登录 注册
开源 企业版 高校版 私有云 模力方舟
扫描微信二维码支付
取消
支付完成
Watch
不关注 关注所有动态 仅关注版本发行动态 关注但不提醒动态
1 Star 6 Fork 2

刘柏江/adcpp-ios-dump

代码 Issues 0 Pull Requests 0 Wiki 统计 流水线
服务
加入 Gitee
与超过 1200万 开发者一起发现、参与优秀开源项目，私有仓库也完全免费 ：）
免费加入
克隆/下载
分支 1
标签 0
undefined
贡献代码
同步代码
创建 Pull Request
了解更多
对比差异 通过 Pull Request 同步
同步更新到分支
通过 Pull Request 同步
将会在向当前分支创建一个 Pull
Request，合入后将完成同步
取消
提示: 由于 Git 不支持空文件夾，创建文件夹后会生成空的 .keep 文件
adcpp-ios-dump-editor/adcpp-ios-dump-editor.xcodeproj
doc
.gitignore
LICENSE
README.md
adcpp-ios-dump.adc
adcpp-ios-dump.mm
adcpp-ios-dump.py
Loading...
README
MIT

adcpp-ios-dump

介绍

一键Dump iOS加密MachO至A64Dbg与之对应的缓存目录，源码解读在这里。

软件架构

adcpp-ios-dump.py : A64Dbg插件主程序，用于人机交互；

adcpp-ios-dump.adc : A64Dbg插件附加程序，用于Dump加密的MachO，它是由主程序发送至目标iOS进程中的Payload程序；

adcpp-ios-dump.mm : A64Dbg插件附加程序源代码，用于macOS平台开发者模式修改adcpp-ios-dump.mm的实现逻辑；

安装教程

将adcpp-ios-dump.py、adcpp-ios-dump.adc拷贝至A64Dbg插件目录，然后重启A64Dbg即可。

macOS/Linux目录为：

~/A64Dbg/plugin

Windows目录为：

SysDrive:\Users\~\A64Dbg\plugin

使用说明

1.将A64Dbg调试模式设置为Remote UraniumVM iOS；

2.Attach要砸壳的目标进程；

3.执行主菜单Plugins/adcpp-ios-dump，然后就可以在A64Dbg缓存目录得到对应解密后的MachO文件；

adcpp_ios_dump : Start dumping process 1162 (Build Oct  9 2021 14:58:25).
adcpp_ios_dump : Suspending task thread 00000303 with kernel result 0.
adcpp_ios_dump : Suspending task thread 0000300b with kernel result 0.
adcpp_ios_dump : Suspending task thread 00003203 with kernel result 0.
adcpp_ios_dump : Suspending task thread 0000a03b with kernel result 0.
adcpp_ios_dump : Suspending task thread 00005903 with kernel result 0.
adcpp_ios_dump : Ignored adcpp thread 00010107.
adcpp_ios_dump : Dumping /var/containers/Bundle/Application/6155B008-47B9-4660-857D-D0CC77A52838/iOSApp.app/iOSApp.
adcpp_ios_dump : Readed file iOSApp, size 62505088.
adcpp_ios_dump : Min version a0000, encrypt info 0x4000,50118656.
adcpp_ios_dump : Sending iOSApp, 10.0.0, 62505088.
Received iOSApp, 10.0.0, 62505088.
Saved to ~/A64Dbg/decache/iOS/arm64-apple-ios/iOSApp.
Linked to ~/A64Dbg/decache/iOS/arm64-apple-ios10.0.0/iOSApp.
adcpp_ios_dump : Dumping /private/var/containers/Bundle/Application/6155B008-47B9-4660-857D-D0CC77A52838/iOSApp.app/Frameworks/webview_flutter.framework/webview_flutter.
adcpp_ios_dump : Readed file webview_flutter, size 123376.
adcpp_ios_dump : Min version 90000, encrypt info 0x4000,32768.
adcpp_ios_dump : Sending webview_flutter, 9.0.0, 123376.
Received webview_flutter, 9.0.0, 123376.
Saved to ~/A64Dbg/decache/iOS/arm64-apple-ios/webview_flutter.
Linked to ~/A64Dbg/decache/iOS/arm64-apple-ios9.0.0/webview_flutter.
adcpp_ios_dump : Dumping /private/var/containers/Bundle/Application/6155B008-47B9-4660-857D-D0CC77A52838/iOSApp.app/Frameworks/yoga.framework/yoga.
adcpp_ios_dump : Readed file yoga, size 197248.
adcpp_ios_dump : Min version 80000, encrypt info 0x4000,65536.
adcpp_ios_dump : Sending yoga, 8.0.0, 197248.
Received yoga, 8.0.0, 197248.
Saved to ~/A64Dbg/decache/iOS/arm64-apple-ios/yoga.
Linked to ~/A64Dbg/decache/iOS/arm64-apple-ios8.0.0/yoga.
adcpp_ios_dump : Dumping /private/var/containers/Bundle/Application/6155B008-47B9-4660-857D-D0CC77A52838/iOSApp.app/Frameworks/QMUIKit.framework/QMUIKit.
adcpp_ios_dump : Readed file QMUIKit, size 1812032.
adcpp_ios_dump : Min version 80000, encrypt info 0x4000,983040.
adcpp_ios_dump : Sending QMUIKit, 8.0.0, 1812032.
Received QMUIKit, 8.0.0, 1812032.
Saved to ~/A64Dbg/decache/iOS/arm64-apple-ios/QMUIKit.
Linked to ~/A64Dbg/decache/iOS/arm64-apple-ios8.0.0/QMUIKit.
adcpp_ios_dump : Resuming task thread 00011807 with kernel result 0.
adcpp_ios_dump : Resuming task thread 00011317 with kernel result 0.
adcpp_ios_dump : Resuming task thread 0001264b with kernel result 0.
adcpp_ios_dump : Resuming task thread 00004677 with kernel result 0.
adcpp_ios_dump : Resuming task thread 0000ad13 with kernel result 0.
adcpp_ios_dump : Ignored adcpp thread 00010107.
adcpp_ios_dump : Finished dumping.

版本历史

2022/2/21:

  • 修复没有LC_VERSION_MIN_IPHONEOS的MachO无法砸壳的问题；

2021/10/29:

  • 内置于A64Dbg，无需再手动安装该插件；

2021/10/9:

  • 发布V0.1.1;
  • 1.修复对于Fat文件砸壳崩溃的问题；
  • 2.修复在iOS13砸壳崩溃的问题；
  • 3.添加砸壳时暂停其他线程避免干扰提高稳定性的能力；

2021/9/16:

  • 发布V0.1.0;
  • 实现一键砸壳iOS程序至A64Dbg对应缓存目录的功能；
MIT License Copyright (c) 2021 刘柏江 Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

简介

一键Dump iOS加密MachO至A64Dbg与之对应的缓存目录。 展开 收起
暂无标签
/geekneo/adcpp-ios-dump
C++ 等 2 种语言
Objective-C++
57.9%
Python
42.1%
MIT
使用 MIT 开源许可协议
取消

发行版

暂无发行版

贡献者

全部

近期动态

不能加载更多了
马建仓 AI 助手
尝试更多
代码解读
代码找茬
代码优化
C++
1
https://gitee.com/geekneo/adcpp-ios-dump.git
git@gitee.com:geekneo/adcpp-ios-dump.git
geekneo
adcpp-ios-dump
adcpp-ios-dump
master
点此查找更多帮助

搜索帮助

Git 命令在线学习 如何在 Gitee 导入 GitHub 仓库
Git 仓库基础操作
企业版和社区版功能对比
SSH 公钥设置
如何处理代码冲突
仓库体积过大，如何减小？
如何找回被删除的仓库数据
Gitee 产品配额说明
GitHub仓库快速导入Gitee及同步更新
什么是 Release（发行版）
将 PHP 项目自动发布到 packagist.org
评论
仓库举报
回到顶部