iOS安全基础

brew install ca-certificatesbrew install [email protected] brew install ldidbrew install usbmuxdbrew install libimobiledevice

使用checkra1n越狱https://checkra.in/releases/https://www.jianshu.com/p/8beb21bcdae7
使用unc0ver越狱https://unc0ver.dev/https://www.jianshu.com/p/5f2d33ba2fb5
主流的越狱工具一般是半完美越狱，iOS设备重启后Cydia会闪退打不开，需要重新操作越狱流程https://palera.in/https://github.com/palera1n/palera1https://github.com/palera1n/palera1n/releases

https://theos.dev/docs/installation-ioshttps://github.com/AloneMonkey/MonkeyDev/wiki/%E5%AE%89%E8%A3%85

ssh root@127.0.0.1
#iproxy-通过USB使用SSH连接iOS设备iproxy 9999 22 #端口转发ssh -p 9999 root@127.0.0.1

https://build.frida.re
#在cydia中添加frida源#cydia中搜索frida，根据iOS设备版本安装对应的frida服务端#Windows10电脑安装frida(特别注意frida版本要与手机中的frida版本保持一致)
https://github.com/frida/fridahttps://github.com/frida/frida/releases

http://tigisoftware.com/cydia/#TIGI Software ---> 全部工具 ---> Filza File Manager 64-bit

git clone https://github.com/AloneMonkey/frida-ios-dump.gitcd frida-ios-dumppython -m pip install -r requirements.txt --upgrade
dump.py -lfrida-ps -Upython dump.py -H 127.0.0.1 -p 9999 -u root -P alpine <app_name>

whoami

/private/var/containers/Bundle/Application

/Applications/

/private/var/mobile/Containers/Data/Application/

ideviceinstaller -i ***..ipa

idevicesyslog

idevice_id -l

idevicescreenshot

ideviceinfoideviceinfo -u [udid] -k DeviceName         #指定设备，获取设备名称:iPhone6sidevicename -u [udid]                       #指定设备，获取设备名称:iPhone6sideviceinfo -u [udid] -k ProductVersion     #指定设备，获取设备版本:10.3.1ideviceinfo -u [udid] -k ProductType        #指定设备，获取设备类型:iPhone8,1ideviceinfo -u [udid] -k ProductName        #指定设备，获取设备系统名称:iPhone OS

ideviceinstaller -l

idevicedate

idevicediagnostics restart

idevicediagnostics shutdown

idevicediagnostics sleep

https://github.com/nabla-c0d3/ssl-kill-switch2https://github.com/nabla-c0d3/ssl-kill-switch2/releases
scp -P 9999 com.nablac0d3.sslkillswitch2_0.14.deb root@127.0.0.1:/tmpdpkg -i com.nablac0d3.sslkillswitch2_0.14.deb
killall -HUP SpringBoard
#打开iOS设置，下滑找到SSL Kill Switch 2，确认Disable Certificate Validation已开启

https://github.com/FLEXTool/FLEXhttps://github.com/FLEXTool/FLEX/releaseshttps://cloud.tencent.com/developer/article/1873827

#添加软件源apt.jituvip.com#极兔软件源 ---> 佐罗Zorro ---> 安装6.6.1

https://github.com/noobpk/frida-ios-hookhttps://github.com/noobpk/frida-ios-hook/releases

https://github.com/WithSecureLabs/needlehttps://github.com/WithSecureLabs/needle/releases

https://github.com/interference-security/frida-scriptshttps://github.com/interference-security/frida-scripts/tree/master/iOS

git clone https://github.com/dpnishant/appmoncd appmon && git checkout LISTEN_MODEpython appmon.py -mode listen
curl "http://127.0.0.1:5000/connect/?a=Gadget&spawn=0&p=iossim&s=scripts/iOS&ls=0&report=test"