一.Framework注入
????1.PROJECT TARGETS 下方?"+","Cocoa Touch Framework","MuyangHook"
????2.左側(cè)"MuyangHook" 新建類
????3.編譯build,新的Framework會(huì)出現(xiàn)在 Products/.app “Show in Finder”成目錄
????4.顯示app包內(nèi)容.app/Frameworks/里包含新建Framework。新版XCode編譯后自動(dòng)包含
????5.新建Framework編譯后會(huì)自動(dòng)進(jìn)入.app/Frameworks,但是MachOView/Fat Binary/Executable/Load Commands里并沒有新建的Framework。MachO文件不包含
????6.將.app/Frameworks/MuyangHook.framework/MuyangHook 寫入MachO文件,修改的越獄的原始app包。工程的APP目錄
????7.yololib修改。進(jìn)入 Wechat.app包內(nèi)容/Payload/Wechat.app
? ? yololib Wechat Frameworks/MuyangHook.framework/MuyangHook
????8.重新生成ipa包,進(jìn)入Payload所在層目錄。 zip -ry WeChat.ipa Payload
????9.替換APP目錄的ipad包
二.Dylib注入
a.Copy Files注入
????1.PROJECT TARGETS 下方?"+","Library","MuyangHook"
????2.修改General,"Deloyment Type","9.0"
? ?????修改Library,"Build Settings","Base SDK" "iOS"
? ?????修改Library,"Code Signing identity","iOS Developer"
????3.給TARGETS 添加依賴 包含 Library?
????? ?"TARGETS" "Build Phases" "+" "New Copy Files Phase","Copy Files -> Destination Frameworks" "+ libMuyangHook.dylib"
b.腳本注入
????TARGET_APP_PATH="$BUILD_PRODUCTS_DIR/$TARGET_NAME.app"
????APP_BINARY='plutil -convert xml1 -o -&TARGET_APP_PATH/Info.plist|grep -A1 Exec|tail-n1|cut -f2 -d\>|cut -f1 -d\<'
????yololib "$TARGET_APP_PATH/$APP_BINARY" "Frameworks/libMuyangHook.dylib"