Clutch 砸壳

Clutch下载

[GitHub下载最新版]https://github.com/KJCracks/Clutch/releases

链接iphone

ssh root@192.168.1.191

拷贝Clutch到iPhone bin目录

scp Clutch-2.0.4 root@192.168.1.191:/usr/bin/

给予Clutch权限 并重命名(也可不重命名)

chmod +x Clutch-2.0.4 
mv Clutch-2.0.4 clutch

查询未砸壳应用

clutch -i

砸壳

clutch -d + 编号或bundleId

砸壳完成后提示及包路径

DONE: /private/var/mobile/Documents/Dumped/com.tencent.QQMusic-iOS8.0-(Clutch-2.0.4).ipa
Finished dumping com.tencent.QQMusic in 90.6 seconds

验证砸壳是否成功

拷贝包到桌面文件夹
scp -r /private/var/mobile/Documents/Dumped/com.tencent.QQMusic-iOS8.0-\(Clutch-2.0.4\).ipa myxc@192.168.1.47:/Users/xxx/Desktop/QQMusic/
解压ipa
unzip com.tencent.QQMusic-iOS8.0-(Clutch-2.0.4).ipa
拷贝Macho
cp Payload/QQMusic.app/QQMusic ./

查看Macho
otool -l QQMusic | grep crypt

砸壳成功

导出.h文件

class-dump -H QQMusic -o ./Headers/