問題總結(jié)
1,使用usbmuxd SSH連接手機
iOS 12 需要用cydia在手機上安裝 openssh,后才能連接ssh,執(zhí)行命令
iproxy 2222 22
ssh -p 2222 root@127.0.0.1
root@127.0.0.1's password:
需要輸入密碼 iPhone root權(quán)限默認密碼alpine
注意:這里有時候如果你外接鼠標了會連接錯誤,需要把鼠標拔掉或者指定id連接
2, dump.py 應(yīng)用名或bundle id進行砸殼.
執(zhí)行導出ipa操作時報錯 ~/.cache/frida/gadget-ios.dylib
$ gunzip frida-gadget-xx.y.zz-ios-universal.dylib.gz
$ mkdir -p ~/.cache/frida
$ cp frida-gadget-xx.y.zz-ios-universal.dylib ~/.cache/frida/gadget-ios.dylib
下載frida-gadget-xx.y.zz-ios-universal.dylib.gz,解壓縮后執(zhí)行命令 然后把文件copy到目標文件夾,注意改名字gadget-ios.dylib
3,導出文件時報權(quán)限問題報錯
zip I/O error: Permission denied
zip error: Could not create output file (/opt/dump/frida-ios-dump/抖音短視頻.ipa)
Command '(u'zip', u'-qr', u'/opt/dump/frida-ios-dump/\u6296\u97f3\u77ed\u89c6\u9891.ipa', u'./Payload')' returned non-zero exit status 15
解決辦法:在命令行前面加了 sudo提升權(quán)限
frida-ios-dump git:(master) sudo python dump.py com.ss.iphone.ugc.Aweme
Start the target app com.ss.iphone.ugc.Aweme
Dumping 抖音短視頻 to /tmp
[frida-ios-dump]: ByteRtcEngineKit.framework has been loaded.
[frida-ios-dump]: AgoraRtcEngineKit.framework has been loaded.
[frida-ios-dump]: EffectSDK_iOSShell.framework has been loaded.
start dump /var/containers/Bundle/Application/CED00218-4BAA-45BC-A92E-1694482BF9F0/Aweme.app/Aweme
Aweme.fid: 100%|██████████| 117M/117M [00:03<00:00, 34.6MB/s]
start dump /private/var/containers/Bundle/Application/CED00218-4BAA-45BC-A92E-1694482BF9F0/Aweme.app/Frameworks/AgoraRtcEngineKit.framework/AgoraRtcEngineKit
AgoraRtcEngineKit.fid: 100%|██████████| 7.69M/7.69M [00:00<00:00, 20.3MB/s]
start dump /private/var/containers/Bundle/Application/CED00218-4BAA-45BC-A92E-1694482BF9F0/Aweme.app/Frameworks/ByteRtcEngineKit.framework/ByteRtcEngineKit
ByteRtcEngineKit.fid: 100%|██████████| 7.80M/7.80M [00:00<00:00, 20.7MB/s]
start dump /var/containers/Bundle/Application/CED00218-4BAA-45BC-A92E-1694482BF9F0/Aweme.app/Frameworks/EffectSDK_iOSShell.framework/EffectSDK_iOSShell
EffectSDK_iOSShell.fid: 100%|██████████| 20.8M/20.8M [00:00<00:00, 30.8MB/s]
Assets.car: 384MB [00:25, 16.0MB/s]
0.00B [00:00, ?B/s]Generating "抖音短視頻.ipa"
0.00B [00:00, ?B/s]
? frida-ios-dump git:(master)