越狱简单，不写，越狱后，进行一些运行时操作。

项目代码：http://git.oschina.net/lishangkai/reverseproject

这是一些用到的软件或语言：

Openssh:连接手机

iproxy：修改映射

Cycript：一款脚本语言，是混合了objective-c与javascript语法的一个工具，让开发者在命令行下和应用交互，在运行时查看和修改应用

一些命令：

ssh 登录

sshroot@192.168.x.x

密码alpine

Cycript

lishangkaide-iPhone:~ root# cycript -p SpringBoard

cy# UIApp

cy# alert =[[UIAlertView alloc]initWithTitle:'di yi ge ni xiang' message:'di y ci lai ni xiang' delegate: nil cancelButtonTitle:'OK' otherButtonTitles:nil]

#">"

cy#[alert show]

cy#[#0x17ea7980 show]

cy# var shot =[SBScreenShotter sharedInstance]

#""

cy#[shot saveScreenshot:YES]

cy# UIApp

#""

cy# #0x16d3ff00.keyWindow#";layer = >"

cy# sb = #0x16fde9f0

#";layer = >"

cy# sb.alpha = 0.5

0.5

cy# sb.hidden = YES

true

cy# sb.hidden = NO

false

cy# sb.backgroundColor =[UIColor redColor]

lishangkaide-iPhone4:~ root#ps aux查看进程

lishangkaide-iPhone4:~ root#ps -e

lishangkaide-iPhone4:~ root# cycript -p 1288

cy# UIApp

cy# #0x16575230.keyWindow

#";layer = >"

cy# #0x16575230.keyWindow.rootViewController

#""

cy# #0x165f8770.visibleViewControllew

#""

cy# #0x16584ce0.view

#">"

cy# view = #0x16555f60

#">"

cy# *view

{isa:UIView,_layer:#"",_gestureInfo:null,_gestureRecognizers:null,_subviewCache:@[#">",#">",#">",#">"],_charge:0,_tag:0,_viewDelegate:#"",_backgroundColorSystemColorName:@"orangeColor",_countOfMotionEffectsInSubtree:0,_viewFlags:@error,_retainCount:6,_tintAdjustmentDimmingCount:0,_shouldArchiveUIAppearanceTags:0,_interactionTintColor:null,_layoutEngine:null,_boundsWidthVariable:null,_boundsHeightVariable:null,_minXVariable:null,_minYVariable:null,_internalConstraints:null,_constraintsExceptingSubviewAutoresizingConstraints:null}

cy# view0 = #0x16555de0

#">"

cy# label0 = #0x16555c40

#">"

cy# label1 = #0x16555000

#">"

cy# view1 = #0x16554e70

#">"

cy# view1.backgroundColor =[UIColor redColor];

#"UIDeviceRGBColorSpace 1 0 0 1"

cy#[view frame]

{0:{0:0,1:0},1:{0:320,1:480}}

cy#[view setFrame:{0:{0:55,1:75},1:{0:250,1:90}}]

cy# label1.text

@"20"

cy# label1.text = 'haha'

"haha"

详情请参考百度云