How to get the class with obfuscated name by cycript

Ruozi · 2016 年2 月 19 日 07:15

When I analyze the binary file in IDA for an app, i see a class with hidden name. Like this:

The class name was hidden and it’s variable for different versions.

How does this app make this, and how can I get this class object in cycript?

snakeninny · 2016 年2 月 20 日 02:47

this method name doesn’t seem to be encrypted

Zhang · 2016 年2 月 21 日 06:00

That’s called obfuscation, duh.
Obfuscated at compile time and there is no way you could recover

Ruozi · 2016 年2 月 22 日 08:38

If i want to get this class.

Should I must know the origin class name?

Zhang · 2016 年2 月 22 日 11:18

Nope.

Ruozi · 2016 年2 月 23 日 06:36

Thx

Is there any way to get this class in cycript.
Now I can only get this class by lldb and debugserver. But this will be detected by this app.

Zhang · 2016 年2 月 23 日 11:46

X=objc_getClass(“DEVJFWKHDFIWHJDC”)