连接。
3.5 dump.py 后面跟英文应用名称可以使用。但是如果跟中文名称则不能使用。我的办法是通过FileZilla访问/var/containers/Bundle/Application/*/*.metadata.plist里面的MCMMetadataIdentifier 找到bundleId 。dump.py 后面跟 bundleId 中文名称的应用也能正确导出了

https://github.com/AloneMonkey/MonkeyDev

iOS11.3 越狱逆向

猜你喜欢

热点阅读