两种砸壳方式都报错了

技能讨论
1

第一
通过dumpdecrypted砸壳失败，报了一个如下的错误

iPhone:~ root# cd /var/mobile/Containers/Data/Application/1F48CB80-6D90-4E4C-AA1F-8D8207FDE7DF/Documents
iPhone:/var/mobile/Containers/Data/Application/1F48CB80-6D90-4E4C-AA1F-8D8207FDE7DF/Documents root# ls
50f5649d383a25de7ea2d063f6e55b00  Aweme.db                       aweIMStickerPackage  face_detect_info_cache.db
ALBB_AUTH                         AwemeIM.db                     com.bytedance.ies    server.json
AWEIM                             GYDataCenterAnalyzeStatistics  contents             tklog.json
AWEIMRoot                         Stickers                       drafts               tt_net_config.config
ActivityRootFolder                TTAdSplashSimpleCache          dumpdecrypted.dylib
iPhone:/var/mobile/Containers/Data/Application/1F48CB80-6D90-4E4C-AA1F-8D8207FDE7DF/Documents root# DYLD_INSERT_LIBRARIES=dumpdecrypted.dylib /var/containers/Bundle/Application/54492634-D6FC-42B7-9973-7FEE5D034CB2/Aweme.app/Aweme
objc[1551]: Class H264EncodeObjCCallback is implemented in both /private/var/containers/Bundle/Application/54492634-D6FC-42B7-9973-7FEE5D034CB2/Aweme.app/Frameworks/LiveStreamFramework.framework/LiveStreamFramework (0x1057a6088) and /var/containers/Bundle/Application/54492634-D6FC-42B7-9973-7FEE5D034CB2/Aweme.app/Aweme (0x103c1f4a8). One of the two will be used. Which one is undefined.
2018-12-28 15:44:52.071 Aweme[1551:200341] YYKVStorage init error:Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “C243281FD02E5D921DDCB08A11D976A6” in the folder “AWEStorage”." UserInfo={NSFilePath=/var/root/Library/AWEStorage/C243281FD02E5D921DDCB08A11D976A6, NSUnderlyingError=0x105840430 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2018-12-28 15:44:52.112 Aweme[1551:200341] mobilecv2: 1.0.3.1030

Abort trap: 6
iPhone:/var/mobile/Containers/Data/Application/1F48CB80-6D90-4E4C-AA1F-8D8207FDE7DF/Documents root#

第二
通过Cluth砸壳失败，报了一个如下的错误

iPhone:~ root# Clutch -b 9
Error: posix_spawn: Operation not permitted (Error 1)

ASLR slide: 0x100094000
Dumping <AwemeVideoNotification> (arm64)
ASLR slide: 0x1000e4000
Dumping <AwemeNotificationService> (arm64)
Patched cryptid (64bit segment)
Patched cryptid (64bit segment)
Error: Failed to dump <LiveStreamFramework> with arch arm64

2018-12-28 15:51:26.702 Clutch[1565:202468] failed operation :(
ASLR slide: 0x1000c0000
Dumping <AWEVideoWidget> (arm64)
Patched cryptid (64bit segment)
2018-12-28 15:51:26.719 Clutch[1565:202468] application <NSOperationQueue: 0x1003ef800>{name = 'NSOperationQueue 0x1003ef800'}
Error: Failed to dump <LiveStreamFramework>

2018-12-28 15:51:26.720 Clutch[1565:202468] failed operation :(
2018-12-28 15:51:26.721 Clutch[1565:202468] application <NSOperationQueue: 0x1003ef800>{name = 'NSOperationQueue 0x1003ef800'}
Error: posix_spawn: Operation not permitted (Error 1)

Error: Failed to dump <AgoraRtcEngineKit> with arch arm64

2018-12-28 15:51:26.757 Clutch[1565:202465] failed operation :(
2018-12-28 15:51:26.757 Clutch[1565:202465] application <NSOperationQueue: 0x100631490>{name = 'NSOperationQueue 0x100631490'}
Error: Failed to dump <AgoraRtcEngineKit>

2018-12-28 15:51:26.758 Clutch[1565:202465] failed operation :(
2018-12-28 15:51:26.759 Clutch[1565:202465] application <NSOperationQueue: 0x100631490>{name = 'NSOperationQueue 0x100631490'}
Writing new checksum
ASLR slide: 0x10004c000
Dumping <Aweme> (arm64)
Patched cryptid (64bit segment)
Writing new checksum
Writing new checksum
Writing new checksum
Error: Failed to dump com.ss.iphone.ugc.Aweme :(

请问下这个错误怎么解决。
手机是iPhone 7
系统是10.0.1

2

Operation not permitted

3

根本就不存在什么字节跳动，或者说我们每个人都是字节跳动

1 个赞
4

因为这两个程序都有BUG, 你需要自己修

5

讲道理，你这个app本身正常启动能启动吗

6

试试不用root权限执行dumpdecrypted

7

可以 抖音app

8

怎么修 老哥

9

根本就没有食神，或者说我们每个人都是食神

10

张总 不用root权限怎么执行dumpdecrypted

11

砸壳微信也是同样的错误

12

用monkey 对一键砸壳试试

13

我想问这个问题解决了吗 一样的问题

14

用庆哥的一键砸壳

15

也不行 直接把手机卡主然后就重启了 看论坛的帖子试了都不管用

16

没有报错信息？那我就不知道怎么搞了

17

我可能知道你的问题 你的dump.py 文件配置可能出问题了

18

frida ipa dump

19

manage@Manages-MacBook-Pro-2  ~  dump.py com.tencent.xin
Start the target app com.tencent.xin
Failed to enumerate applications: timeout was reached
*** Caught exception: <type ‘exceptions.TypeError’>: ‘NoneType’ object is not iterable
Traceback (most recent call last):
File “/Users/manage/GGShell/dump/frida-ios-dump/dump.py”, line 312, in
(session, display_name, bundle_identifier) = open_target_app(device, name_or_bundleid)
File “/Users/manage/GGShell/dump/frida-ios-dump/dump.py”, line 255, in open_target_app
for application in get_applications(device):
TypeError: ‘NoneType’ object is not iterable
手机已经卡死了 强制重启都没反应

20

哪里错了呢 找不到问题