{"id":3767,"date":"2023-08-25T13:12:10","date_gmt":"2023-08-25T05:12:10","guid":{"rendered":"https:\/\/www.yimenyun.cn\/emen\/?p=3767"},"modified":"2023-08-25T13:12:10","modified_gmt":"2023-08-25T05:12:10","slug":"%e4%b8%80%e9%94%aeios%e5%85%8d%e7%ad%be%e5%b0%81%e5%8c%85%e6%98%af%e6%80%8e%e4%b9%88%e5%81%9a%e5%88%b0%e7%9a%84","status":"publish","type":"post","link":"https:\/\/www.yimenyun.cn\/emen\/3767\/","title":{"rendered":"\u4e00\u952eios\u514d\u7b7e\u5c01\u5305\u662f\u600e\u4e48\u505a\u5230\u7684?"},"content":{"rendered":"
\u4e00\u952eiOS\u514d\u7b7e\u5c01\u5305\uff08iOS App No Code Signing\uff09<\/p>\n
\u4e00\u952eiOS\u514d\u7b7e\u5c01\u5305\u662f\u4ece\u4f20\u7edf\u7684iOS\u5e94\u7528\u5f00\u53d1\u6d41\u7a0b\u4e2d\u79fb\u9664\u4ee3\u7801\u7b7e\u540d\u9636\u6bb5\u7684\u4e00\u79cd\u65b9\u6cd5\uff0c\u5373\u65e0\u9700Apple Developer\u8d26\u6237\u4e5f\u53ef\u4ee5\u5c06\u5e94\u7528\u5b89\u88c5\u5230iOS\u8bbe\u5907\u4e0a\u3002\u8fd9\u79cd\u65b9\u6cd5\u4e3b\u8981\u9002\u7528\u4e8e\u6d4b\u8bd5\u548c\u5b66\u672f\u7814\u7a76\u7b49\u573a\u666f\uff0c\u4f46\u8bf7\u6ce8\u610f\uff0c\u8fd9\u4e9b\u65b9\u6cd5\u53ef\u80fd\u8fdd\u53cd\u4e86Apple\u7684\u5f00\u53d1\u8005\u534f\u8bae\uff0c\u4e0d\u5efa\u8bae\u7528\u4e8e\u6b63\u5f0f\u4ea7\u54c1\u53d1\u5e03\u3002<\/p>\n
\u539f\u7406\uff1a<\/p>\n
\u65e0\u9700\u5f00\u53d1\u8005\u8d26\u53f7\u7684\u7b7e\u540d\u8fc7\u7a0b\u4e3b\u8981\u4f9d\u8d56\u4e8e\u4ee5\u4e0b\u6280\u672f\uff1a<\/p>\n
1. \u4f7f\u7528\u5f00\u6e90\u7684\u53cd\u7f16\u8bd1\u5de5\u5177\uff08\u5982Clutch\u3001frida\u7b49\uff09\u7834\u89e3\u539f\u6709\u7684IPA\u6587\u4ef6\uff0c\u89e3\u5305\u540e\u53ef\u4ee5\u5f97\u5230\u89e3\u5bc6\u540e\u7684\u4e8c\u8fdb\u5236\u4e3b\u4f53\u3002<\/p>\n
2. \u901a\u8fc7\u52a8\u6001\u52a0\u8f7d\u5e93\u6280\u672f\uff08\u5982Cydia Substrate\u3001Frida code injection\u7b49\uff09\u3001\u4ee5\u53ca\u901a\u8fc7\u9006\u5411\u5de5\u7a0b\u6280\u672f\u9006\u5411\u5206\u6790\uff0c\u53ef\u7f16\u8f91\u3001\u4fee\u6539App\u7684\u903b\u8f91\u4ee3\u7801\u82f9\u679c\u624b\u673awebclip\u63cf\u8ff0\u6587\u4ef6\u600e\u4e48\u5220\u9664<\/a>\u3002<\/p>\n 3. \u64cd\u4f5cplist\u6587\u4ef6\uff0c\u4fee\u6539\u539f\u6709\u7684Bundle ID\u4e3a\u65b0\u7684Bundle ID\uff0c\u7528\u4ee5\u7ed5\u8fc7Apple\u7684\u5f00\u53d1\u8005\u8bc1\u4e66\u68c0\u67e5\u3002<\/p>\n 4. \u6700\u540e\uff0c\u518d\u5c06\u4fee\u6539\u540e\u7684\u5e94\u7528\u6587\u4ef6\u5c01\u88c5\u6210\u65b0\u7684IPA\u6587\u4ef6\uff0c\u5728\u8d8a\u72f1\u8bbe\u5907\uff08jailbroken devices\uff09\u6216\u8005\u4f7f\u7528\u7b2c\u4e09\u65b9\u5b89\u88c5\u5de5\u5177\uff08\u5982Cydia Impactor\uff09\u5c06\u5e94\u7528\u5b89\u88c5\u5230\u975e\u8d8a\u72f1\u8bbe\u5907\uff08\u9700\u8981\u4fe1\u4efb\u76f8\u5e94\u7684\u8bc1\u4e66\uff09\u3002<\/p>\n \u8be6\u7ec6\u4ecb\u7ecd\uff1a<\/p>\n \u4ee5\u4e0b\u662f\u8be6\u7ec6\u7684\u514d\u7b7e\u5c01\u5305\u6559\u7a0b\uff1a<\/p>\n 1. \u51c6\u5907\u5de5\u4f5c\uff1a<\/p>\n – \u8d8a\u72f1iOS\u8bbe\u5907\u6216\u4f7f\u7528\u7b2c\u4e09\u65b9\u5b89\u88c5\u8f6f\u4ef6\uff08\u5982AltServer\u3001Cydia Impactor\u7b49\uff09<\/p>\n – \u5df2\u7834\u89e3\u7684IPA\u6587\u4ef6\uff08\u4f7f\u7528Clutch\u6216\u5176\u4ed6\u53cd\u7f16\u8bd1\u5de5\u5177\u8fdb\u884c\u7834\u89e3\uff09<\/p>\n 2. \u89e3\u5bc6IPA\u6587\u4ef6\uff1a<\/p>\n \u5c06\u7834\u89e3\u597d\u7684IPA\u6587\u4ef6\u89e3\u538b\uff0c\u89e3\u538b\u540e\u5f97\u5230Payload\u6587\u4ef6\u5939\uff0c\u6253\u5f00\u5e76\u67e5\u627e.app\u6587\u4ef6\u5939\uff0c\u53ef\u770b\u5230app\u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\u3002<\/p>\n 3. \u4fee\u6539\u903b\u8f91\u4ee3\u7801\uff08\u53ef\u9009\uff09\uff1a<\/p>\n \u53ef\u4ee5\u4f7f\u7528\u53cd\u7f16\u8bd1\u5de5\u5177\u5f88Hopper\u3001IDA\u7b49\u5bf9\u89e3\u5bc6\u540e\u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\u8fdb\u884c\u64cd\u4f5c\uff0c\u6839\u636e\u9700\u6c42\u8c03\u6574\u4ee3\u7801\u903b\u8f91\u3002<\/p>\n 4. \u4fee\u6539\u4fe1\u606f\u6587\u4ef6\uff1a<\/p>\n \u6253<\/p>\n \u5f00.app\u6587\u4ef6\u5939\u4e0b\u7684Info.plist\u6587\u4ef6\uff0c\u5c06\u5176\u4e2d\u7684\u503c\u66ff\u6362\u4e3a\u65b0\u7684Bundle ID\u3002\uff08\u6ce8: Bundle ID\u4ee5\u201ccom.xxx.yyy\u201d\u7684\u5f62\u5f0f\u5b58\u5728\uff0c\u9700\u4fdd\u6301\u552f\u4e00\u6027\uff09<\/p>\n 5. \u5c01\u88c5IPA\u6587\u4ef6\uff1a<\/p>\n \u5c06\u4fee\u6539\u540e\u7684.app\u6587\u4ef6\u5939\u653e\u56dePayload\u6587\u4ef6\u5939\u5185\uff0c\u5c06Payload\u6587\u4ef6\u5939\u538b\u7f29\u4e3aZIP\u683c\u5f0f\u5e76\u66f4\u6539\u4e3aIPA\u683c\u5f0f\u3002<\/p>\n<\/figure>\n<\/p>\n