iOS 9.3.3中使用dumpdecrypted砸壳，killed：9

[fq050766 (Feng Qiang)]

而且我在执行砸壳命令的时候，随便写了个dylib的名字，报同样的错误，所以我感觉不是dumpdecrypted的问题，是DYLD_INSERT_LIBRARIES的问题？

[susnmos (susnm)]

估计得靠大神来解决了，我cycript －p app也有问题

[susnmos (susnm)]

iphonedevwiki上有讲到iOS9.3.3上的一些问题，其中说到killed：9的问题：

#Killed: 9
Pangu9 causes many command-line tools to not work, with the error “Killed: 9”

This can be solved by running “ldid -S which <command>”

还有

This occurs due to the change in the 32-bit pagesize on 64-bit CPUs in iOS 9. The libraries noted above need to be rebuilt with “-Wl,-segalign,4000”.
要重新rebuilt。

[susnmos (susnm)]

ldid -S dylib就行了

[fq050766 (Feng Qiang)]

我这边执行这句还是不行

[iWECon (iWe)]

我也卡在这里，请问有解决了的吗。

[iWECon (iWe)]

我直接用 xxx.app 这样也能dump出头文件，是没壳的原因吗？？

[snakeninny (沙梓社)]

Make dumpdecrypted work on iOS 9.3.3

If you come across Killed: 9 too: FunMaker-SE:/User/Downloads root# DYLD_INSERT_LIBRARIES=dumpdecrypted.dylib /var/containers/Bundle/Application/6476E127-11B7-4861-B742-D781D0DBBD3A/ChinaUnicom4.x.ap…

[wanghe]

#查询到github上面的一个 方法对我有效，你可以试试。

---

1, copy dumpdecrypted.dylib into /usr/lib. Make sure it has appropriate permissions so that user mobile can read and execute it

-rwxr-xr-x 1 root wheel 197528 Aug 14 16:22 dumpdecrypted.dylib

2, change user to mobile:

su mobile

3, change directory into somewhere that mobile can write to:

cd /var/mobile/Documents

4, execute the command with absolute paths:

DYLD_INSERT_LIBRARIES=/usr/lib/dumpdecrypted.dylib /var/containers/Bundle/Application/59CEB222-4C4D-4A34-BC0F-8D38B9E3853D/MyApp.app/MyApp

5, then, you’ll have the MyApp.decrypted file in the current directory

Tested on Pangu jailbroken iOS 9.3.3

[lanvsblue]

成功了，谢谢

[stevemystery (steve)]

I think it is something related to the Sandbox. The reason behind this potential problem has been already explained in the last paragraph on page 136 in the book “iOS App Reverse Engineering”.

“Copy dumpdecrypted.dylib into /usr/lib” is not necessary if you have already put it into the right “Document” directory.

The only thing to fix is to:

1. make sure the permissions of “mobile” are at least read (even only read is enough, tested in iOS 9.3.2) and execute.

2. “su mobile” and execute it again.

[Insfgg99x]

还是报错Killed:9，求直指教

[Insfgg99x]

你是怎么解决的，我怎么还是报这个错误呢？

[fq050766 (Feng Qiang)]

验证成功了，谢谢！

[aDreamCatcher]

Good… Thanks…

[niyaoyao (Niyao)]

@wanghe

1, copy dumpdecrypted.dylib into /usr/lib. Make sure it has appropriate permissions so that user mobile can read and execute it

-rwxr-xr-x 1 root wheel 197528 Aug 14 16:22 dumpdecrypted.dylib

2, change user to mobile:

su mobile

3, change directory into somewhere that mobile can write to:

cd /var/mobile/Documents

4, execute the command with absolute paths:

DYLD_INSERT_LIBRARIES=/usr/lib/dumpdecrypted.dylib /var/containers/Bundle/Application/59CEB222-4C4D-4A34-BC0F-8D38B9E3853D/MyApp.app/MyApp

5, then, you’ll have the MyApp.decrypted file in the current directory

Tested on Pangu jailbroken iOS 9.3.3

success ~~~yeah

[xujialiang (一口盐汽水喷死你)]

直接su mobile 就可以了。

[Mr.mao (sml)]

成功 赞一个。不过这是为什么啊

[ValiantCat]

@wanghe

nd execute it

-rwxr-xr-x 1 root wheel 197528 Aug 14 16:22 dumpdecrypted.dylib

2, change user to mobile:

su mobile

3, change directory into somewhere that mobile can write to:

cd /var/mobile/Documents

4, execute the command with absolute paths:

DYLD_INSERT_LIBRARIES=/usr/lib/dumpdecrypted.dylib /var/containers/Bundle/Application/59CEB222-4C4D-4A34-BC0F-8D38B9E3853D/MyApp.app/MyApp

5, then, you’ll have the MyApp.decrypted file in the current directory

Tested on Pangu jailbroken iOS 9.3.3

get used thanks

[Arthas_cn]

Class MarsReachability is implemented in both /private/var/containers/Bundle/Application/337A24BD-757F-400E-BFAF-716E2C0D7E1A/WeChat.app/Frameworks/mars.framework/mars (0x1071917d0) and /private/var/containers/Bundle/Application/337A24BD-757F-400E-BFAF-716E2C0D7E1A/WeChat.app/Frameworks/Matrix.framework/Matrix (0x1052049d8). One of the two will be used. Which one is undefined.

我砸壳出现的是这个，有没有人知道？