Skip to content

lilang-wu/Frida_on_jailed_Device

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 

Repository files navigation

Frida_on_jailed_Device

1. Decompress the IPA file and copy inside the application container (at the same level as the binary) the FridaGadget.dylib file:

$ cd Payload/Test.app/
$ curl -O https://build.frida.re/frida/ios/lib/FridaGadget.dylib

2. Modify the binary to insert the load command with the insert_dylib or optool tool

note: It is necessary to specify the strip-codesign option to ensure the re-signing process works fine later on.
optool, or insert_dylib

$ insert_dylib --strip-codesig --inplace  @executable_path/FridaGadget.dylib Payload/Test.app/Test
or
$ optool install -c load -p "@executable_path/FridaGadget.dylib" -t Payload/Test.app/Test

3. resign IPA file

recommend :

ios-app-signer or iReSign


4. launch App and check

ios-deploy

$ ios-deploy -d --no-wifi --noinstall -b Payload/Test.app/Test
$ ...
$ frida-ps -Uai
PID  Name    Identifier     
---  ------  ---------------
719  Gadget  re.frida.Gadget

issue: kabiroberai/theos-jailed#46

About

Frida Run on Jailed Device

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published