Clutch下载
[GitHub下载最新版]https://github.com/KJCracks/Clutch/releases
链接iphone
ssh root@192.168.1.191
拷贝Clutch到iPhone bin目录
scp Clutch-2.0.4 root@192.168.1.191:/usr/bin/
给予Clutch权限 并重命名(也可不重命名)
chmod +x Clutch-2.0.4
mv Clutch-2.0.4 clutch
查询未砸壳应用
clutch -i
砸壳
clutch -d + 编号或bundleId
砸壳完成后提示及包路径
DONE: /private/var/mobile/Documents/Dumped/com.tencent.QQMusic-iOS8.0-(Clutch-2.0.4).ipa
Finished dumping com.tencent.QQMusic in 90.6 seconds
验证砸壳是否成功
拷贝包到桌面文件夹
scp -r /private/var/mobile/Documents/Dumped/com.tencent.QQMusic-iOS8.0-\(Clutch-2.0.4\).ipa myxc@192.168.1.47:/Users/xxx/Desktop/QQMusic/
解压ipa
unzip com.tencent.QQMusic-iOS8.0-(Clutch-2.0.4).ipa
拷贝Macho
cp Payload/QQMusic.app/QQMusic ./
查看Macho
otool -l QQMusic | grep crypt
砸壳成功
导出.h文件
class-dump -H QQMusic -o ./Headers/