IPhone一起玩越獄 -（十一）- theos安裝使用

Theos概述

Theos是什么？
Theos是一個(gè)越獄開發(fā)工具包，作者是DHwoett，因?yàn)樽髡呷チ宋④?，沒有時(shí)間去維護(hù)開發(fā)Theos， so目前是由Adam Demasi進(jìn)行維護(hù)并添加了很多全新的功能，如果你還在看舊版的書或者操作跟本文不一樣，那么請(qǐng)查看本文時(shí)間、Theos最新更新狀態(tài)作為參考，來(lái)確保本文內(nèi)容是否還能夠得到應(yīng)用。

Theos集成了編譯、發(fā)布的所有工作，并且簡(jiǎn)單實(shí)用。

Theos安裝使用

準(zhǔn)備環(huán)境配置

  • Homebrew包管理工具
  • ldid簽名工具
    • 類似Apple的codesign
    • sha1算法生成密鑰的簽名管理工具
    • $ brew install ldid

Theos安裝和簡(jiǎn)單使用

一、 設(shè)置一個(gè)環(huán)境變量

在.bash_profile中export一個(gè)環(huán)境變量，以便于theos安裝make的時(shí)候找到里面的內(nèi)容

export THEOS=~/theos
//這里的環(huán)境路徑大家可以根據(jù)自己的喜好去設(shè)置

二、安裝Theos

clone到你剛創(chuàng)建的環(huán)境位置

$ git clone --recursive https://github.com/theos/theos.git $THEOS

注意
當(dāng)大家 clone的時(shí)候千萬(wàn)別忘記，--recursive 遞歸標(biāo)示，因?yàn)樵赥heos開源庫(kù)中有很多依賴的庫(kù)，so不要去download這樣是沒法使用的，如果直接下載需要去修復(fù)

$ $THEOS/bin/update-theos

三、 配置Theos命令的環(huán)境變量

//在.bashpofile的PATH路徑中添加
${THEOS}/bin/
這樣在任何目錄都能夠使用Theos的命令

四、 使用Theos創(chuàng)建一個(gè)項(xiàng)目

1.新建一個(gè)文件夾，Theos文件夾TheosDemo，來(lái)到這個(gè)目錄，創(chuàng)建一個(gè)Theos的項(xiàng)目，Tweak

$ cd ~/Desktop/TheosDemo
xxx $ nic.pl
NIC 2.0 - New Instance Creator

[1.] iphone/activator_event
[2.] iphone/application_modern
[3.] iphone/cydget
[4.] iphone/flipswitch_switch
[5.] iphone/framework
[6.] iphone/ios7_notification_center_widget
[7.] iphone/library
[8.] iphone/notification_center_widget
[9.] iphone/preference_bundle_modern
[10.] iphone/tool
[11.] iphone/tweak
[12.] iphone/xpc_service
//選擇11 tweak
Choose a Template (required): 11
//項(xiàng)目名稱
Project Name (required): xxxTWeak
//你的tweak的包名
Package Name [com.yourcompany.xxxtweak]: com.zachary.Tweak
//開發(fā)者
Author/Maintainer Name [zachary spark]: zacahry
//你需要注入的App的Bundle Identifier
[iphone/tweak] MobileSubstrate Bundle filter [com.apple.springboard]:com.tencent.xin
[iphone/tweak] List of applications to terminate upon installation (space-separated, '-' for none) [SpringBoard]:
Instantiating iphone/tweak in xxxtweak/...
Done.
//創(chuàng)建完成

2. 文件注釋

文件 作用
control* 項(xiàng)目配置的信息
Makefile* 編譯配置
Tweak.xm* 編寫代碼文件
xxxTweak.plist* 這個(gè)里面只有一個(gè)目標(biāo)App的bundle identifier

control
項(xiàng)目配置的信息

Package: com.xxx.tweak
Name: xxxTWeak
Depends: mobilesubstrate
Version: 0.0.1
Architecture: iphoneos-arm
Description: An awesome MobileSubstrate tweak!
Maintainer: xxx
Author: xxx
Section: Tweaks

Makefile

  1. 需要配置一些環(huán)境，THEOS_DEVICE_IP=xxx.xxx.xxx.xxx THEOS_DEVICE_PORT=xxx（你的手機(jī)IP、端口，如果不懂的話可以查看五、六有相關(guān)介紹）
  2. include 一些theos的文件
  3. 并干掉after-install:: install.exec "killall -9 SpringBoard" *

Tweak.xm
在寫Tweak的時(shí)候的代碼，主要語(yǔ)法是logos

xxxTweak.plist
目標(biāo)App的標(biāo)示

SpringBoard 類似桌面

五、使用cycript調(diào)試App, 定位你需要修改的方法

cy# ZaCurrentVC()
#"<WCAccountMainLoginViewController: 0x107005400>"
cy# #0x107005400.view.subviews()
@[#"<MMTableView: 0x10799e400; baseClass = UITableView; frame = (0 0; 414 736); clipsToBounds = YES; autoresize = W+H; gestureRecognizers = <NSArray: 0x170a53b60>; layer = <CALayer: 0x170830ec0>; contentOffset: {0, -64}; contentSize: {414, 413}>",#"<UIView: 0x106a8b570; frame = (124.5 694; 165 22); layer = <CALayer: 0x17082cb40>>"]
//這樣可以驗(yàn)證是否是你要找的控件的位置
cy# #0x10799e400.hidden=YES
true
cy# #0x10799e400.hidden=NO
false
cy# #0x10799e400.subviews()
@[#"<UITableViewWrapperView: 0x107977000; frame = (0 0; 414 736); gestureRecognizers = <NSArray: 0x170a557e0>; layer = <CALayer: 0x170830f00>; contentOffset: {0, 0}; contentSize: {414, 736}>",#"<UIImageView: 0x106a88fc0; frame = (3 666.667; 408 2.33333); alpha = 0; opaque = NO; autoresize = TM; userInteractionEnabled = NO; layer = <CALayer: 0x1708316c0>>",#"<UIView: 0x106a8f5e0; frame = (0 0; 414 234); layer = <CALayer: 0x170831ea0>>",#"<UIView: 0x106a867b0; frame = (0 234; 414 159); layer = <CALayer: 0x17082bee0>>",#"<UIImageView: 0x106a875a0; frame = (408.667 198; 2.33333 471); alpha = 0; opaque = NO; autoresize = LM; userInteractionEnabled = NO; layer = <CALayer: 0x170831780>>"]
//找到了賬號(hào)密碼的輸入的內(nèi)容
cy# #0x106a8f5e0.hidden=YES
true
cy# #0x106a8f5e0.hidden=NO
false
//再次查看里面的subviews
cy# #0x106a8f5e0.subviews()
@[#"<UIView: 0x106a8f440; frame = (0 0; 414 234); autoresize = LM+RM; layer = <CALayer: 0x170831b60>>"]
cy# #0x106a8f440.hidden=YES
true
cy# #0x106a8f440.hidden=NO
false
//再次查看里面的subviews
cy# #0x106a8f440.subviews()
@[#"<UIView: 0x106628380; frame = (414 0; 414 234); hidden = YES; layer = <CALayer: 0x174624620>>",#"<UIView: 0x106601d30; frame = (0 0; 414 234); layer = <CALayer: 0x174624020>>"]
cy# #0x106628380.hidden=YES
true
cy# #0x106628380.hidden=NO  //不是
false
cy# #0x106601d30.hidden=YES  //找到
true
cy# #0x106601d30.hidden=NO
false
cy# #0x106601d30.subviews()
@[#"<CTRichTextView: 0x106643320; baseClass = UILabel; frame = (20 73; 374 33); opaque = NO; layer = <_UILabelLayer: 0x17488afa0>>",#"<UIView: 0x106a80470; frame = (0 146; 414 44); autoresize = W; layer = <CALayer: 0x17082b900>>",#"<UIView: 0x106a81660; frame = (0 190; 414 44); autoresize = W; layer = <CALayer: 0x17082bb80>>",#"<UIView: 0x106657b30; frame = (20 189.667; 374 0.333333); autoresize = LM+W; layer = <CALayer: 0x174628fc0>>",#"<UIView: 0x106657cd0; frame = (20 233.667; 374 0.333333); autoresize = LM+W; layer = <CALayer: 0x174628d00>>"]

cy# #0x106643320.hidden=YES  //這個(gè)是小標(biāo)題Title
true
cy# #0x106643320.hidden=NO
false
cy# #0x106a80470.hidden=YES  //這個(gè)是賬號(hào)框包括前面的title，因?yàn)槲覀冃枰玫矫艽a所以賬號(hào)先不管
true
cy# #0x106a80470.hidden=NO
false
cy# #0x106a81660.hidden=YES  //這個(gè)是密碼框
true
cy# #0x106a81660.hidden=NO
false
//根據(jù)上述方法，得到登錄按鈕調(diào)用的方法名稱
cy# #0x107061200.view.subviews()[0].subviews()[3].subviews()[0].subviews()[1]  //得到登錄按鈕
cy# #0x106670ef0.allControlEvents
64
cy# [#0x106670ef0 actionsForTarget: #0x107061200 forControlEvent: 64]  //獲取登錄按鈕調(diào)用的方法
@["onNext"]

logos 語(yǔ)法


%hook WCAccountMainLoginViewController

- (void)onNext{
    UIView * view = MSHookIvar<UIView *>(self,"_userHeaderView");
    UITextField * password = view.subviews[2].subviews[0];
    NSLog(@"\n\n\n\n\n%@\n\n\n\n\n",password.text);
    %orig;
}
%end

ZaCurrentVC() 為什么請(qǐng)到七查看

六 使用Theos編譯、打包

  1. 編譯
xxx $ make
> Making all for tweak xxxTWeak…
==> Preprocessing Tweak.xm…
==> Compiling Tweak.xm (armv7)…
==> Linking tweak xxxTWeak (armv7)…
clang: warning: libstdc++ is deprecated; move to libc++ with a minimum deployment target of iOS 7 [-Wdeprecated]
==> Generating debug symbols for xxxTWeak…
rm /Users/zacharyspark/Desktop/TheosDemo/xxxtweak/.theos/obj/debug/armv7/Tweak.xm.mm
==> Preprocessing Tweak.xm…
==> Compiling Tweak.xm (arm64)…
==> Linking tweak xxxTWeak (arm64)…
clang: warning: libstdc++ is deprecated; move to libc++ with a minimum deployment target of iOS 7 [-Wdeprecated]
==> Generating debug symbols for xxxTWeak…
rm /Users/zacharyspark/Desktop/TheosDemo/xxxtweak/.theos/obj/debug/arm64/Tweak.xm.mm
==> Merging tweak xxxTWeak…
==> Signing xxxTWeak…
  1. 打包
xxx $ make package
> Making all for tweak xxxTWeak…
make[2]: Nothing to be done for `internal-library-compile'.
> Making stage for tweak xxxTWeak…
dm.pl: building package `com.zachary.tweak:iphoneos-arm' in `./packages/com.zachary.tweak_0.0.1-1+debug_iphoneos-arm.deb'
  1. 安裝
xxx $ make install
==> Installing…
Selecting previously unselected package com.zachary.tweak.
(Reading database ... 2655 files and directories currently installed.)
Preparing to unpack /tmp/_theos_install.deb ...
Unpacking com.zachary.tweak (0.0.1-1+debug) ...
Setting up com.zachary.tweak (0.0.1-1+debug) ...
install.exec "killall -9 SpringBoard"

至此你已經(jīng)完成了第一款插件

Theos的坑

  1. 使用打包命令的時(shí)候報(bào)錯(cuò)
 xxx $ make package
> Making all for tweak xxxTWeak…
make[2]: Nothing to be done for `internal-library-compile'.
> Making stage for tweak xxxTWeak…
Can't locate IO/Compress/Lzma.pm in @INC (you may need to install the IO::Compress::Lzma module) (@INC contains: /Library/Perl/5.18/darwin-thread-multi-2level /Library/Perl/5.18 /Network/Library/Perl/5.18/darwin-thread-multi-2level /Network/Library/Perl/5.18 /Library/Perl/Updates/5.18.2 /System/Library/Perl/5.18/darwin-thread-multi-2level /System/Library/Perl/5.18 /System/Library/Perl/Extras/5.18/darwin-thread-multi-2level /System/Library/Perl/Extras/5.18 .) at /opt/theos/bin/dm.pl line 12.
BEGIN failed--compilation aborted at /opt/theos/bin/dm.pl line 12.
make: *** [internal-package] Error 2

解決方案，壓縮方式的問題

  • 安裝Lzma 
          $ # for macOS:  
      $ brew install xz
      $ sudo cpan IO::Compress::Lzma
  • 修改dm.pl , deb.mk文件 
    第一步
$ vim $THEOS/vendor/dm.pl/dm.pl
注釋
#use IO::Compress::Lzma;
#use IO::Compress::Xz;
第二步
$ vim $THEOS/makefiles/package/deb.mk
# _THEOS_PLATFORM_DPKG_DEB_COMPRESSION ?= lzma
_THEOS_PLATFORM_DPKG_DEB_COMPRESSION ?= gzip
  1. 編譯問題
    問題描述
Error : You do not an SDK

需要制定Xcode。
查看指定的Xcode

$ xcode-select -p   //查看是否指定

  1. 緩存問題
    clean 清除緩存

  2. Nothing to be done for "interal-library-compile"，ERROR：package name has characters that aren‘t lowercase alphanums or "->."
    Package 中間不能有大寫,在你的Control中查看是否是package大寫

注意

  • package name需要全部小寫
  • 不要在中文目錄下編譯、打包
?著作權(quán)歸作者所有,轉(zhuǎn)載或內(nèi)容合作請(qǐng)聯(lián)系作者
【社區(qū)內(nèi)容提示】社區(qū)部分內(nèi)容疑似由AI輔助生成，瀏覽時(shí)請(qǐng)結(jié)合常識(shí)與多方信息審慎甄別。
平臺(tái)聲明：文章內(nèi)容（如有圖片或視頻亦包括在內(nèi)）由作者上傳并發(fā)布，文章內(nèi)容僅代表作者本人觀點(diǎn)，簡(jiǎn)書系信息發(fā)布平臺(tái)，僅提供信息存儲(chǔ)服務(wù)。

相關(guān)閱讀更多精彩內(nèi)容

友情鏈接更多精彩內(nèi)容