Frida-ios-dump一键砸壳菜鸡版

求教,我在执行./dump.py的时候报错ImportError: No module named paramiko,python当前版本是2.7.1的,谢谢
Xnip2019-05-06_09-31-12
还有就是我连接手机的时候,执行frida-ps -U,报错command not found
Xnip2019-05-06_09-51-12

https://github.com/AloneMonkey/frida-ios-dump#usage

1 个赞
  1. sudo pip install -r requirements.txt --upgrade (Python 2.7)

报错missing end of string
Xnip2019-05-06_10-49-26

Xnip2019-05-06_10-52-55

Xnip2019-05-06_10-56-03

macdeMacBook-Pro-3:~ mac$ iproxy 2222 22

waiting for connection

一直这样没反应,是啥情况啊?

知道了,应该是在一个终端窗口运行 iproxy 2222 22,再另一个终端窗口运行./dump.py xxx

/Library/Python/2.7/site-packages/paramiko/kex_ecdh_nist.py:39: CryptographyDeprecationWarning: encode_point has been deprecated on EllipticCurvePublicNumbers and will be removed in a future version. Please use EllipticCurvePublicKey.public_bytes to obtain both compressed and uncompressed point encoding.
m.add_string(self.Q_C.public_numbers().encode_point())
/Library/Python/2.7/site-packages/paramiko/kex_ecdh_nist.py:96: CryptographyDeprecationWarning: Support for unsafe construction of public numbers from encoded data will be removed in a future version. Please use EllipticCurvePublicKey.from_encoded_point
self.curve, Q_S_bytes
/Library/Python/2.7/site-packages/paramiko/kex_ecdh_nist.py:111: CryptographyDeprecationWarning: encode_point has been deprecated on EllipticCurvePublicNumbers and will be removed in a future version. Please use EllipticCurvePublicKey.public_bytes to obtain both compressed and uncompressed point encoding.
hm.add_string(self.Q_C.public_numbers().encode_point())
Authentication failed.

运行dump.py xxx 输出这个,这个是啥情况啊?

一切准备就绪,但是一直停留在最后一行,已经 iproxy 2222 22,谁能帮帮我,谢谢各位大大了

Start the target app 微信

Dumping 微信 to /var/folders/wn/m37h4dps40j5rhcr145z39sr0000gn/T

0.00B [00:00, ?B/s]

是最新的版本?

谢谢老大,问题已经解决了,我用的是/opt/MonkeyDev/bin这个路径下的,后来从新下载之后。/opt/dump/frida-ios-dump放到这个路径下,在dump问题解决了。

太感谢了。从dumpdecryped,cluch,bfinject 到frida,弄了一天一夜。终于在frida上砸壳成功了。前面几个都是kill 9。 iOS11.2.1 ,非常感谢老哥的无私分享。

砸的包咋给删了?

dump.py WxxDemo
Unable to connect to port 2222 on 127.0.0.1 or ::1

大佬太猛了。

TonghuiacdeMini:~ tonghuimac$ dump.py -l

Traceback (most recent call last):

File “/opt/dump/frida-ios-dump/dump.py”, line 11, in

import frida

ImportError: No module named frida

TonghuiacdeMini:~ tonghuimac$ sudo pip install frida

Password:

WARNING: The directory ‘/Users/tonghuimac/Library/Caches/pip/http’ or its parent directory is not owned by the current user and the cache has been disabled. Please check the permissions and owner of that directory. If executing pip with sudo, you may want sudo’s -H flag.

WARNING: The directory ‘/Users/tonghuimac/Library/Caches/pip’ or its parent directory is not owned by the current user and caching wheels has been disabled. check the permissions and owner of that directory. If executing pip with sudo, you may want sudo’s -H flag.

Requirement already satisfied: frida in /Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages (12.7.26)

TonghuiacdeMini:~ tonghuimac$ pip -V

pip 19.3.1 from /Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages/pip (python 3.8)

TonghuiacdeMini:~ tonghuimac$

按照这个步骤来 始终爆这个错误 frida Frida-tools 卸载重新装 也是这个问题? 大佬们这需要怎么解决呢?

介绍的很详细

之前砸壳成功过,这次连接后,不知为何砸壳失败。多次手动重启App,依然提示connection closed,请大佬们帮帮忙,非常感谢!

➜ frida-ios-dump git:(master) ✗ ./dump.py com.qiyi.iphone
Start the target app com.qiyi.iphone
connection closed

使用python2.7版本按照引导执行命令, sudo pip install -r requirements.txt --upgrade
报错信息: