iOS APP加固之越獄設(shè)備檢測(cè)-code

Header File文件

新建Header File文件“LSDeviceDetection.h”

/*- - - - - - - - - - - - jailbroken check - - - - - - - - - - - - */
#import <unistd.h>
#import <stdlib.h>
#import <sys/stat.h>
#import <dlfcn.h>
#import <mach-o/dyld.h>

#import <UIKit/UIKit.h>

//static inline : 防止靜態(tài)分析

//sandBox integrity check
static int check_jailbroken_sandbox () __attribute__((always_inline));
int check_jailbroken_sandbox () {
    int result = fork();
    if (!result) {
        exit(0);
    }
    if (result>=0) {
        return 1;
    }
    return 0;
}

//check a tweak
static int check_jailbroken_tweak () __attribute__((always_inline));
int check_jailbroken_tweak () {
    //鏈接:http://www.itdecent.cn/p/bff550b3ead4
    uint8_t lmb[] = {'S', 'u', 'b', 's', 't', 'r', 'a', 't', 'e', '/', 'D', 'y', 'n', 'a', 'm', 'i', 'c', 0, };
    NSString *dir = [NSString stringWithFormat:@"/%@/%@%s%@", @"Library", @"Mobile", lmb, @"Libraries"];
    NSArray *dirFiles = [[NSFileManager defaultManager] contentsOfDirectoryAtPath:dir error:nil];
    NSArray *plistFiles = [dirFiles filteredArrayUsingPredicate:
                           [NSPredicate predicateWithFormat:
                            [NSString stringWithFormat:@"%@ %@%@ '.%@%@'",@"self", @"EN", @"DSWITH", @"pli", @"st"]]];
    int cnt = 0;
    for (NSString *file in plistFiles) {
        NSString *filePath = [dir stringByAppendingPathComponent:file];
        NSString *fileContent = [NSString stringWithContentsOfFile:filePath encoding:NSUTF8StringEncoding error:nil];
        if (fileContent && [fileContent rangeOfString:[[NSBundle mainBundle] bundleIdentifier]].location != NSNotFound) {
            cnt ++;
        }
    }
    // 返回有針對(duì)本 app 的 tweak 數(shù)量,為 0 說明沒有
    return cnt;
}

//check plugin
static int check_jailbroken_cydia () __attribute__((always_inline));
int check_jailbroken_cydia () {
    struct stat s;
    int is_jailbroken =
    stat("Library/MobileSubstrate/MobileSubstrate.dylib", &s) == 0 || stat("/Applications/Cydia.app", &s) == 0 || stat("/var/lib/cydia/", &s) == 0 || stat("/var/cache/apt", &s) == 0;
    return is_jailbroken;
}

//check dylib
static int check_jailbroken_dylib () __attribute__((always_inline));
int check_jailbroken_dylib () {
    int ret;
    Dl_info dylib_info;
    int (*func_stat)(const char *,struct stat *) = stat;
    int is_jailbroken = 0;
    if ((ret = dladdr(func_stat, &dylib_info))) {
        if (strcmp(dylib_info.dli_fname, "/usr/lib/system/libsystem_kernel.dylib")) {
            is_jailbroken = 1;
        }
    }
    return is_jailbroken;
}

//check dyld
static int check_jailbroken_dyld () __attribute__((always_inline));
int check_jailbroken_dyld () {
    char *env = getenv("DYLD_INSERT_LIBRARIES");
    int is_jailbroken = 0;//no
    if (env != NULL || env != nil) {
        is_jailbroken = 1;//yes
    }
    return is_jailbroken;
}

static inline __attribute__((always_inline)) void found_jailbroken_device (){
    exit(-1);
}

pch文件

新建pch文件LSProject-Prefix.pch,導(dǎo)入頭文件#import "LSDeviceDetection.h"
pch文件引用鏈接'Target-Build Setting',Precompile Prefix HeaderYES,Prefix Header$PROJECT_DIR/$PROJECT_NAME/LSProject-Prefix.pch

使用示例

if (check_jailbroken_sandbox() || check_jailbroken_tweak() || check_jailbroken_cydia() || check_jailbroken_dylib() || check_jailbroken_dyld()) {
            found_jailbroken_device();
            [[[UIAlertView alloc] initWithTitle:@"錯(cuò)誤" message:@"app不支持越獄或破解版的手機(jī)." delegate:nil cancelButtonTitle:nil otherButtonTitles:nil, nil] show];
}

Tips:

  • 利用static關(guān)鍵字裁掉函數(shù)符號(hào)
    原理如果函數(shù)屬性為 static ,那么編譯時(shí)該函數(shù)符號(hào)就會(huì)被解析為local符號(hào)。在發(fā)布release程序時(shí)(用Xcode打包編譯二進(jìn)制)默認(rèn)會(huì)strip裁掉這些函數(shù)符號(hào),無疑給逆向者加大了工作難度。
  • static inline:防止靜態(tài)分析
    可參考iOS安全–使用static inline方式編譯函數(shù),防止靜態(tài)分析

感謝

  1. http://www.itdecent.cn/p/bff550b3ead4
  2. http://www.blogfshare.com/ioss-static-inline.html
  3. http://www.itdecent.cn/p/0ea7f4468bec

地址鏈接:Demo

最后編輯于
?著作權(quán)歸作者所有,轉(zhuǎn)載或內(nèi)容合作請(qǐng)聯(lián)系作者
【社區(qū)內(nèi)容提示】社區(qū)部分內(nèi)容疑似由AI輔助生成,瀏覽時(shí)請(qǐng)結(jié)合常識(shí)與多方信息審慎甄別。
平臺(tái)聲明:文章內(nèi)容(如有圖片或視頻亦包括在內(nèi))由作者上傳并發(fā)布,文章內(nèi)容僅代表作者本人觀點(diǎn),簡書系信息發(fā)布平臺(tái),僅提供信息存儲(chǔ)服務(wù)。

相關(guān)閱讀更多精彩內(nèi)容

友情鏈接更多精彩內(nèi)容