iOS逆向----iOS11以後繞過越獄檢測

當然有手動繞過越獄檢測的辦法,比如自己利用Fishhook或者OC的runtime機制去替換越獄檢測的函數,甚至可以使用frida來Hook函數的返回值。這些都是比較穩妥的方法,本篇文章主要介紹的是自動繞過檢測的工具Liberty Lite。

由於之前繞過越獄檢測的xCon已經許久不更新,而且在iOS10.3以後的越獄手機上會導致很多APP崩潰。xCon沒有白名單機制,因此只要安裝就是全局起作用,導致Cydia崩潰後無法通過Cydia卸載該插件。因此有人推出了新的,支持iOS11-iOS12設備的繞過越獄檢測的tweak。

首先在Cydia中新增軟件源「https://ryleyangus.com/repo/」
然後在Sources中點擊Ryley‘s Repo,點擊Tweaks,找到「Liberty Lite」。這裏建議安裝Liberty Lite Beta版本。

安裝好之後會提示Restart SpringBoard。

使用方法:
進入系統設置->找到Liberty->點擊Block Jalibreak Detection->選擇需要生效的APP

由於添加了白名單機制,因此比之前的xCon更安全。

文件分析

在Cydia中安裝完之後,ssh連接手機,然後進入/Library/MobileSubstrate/DynamicLibraries目錄下

cd /Library/MobileSubstrate/DynamicLibraries
ls

在這裏插入圖片描述
這裏會發現Liberty Lite安裝了AppList.dylib、PreferenceLoader.dylib、RocketBootstrap.dylib、zzzzLiberty.dylib四個庫以及他們各自的plist文件。其中AppList,PreferenceLoader,RocketBootstrap都是跟設置有關的tweak,主要代碼在zzzzLiberty中。

我們通過分析zzzzLiberty.plist會發現他依舊是在加載UIKit的時候執行,這一點跟xCon一樣:
在這裏插入圖片描述

同樣的,我們利用otool和strings命令,逆向以及獲取裏面的字符串:

➜  Desktop otool -tV zzzzLiberty.dylib > xCon
➜  Desktop strings zzzzLiberty.dylib
/Applications
/Applications/
/Applications/Cydia.app
/Applications/Cydia.app/
/Applications/Cydia.app/Cydia
/Applications/Cydia.app/Info.plist
/Applications/Cydia.app/../Cydia.app
/Applications/Cydia.app/../Cydia.app/
/Applications/Cydia.app/../Cydia.app/Info.plist
/Applications/FakeCarrier.app
/Applications/Icy.app
/Applications/Iny.app
/Applications/iFile.app
/Applications/Activator.app
/Applications/IntelliScreen.app
/Applications/MxTube.app
/Applications/RockApp.app
/Applications/SBSettings.app
/Applications/WinterBoard.app
/Applications/blackra1n.app
/Library/Activator
/Library/Flipswitch
/Library/Frameworks/CydiaSubstrate.framework
/Library/MobileSubstrate
/Library/MobileSubstrate/DynamicLibraries
/Library/MobileSubstrate/DynamicLibraries/LiveClock.plist
/Library/MobileSubstrate/DynamicLibraries/Veency.plist
/Library/MobileSubstrate/MobileSubstrate.dylib
/Library/MobileSubstrateMobileSubstrate.dylib
/Library/Ringtones
/Library/Switchs
/Library/Wallpaper
/System/Library/LaunchDaemons/com.ikey.bbot.plist
/System/Library/LaunchDaemons/com.saurik.Cydia.Startup.plist
/bin/bash
/bin/sh
/bin
/bin/su
/etc/apt
/etc/apt/
/etc/clutch.conf
/etc/clutch_cracked.plist
/etc/ssh/sshd_config
/private/
/private
/private/vstb_writable_check
/private/etc/fstab
/private/Miitomo
/private/var/lib/apt
/private/var/lib/apt/
/private/var/lib/cydia
/private/var/lib/cydia/
/private/var/tmp/cydia.log
/private/var/mobile/Library/SBSettings/Themes
/private/var/mobileLibrary/SBSettingsThemes/
/private/var/stash
/private/var/stash/
/private/var/tmp/Cydia.log
/usr/arm-apple-darwin9
/usr/bin/ssh
/usr/bin/sshd
/usr/binsshd
/usr/sbin
/usr/sbinsshd
/usr/include
/usr/lib/pam
/usr/lib/python2.5
/usr/libexec
/usr/libexec/cydia
/usr/libexec/cydia/
/usr/libexec/sftp-server
/usr/libexec/ssh-keysign
/usr/sbin/sshd
/usr/share
/var/cache/apt
/var/cache/apt/
/var/cache/clutch.plist
/var/cache/clutch_cracked.plist
/var/lib/apt
/var/lib/apt/
/var/lib/clutch/overdrive.dylib
/var/lib/cydia
/var/lib/cydia/
/var/lib/dpkg/info
/var/log/syslog
/var/root/Documents/Cracked/
/var/tmp/cydia.log
/var/stash/Library/Ringstones
/var/stash/Library/Wallpaper
/var/stash/usr/include
/var/stash/usr/libexec
/var/stash/usr/share
//Systetem/Library/LaunchDaemons/com.ikey.bbot.plist
//System/Library/LaunchDaemons/[email protected]
//Library/MobileSubstrate/MobileSubstrate.dylib
//var/cache/apt/
//var/lib/apt/
//var/lib/cydia/
//var/log/syslog
//bin/bash
//bin/sh
//etc/apt/
//etc/ssh/sshd_config
//usr/libexec/ssh-keysign
Library/MobileSubstrate/MobileSubstrate.dylib
Applications/Cydia.app
var/cache/apt
var/lib/cydia
var/log/syslog
var/tmp/cydia.log
bin/bash
bin/sh
usr/sbin/sshd
usr/libexec/ssh-keysign
etc/ssh/sshd_config
etc/apt
/var/root/.tastest
/Library/Managed Preferences/mobile/.GlobalPreferences.plist
/Library/Preferences/com.apple.security.plist
/private/var/mobile/home/duh
/etc/rel
/System/Library/LaunchDaemons/com.apple.period.plist
/System/Library/LaunchDaemons/com.apple.ksyslog.plist
/private/var/mobile/home/syslog
/private/var/mobile/home/sshd
/Library/MobileSubstrate/DynamicLibraries/sfbase.dylib
/usr/lib/libsubstrate.dylib
/usr/bin
/boot
/var/root
/var
/private/var
/library/MobileSubstrate/MobileSubstrate.dylib
/mnt
/lib
/panguaxe
/panguaxe.installed
/private/var/mobile/Media/panguaxe.installed
/private/var/lib/dpkg/info/io.pangu.axe7.list
/private/var/lib/dpkg/info/io.pangu.axe7.prerm
/System/Library/LaunchDaemons/io.pangu.axe.untether.plist
/private/var/lib/dpkg/info/taiguntether83x.extrainst_
/private/var/lib/dpkg/info/taiguntether83x.list
/private/var/lib/dpkg/info/taiguntether83x.preinst
/private/var/lib/dpkg/info/taiguntether83x.prerm
/taig/
/taig/taig
/private/var/lib/dpkg/info/io.pangu.fuxiqin9.list
/private/var/lib/dpkg/info/io.pangu.fuxiqin9.prerm
/pguntether
/var/stash/
/var/stash
/private/var/cache/apt/
/private/var/log/syslog
/private/etc/apt/
/private/etc/ssh/sshd_config
/var/mobile/Library/Application Support/Flex3/patches.plist
/private/etc/dpkg/origins/debian
/bin/gunzip
/bin/gzip
/bin/tar
/Library/MobileSubstrate/DynamicLibraries/
/usr
/private/var/cache/apt
/etc/fstab
/bin/ps
/Systetem/Library/LaunchDaemons/com.ikey.bbot.plist
/Library/MobileSubstrate/DynamicLibraries/xCon.dylib
/usr/lib/TsProtePass.dylib
/var/stash/Library/Ringtones
/var/stash/usr/arm-apple-darwin9
/private/masbog.txt
usr/bin/cycript
usr/bin/cynject
usr/sbin/frida-server
/private/var/db/stash/
/var/tmp//ct.shutdown
/var/tmp/ct.shutdown
/var/tmp//cydia.log
/var/tmp//pgloader
/var/tmp/pgloader
/var/tmp/
/var/tmp//.pangu93loaded
/var/tmp/.pangu93loaded
/var/tmp//RestoreFromBackupLock
/var/tmp/RestoreFromBackupLock
/Library/LaunchDaemons/com.openssh.sshd.plist
/private/var/db/stash
/bin/mv
/private/jailbreak.txt
/Library/MobileSubstrate/
var/lib/apt
/private/var/TestPB16.file
/etc/TestPB16.file
/Applications/TestPB16.file
/System/Library/Caches/com.apple.dyld/enable-dylibs-to-override-cache
/usr/lib/libmis.dylib
/usr/lib/pangu_xpcd.dylib
/System/Library/LaunchDaemons/io.pangu.untether.plist
/xuanyuansword
/xuanyuansword.installed
/evasi0n7
/System/Library/LaunchDaemons/com.evad3rs.evasi0n7.untether.plist
/System/Library/Caches/com.apple.xpcd/xpcd_cache.dylib
/usr/lib/libpatcyh.dylib
/usr/share/bigboss/icons/bigboss.png
/Library/MobileSubstrate/DynamicLibraries/tsProtector.dylib
/Library/PreferenceBundles/tsProtectorSettings.bundle
/Library/PreferenceLoader/Preferences/tsProtectorSettings.plist
/private/var/lib/xcon
/Library/MobileSubstrate/DynamicLibraries/MobileSafety.dylib
/.cydia_no_stash
/private/var/log/apt/term.log
/Library/LaunchDaemons/re.frida.server.plist
/usr/sbin/frida-server
/sbin/reboot
/Library/Frameworks/CydiaSubstrate.framework/CydiaSubstrate
/etc/ssh
Applications
Library/MobileSubstrate
Library/MobileSubstrate/DynamicLibraries
System/Library/LaunchDaemons
private/var/lib
private/var/mobile/Library/SBSettings
private/var/tmp
var/cache
var/lib
usr/sbin
usr/bin
usr/libexec
etc/ssh
var/tmp
var/log
Library/Frameworks
/User/Library/Cydia
/private/var/evasi0n
DYLD_INSERT_LIBRARIES
NSString
UIApplication
QPLibraryConfiguration
HSBCRASPServices
ShieldObserver
Citibank.CBMSecurityCheck
IPDKBAppDelegate
SFBShieldDelegate
GLMOBUtilities
NSJSONSerialization
access
CFBundleGetAllBundles
dlopen
dlsym
_dyld_image_count
fopen
fork
getenv
lstat
open
opendir
stat
statfs
symlink
sysctl
sysctlbyname
system
vfork
_dyld_get_image_name
CFNotificationCenterPostNotification
MSHookFunction
MSFindSymbol
_TasDraRecalcRiskAssessment
_TasDraGetRiskItemCount
_TasDraGetRiskAssessmentItemByName
_TasDraGetRiskAssessmentItemByIndex
ProtectionScreen
HookFound
JailbreakFound
com.yoti.mobile.ios.live
ubstrate
/var/mobile
/var/mobile/
MobileSubstrate.dylib
UniversalVideoDownloader.dylib
Cydia
NSMutableDictionary
NSMutableArray
policyValue
bypass
policyName
com.uob.
com.nintendo.
REQUIRE_SECURE_DEVICE
filza
activator
ifile
cydia
/private/var/mobile/Applications
/private/var/mobile/Containers
Liberty-%@
com.ryleyangus.libertyenabledchanged
com.ryleyangus.libertyprefchanged
Hit loading Liberty Lite into %@ - (C) Ryley Angus, 2016-18. No warranty provided.
EnableLiberty
/var/mobile/Library/Preferences/com.ryleyangus.libertylite.plist
/var/containers/Bundle/Application/
/var/mobile/Containers/Bundle/Application/
__LINKEDIT
__DATA
__DATA_CONST
isEqualToString:
processInfo
instancesRespondToSelector:
isOperatingSystemAtLeastVersion:
release
removeObjectsInArray:
count
rangeOfString:
addObject:
countByEnumeratingWithState:objects:count:
init
alloc
arrayWithArray:
intValue
objectAtIndex:
numberWithInt:
setObject:forKey:
allKeys
isSubclassOfClass:
class
JSONObjectWithData:options:error:
getJailBrokenDeviceInfoDict
jailbreakAction
shieldDelegateDidDetectJailbreak:
shieldDelegateDidDetectLibraryInjection:
postNotification:value:
repackagingStatus:
debuggerStatus:
libraryInjectionDetected
handleLibraryInjectionDetected
jailbreakStatus:
numberWithBool:
runtimeConfigurationValueForKey:
rangeOfString:options:
canOpenURL:
openURL:
stringByDeletingLastPathComponent
writeToFile:atomically:encoding:error:
stringWithFormat:
retain
bundleIdentifier
boolValue
objectForKey:
dictionaryWithContentsOfFile:
containsString:
absoluteString
executableURL
mainBundle
/Applications
/Applications/
/Applications/Cydia.app
/Applications/Cydia.app/
/Applications/Cydia.app/Cydia
/Applications/Cydia.app/Info.plist
/Applications/Cydia.app/../Cydia.app
/Applications/Cydia.app/../Cydia.app/
/Applications/Cydia.app/../Cydia.app/Info.plist
/Applications/FakeCarrier.app
/Applications/Icy.app
/Applications/Iny.app
/Applications/iFile.app
/Applications/Activator.app
/Applications/IntelliScreen.app
/Applications/MxTube.app
/Applications/RockApp.app
/Applications/SBSettings.app
/Applications/WinterBoard.app
/Applications/blackra1n.app
/Library/Activator
/Library/Flipswitch
/Library/Frameworks/CydiaSubstrate.framework
/Library/MobileSubstrate
/Library/MobileSubstrate/DynamicLibraries
/Library/MobileSubstrate/DynamicLibraries/LiveClock.plist
/Library/MobileSubstrate/DynamicLibraries/Veency.plist
/Library/MobileSubstrate/MobileSubstrate.dylib
/Library/MobileSubstrateMobileSubstrate.dylib
/Library/Ringtones
/Library/Switchs
/Library/Wallpaper
/System/Library/LaunchDaemons/com.ikey.bbot.plist
/System/Library/LaunchDaemons/com.saurik.Cydia.Startup.plist
/bin/bash
/bin/sh
/bin
/bin/su
/etc/apt
/etc/apt/
/etc/clutch.conf
/etc/clutch_cracked.plist
/etc/ssh/sshd_config
/private/
/private
/private/vstb_writable_check
/private/etc/fstab
/private/Miitomo
/private/var/lib/apt
/private/var/lib/apt/
/private/var/lib/cydia
/private/var/lib/cydia/
/private/var/tmp/cydia.log
/private/var/mobile/Library/SBSettings/Themes
/private/var/mobileLibrary/SBSettingsThemes/
/private/var/stash
/private/var/stash/
/private/var/tmp/Cydia.log
/usr/arm-apple-darwin9
/usr/bin/ssh
/usr/bin/sshd
/usr/binsshd
/usr/sbin
/usr/sbinsshd
/usr/include
/usr/lib/pam
/usr/lib/python2.5
/usr/libexec
/usr/libexec/cydia
/usr/libexec/cydia/
/usr/libexec/sftp-server
/usr/libexec/ssh-keysign
/usr/sbin/sshd
/usr/share
/var/cache/apt
/var/cache/apt/
/var/cache/clutch.plist
/var/cache/clutch_cracked.plist
/var/lib/apt
/var/lib/apt/
/var/lib/clutch/overdrive.dylib
/var/lib/cydia
/var/lib/cydia/
/var/lib/dpkg/info
/var/log/syslog
/var/root/Documents/Cracked/
/var/tmp/cydia.log
/var/stash/Library/Ringstones
/var/stash/Library/Wallpaper
/var/stash/usr/include
/var/stash/usr/libexec
/var/stash/usr/share
//Systetem/Library/LaunchDaemons/com.ikey.bbot.plist
//System/Library/LaunchDaemons/[email protected]
//Library/MobileSubstrate/MobileSubstrate.dylib
//var/cache/apt/
//var/lib/apt/
//var/lib/cydia/
//var/log/syslog
//bin/bash
//bin/sh
//etc/apt/
//etc/ssh/sshd_config
//usr/libexec/ssh-keysign
Library/MobileSubstrate/MobileSubstrate.dylib
Applications/Cydia.app
var/cache/apt
var/lib/cydia
var/log/syslog
var/tmp/cydia.log
bin/bash
bin/sh
usr/sbin/sshd
usr/libexec/ssh-keysign
etc/ssh/sshd_config
etc/apt
/var/root/.tastest
/Library/Managed Preferences/mobile/.GlobalPreferences.plist
/Library/Preferences/com.apple.security.plist
/private/var/mobile/home/duh
/etc/rel
/System/Library/LaunchDaemons/com.apple.period.plist
/System/Library/LaunchDaemons/com.apple.ksyslog.plist
/private/var/mobile/home/syslog
/private/var/mobile/home/sshd
/Library/MobileSubstrate/DynamicLibraries/sfbase.dylib
/usr/lib/libsubstrate.dylib
/usr/bin
/boot
/var/root
/var
/private/var
/library/MobileSubstrate/MobileSubstrate.dylib
/mnt
/lib
/panguaxe
/panguaxe.installed
/private/var/mobile/Media/panguaxe.installed
/private/var/lib/dpkg/info/io.pangu.axe7.list
/private/var/lib/dpkg/info/io.pangu.axe7.prerm
/System/Library/LaunchDaemons/io.pangu.axe.untether.plist
/private/var/lib/dpkg/info/taiguntether83x.extrainst_
/private/var/lib/dpkg/info/taiguntether83x.list
/private/var/lib/dpkg/info/taiguntether83x.preinst
/private/var/lib/dpkg/info/taiguntether83x.prerm
/taig/
/taig/taig
/private/var/lib/dpkg/info/io.pangu.fuxiqin9.list
/private/var/lib/dpkg/info/io.pangu.fuxiqin9.prerm
/pguntether
/var/stash/
/var/stash
/private/var/cache/apt/
/private/var/log/syslog
/private/etc/apt/
/private/etc/ssh/sshd_config
/var/mobile/Library/Application Support/Flex3/patches.plist
/private/etc/dpkg/origins/debian
/bin/gunzip
/bin/gzip
/bin/tar
/Library/MobileSubstrate/DynamicLibraries/
/usr
/private/var/cache/apt
/etc/fstab
/bin/ps
/Systetem/Library/LaunchDaemons/com.ikey.bbot.plist
/Library/MobileSubstrate/DynamicLibraries/xCon.dylib
/usr/lib/TsProtePass.dylib
/var/stash/Library/Ringtones
/var/stash/usr/arm-apple-darwin9
/private/masbog.txt
usr/bin/cycript
usr/bin/cynject
usr/sbin/frida-server
/private/var/db/stash/
/var/tmp//ct.shutdown
/var/tmp/ct.shutdown
/var/tmp//cydia.log
/var/tmp//pgloader
/var/tmp/pgloader
/var/tmp/
/var/tmp//.pangu93loaded
/var/tmp/.pangu93loaded
/var/tmp//RestoreFromBackupLock
/var/tmp/RestoreFromBackupLock
/Library/LaunchDaemons/com.openssh.sshd.plist
/private/var/db/stash
/bin/mv
/private/jailbreak.txt
/Library/MobileSubstrate/
var/lib/apt
/private/var/TestPB16.file
/etc/TestPB16.file
/Applications/TestPB16.file
/System/Library/Caches/com.apple.dyld/enable-dylibs-to-override-cache
/usr/lib/libmis.dylib
/usr/lib/pangu_xpcd.dylib
/System/Library/LaunchDaemons/io.pangu.untether.plist
/xuanyuansword
/xuanyuansword.installed
/evasi0n7
/System/Library/LaunchDaemons/com.evad3rs.evasi0n7.untether.plist
/System/Library/Caches/com.apple.xpcd/xpcd_cache.dylib
/usr/lib/libpatcyh.dylib
/usr/share/bigboss/icons/bigboss.png
/Library/MobileSubstrate/DynamicLibraries/tsProtector.dylib
/Library/PreferenceBundles/tsProtectorSettings.bundle
/Library/PreferenceLoader/Preferences/tsProtectorSettings.plist
/private/var/lib/xcon
/Library/MobileSubstrate/DynamicLibraries/MobileSafety.dylib
/.cydia_no_stash
/private/var/log/apt/term.log
/Library/LaunchDaemons/re.frida.server.plist
/usr/sbin/frida-server
/sbin/reboot
/Library/Frameworks/CydiaSubstrate.framework/CydiaSubstrate
/etc/ssh
Applications
Library/MobileSubstrate
Library/MobileSubstrate/DynamicLibraries
System/Library/LaunchDaemons
private/var/lib
private/var/mobile/Library/SBSettings
private/var/tmp
var/cache
var/lib
usr/sbin
usr/bin
usr/libexec
etc/ssh
var/tmp
var/log
Library/Frameworks
/User/Library/Cydia
/private/var/evasi0n
DYLD_INSERT_LIBRARIES
NSString
UIApplication
QPLibraryConfiguration
HSBCRASPServices
ShieldObserver
Citibank.CBMSecurityCheck
IPDKBAppDelegate
SFBShieldDelegate
GLMOBUtilities
NSJSONSerialization
access
CFBundleGetAllBundles
dlopen
dlsym
_dyld_image_count
fopen
fork
getenv
lstat
open
opendir
stat
statfs
symlink
sysctl
sysctlbyname
system
vfork
_dyld_get_image_name
CFNotificationCenterPostNotification
MSHookFunction
MSFindSymbol
_TasDraRecalcRiskAssessment
_TasDraGetRiskItemCount
_TasDraGetRiskAssessmentItemByName
_TasDraGetRiskAssessmentItemByIndex
ProtectionScreen
HookFound
JailbreakFound
com.yoti.mobile.ios.live
ubstrate
/var/mobile
/var/mobile/
MobileSubstrate.dylib
UniversalVideoDownloader.dylib
Cydia
NSMutableDictionary
NSMutableArray
policyValue
bypass
policyName
com.uob.
com.nintendo.
REQUIRE_SECURE_DEVICE
filza
activator
ifile
cydia
/private/var/mobile/Applications
/private/var/mobile/Containers
Liberty-%@
com.ryleyangus.libertyenabledchanged
com.ryleyangus.libertyprefchanged
Hit loading Liberty Lite into %@ - (C) Ryley Angus, 2016-18. No warranty provided.
EnableLiberty
/var/mobile/Library/Preferences/com.ryleyangus.libertylite.plist
/var/containers/Bundle/Application/
/var/mobile/Containers/Bundle/Application/
__LINKEDIT
__DATA
__DATA_CONST
isEqualToString:
processInfo
instancesRespondToSelector:
isOperatingSystemAtLeastVersion:
release
removeObjectsInArray:
count
rangeOfString:
addObject:
countByEnumeratingWithState:objects:count:
init
alloc
arrayWithArray:
intValue
objectAtIndex:
numberWithInt:
setObject:forKey:
allKeys
isSubclassOfClass:
class
JSONObjectWithData:options:error:
getJailBrokenDeviceInfoDict
jailbreakAction
shieldDelegateDidDetectJailbreak:
shieldDelegateDidDetectLibraryInjection:
postNotification:value:
repackagingStatus:
debuggerStatus:
libraryInjectionDetected
handleLibraryInjectionDetected
jailbreakStatus:
numberWithBool:
runtimeConfigurationValueForKey:
rangeOfString:options:
canOpenURL:
openURL:
stringByDeletingLastPathComponent
writeToFile:atomically:encoding:error:
stringWithFormat:
retain
bundleIdentifier
boolValue
objectForKey:
dictionaryWithContentsOfFile:
containsString:
absoluteString
executableURL
mainBundle
/Applications
/Applications/
/Applications/Cydia.app
/Applications/Cydia.app/
/Applications/Cydia.app/Cydia
/Applications/Cydia.app/Info.plist
/Applications/Cydia.app/../Cydia.app
/Applications/Cydia.app/../Cydia.app/
/Applications/Cydia.app/../Cydia.app/Info.plist
/Applications/FakeCarrier.app
/Applications/Icy.app
/Applications/Iny.app
/Applications/iFile.app
/Applications/Activator.app
/Applications/IntelliScreen.app
/Applications/MxTube.app
/Applications/RockApp.app
/Applications/SBSettings.app
/Applications/WinterBoard.app
/Applications/blackra1n.app
/Library/Activator
/Library/Flipswitch
/Library/Frameworks/CydiaSubstrate.framework
/Library/MobileSubstrate
/Library/MobileSubstrate/DynamicLibraries
/Library/MobileSubstrate/DynamicLibraries/LiveClock.plist
/Library/MobileSubstrate/DynamicLibraries/Veency.plist
/Library/MobileSubstrate/MobileSubstrate.dylib
/Library/MobileSubstrateMobileSubstrate.dylib
/Library/Ringtones
/Library/Switchs
/Library/Wallpaper
/System/Library/LaunchDaemons/com.ikey.bbot.plist
/System/Library/LaunchDaemons/com.saurik.Cydia.Startup.plist
/bin/bash
/bin/sh
/bin
/bin/su
/etc/apt
/etc/apt/
/etc/clutch.conf
/etc/clutch_cracked.plist
/etc/ssh/sshd_config
/private/
/private
/private/vstb_writable_check
/private/etc/fstab
/private/Miitomo
/private/var/lib/apt
/private/var/lib/apt/
/private/var/lib/cydia
/private/var/lib/cydia/
/private/var/tmp/cydia.log
/private/var/mobile/Library/SBSettings/Themes
/private/var/mobileLibrary/SBSettingsThemes/
/private/var/stash
/private/var/stash/
/private/var/tmp/Cydia.log
/usr/arm-apple-darwin9
/usr/bin/ssh
/usr/bin/sshd
/usr/binsshd
/usr/sbin
/usr/sbinsshd
/usr/include
/usr/lib/pam
/usr/lib/python2.5
/usr/libexec
/usr/libexec/cydia
/usr/libexec/cydia/
/usr/libexec/sftp-server
/usr/libexec/ssh-keysign
/usr/sbin/sshd
/usr/share
/var/cache/apt
/var/cache/apt/
/var/cache/clutch.plist
/var/cache/clutch_cracked.plist
/var/lib/apt
/var/lib/apt/
/var/lib/clutch/overdrive.dylib
/var/lib/cydia
/var/lib/cydia/
/var/lib/dpkg/info
/var/log/syslog
/var/root/Documents/Cracked/
/var/tmp/cydia.log
/var/stash/Library/Ringstones
/var/stash/Library/Wallpaper
/var/stash/usr/include
/var/stash/usr/libexec
/var/stash/usr/share
//Systetem/Library/LaunchDaemons/com.ikey.bbot.plist
//System/Library/LaunchDaemons/[email protected]
//Library/MobileSubstrate/MobileSubstrate.dylib
//var/cache/apt/
//var/lib/apt/
//var/lib/cydia/
//var/log/syslog
//bin/bash
//bin/sh
//etc/apt/
//etc/ssh/sshd_config
//usr/libexec/ssh-keysign
Library/MobileSubstrate/MobileSubstrate.dylib
Applications/Cydia.app
var/cache/apt
var/lib/cydia
var/log/syslog
var/tmp/cydia.log
bin/bash
bin/sh
usr/sbin/sshd
usr/libexec/ssh-keysign
etc/ssh/sshd_config
etc/apt
/var/root/.tastest
/Library/Managed Preferences/mobile/.GlobalPreferences.plist
/Library/Preferences/com.apple.security.plist
/private/var/mobile/home/duh
/etc/rel
/System/Library/LaunchDaemons/com.apple.period.plist
/System/Library/LaunchDaemons/com.apple.ksyslog.plist
/private/var/mobile/home/syslog
/private/var/mobile/home/sshd
/Library/MobileSubstrate/DynamicLibraries/sfbase.dylib
/usr/lib/libsubstrate.dylib
/usr/bin
/boot
/var/root
/var
/private/var
/library/MobileSubstrate/MobileSubstrate.dylib
/mnt
/lib
/panguaxe
/panguaxe.installed
/private/var/mobile/Media/panguaxe.installed
/private/var/lib/dpkg/info/io.pangu.axe7.list
/private/var/lib/dpkg/info/io.pangu.axe7.prerm
/System/Library/LaunchDaemons/io.pangu.axe.untether.plist
/private/var/lib/dpkg/info/taiguntether83x.extrainst_
/private/var/lib/dpkg/info/taiguntether83x.list
/private/var/lib/dpkg/info/taiguntether83x.preinst
/private/var/lib/dpkg/info/taiguntether83x.prerm
/taig/
/taig/taig
/private/var/lib/dpkg/info/io.pangu.fuxiqin9.list
/private/var/lib/dpkg/info/io.pangu.fuxiqin9.prerm
/pguntether
/var/stash/
/var/stash
/private/var/cache/apt/
/private/var/log/syslog
/private/etc/apt/
/private/etc/ssh/sshd_config
/var/mobile/Library/Application Support/Flex3/patches.plist
/private/etc/dpkg/origins/debian
/bin/gunzip
/bin/gzip
/bin/tar
/Library/MobileSubstrate/DynamicLibraries/
/usr
/private/var/cache/apt
/etc/fstab
/bin/ps
/Systetem/Library/LaunchDaemons/com.ikey.bbot.plist
/Library/MobileSubstrate/DynamicLibraries/xCon.dylib
/usr/lib/TsProtePass.dylib
/var/stash/Library/Ringtones
/var/stash/usr/arm-apple-darwin9
/private/masbog.txt
usr/bin/cycript
usr/bin/cynject
usr/sbin/frida-server
/private/var/db/stash/
/var/tmp//ct.shutdown
/var/tmp/ct.shutdown
/var/tmp//cydia.log
/var/tmp//pgloader
/var/tmp/pgloader
/var/tmp/
/var/tmp//.pangu93loaded
/var/tmp/.pangu93loaded
/var/tmp//RestoreFromBackupLock
/var/tmp/RestoreFromBackupLock
/Library/LaunchDaemons/com.openssh.sshd.plist
/private/var/db/stash
/bin/mv
/private/jailbreak.txt
/Library/MobileSubstrate/
var/lib/apt
/private/var/TestPB16.file
/etc/TestPB16.file
/Applications/TestPB16.file
/System/Library/Caches/com.apple.dyld/enable-dylibs-to-override-cache
/usr/lib/libmis.dylib
/usr/lib/pangu_xpcd.dylib
/System/Library/LaunchDaemons/io.pangu.untether.plist
/xuanyuansword
/xuanyuansword.installed
/evasi0n7
/System/Library/LaunchDaemons/com.evad3rs.evasi0n7.untether.plist
/System/Library/Caches/com.apple.xpcd/xpcd_cache.dylib
/usr/lib/libpatcyh.dylib
/usr/share/bigboss/icons/bigboss.png
/Library/MobileSubstrate/DynamicLibraries/tsProtector.dylib
/Library/PreferenceBundles/tsProtectorSettings.bundle
/Library/PreferenceLoader/Preferences/tsProtectorSettings.plist
/private/var/lib/xcon
/Library/MobileSubstrate/DynamicLibraries/MobileSafety.dylib
/.cydia_no_stash
/private/var/log/apt/term.log
/Library/LaunchDaemons/re.frida.server.plist
/usr/sbin/frida-server
/sbin/reboot
/Library/Frameworks/CydiaSubstrate.framework/CydiaSubstrate
/etc/ssh
Applications
Library/MobileSubstrate
Library/MobileSubstrate/DynamicLibraries
System/Library/LaunchDaemons
private/var/lib
private/var/mobile/Library/SBSettings
private/var/tmp
var/cache
var/lib
usr/sbin
usr/bin
usr/libexec
etc/ssh
var/tmp
var/log
Library/Frameworks
/User/Library/Cydia
/private/var/evasi0n
DYLD_INSERT_LIBRARIES
MSHookFunction
NSString
UIApplication
QPLibraryConfiguration
HSBCRASPServices
ShieldObserver
Citibank.CBMSecurityCheck
IPDKBAppDelegate
SFBShieldDelegate
GLMOBUtilities
NSJSONSerialization
access
CFBundleGetAllBundles
dlopen
dlsym
_dyld_image_count
fopen
fork
getenv
lstat
open
opendir
stat
statfs
symlink
sysctl
sysctlbyname
system
vfork
_dyld_get_image_name
CFNotificationCenterPostNotification
MSFindSymbol
_TasDraRecalcRiskAssessment
_TasDraGetRiskItemCount
_TasDraGetRiskAssessmentItemByName
_TasDraGetRiskAssessmentItemByIndex
ProtectionScreen
HookFound
JailbreakFound
com.yoti.mobile.ios.live
ubstrate
/var/mobile
/var/mobile/
MobileSubstrate.dylib
UniversalVideoDownloader.dylib
Cydia
NSMutableDictionary
NSMutableArray
policyValue
bypass
policyName
com.uob.
com.nintendo.
REQUIRE_SECURE_DEVICE
filza
activator
ifile
cydia
/private/var/mobile/Applications
/private/var/mobile/Containers
pokemongo
0.109.2
0.107.1
0.105.1
0.105.0
0.103.5
0.103.3
0.101.1
0.99.2
0.97.2
CFBundleShortVersionString
com.nianticlabs.pokemongo
Liberty-%@
com.ryleyangus.libertyenabledchanged
com.ryleyangus.libertyprefchanged
Hit loading Liberty Lite into %@ - (C) Ryley Angus, 2016-18. No warranty provided.
EnableLiberty
/var/mobile/Library/Preferences/com.ryleyangus.libertylite.plist
/var/containers/Bundle/Application/
/var/mobile/Containers/Bundle/Application/
__LINKEDIT
__DATA
__DATA_CONST
processInfo
instancesRespondToSelector:
isOperatingSystemAtLeastVersion:
release
removeObjectsInArray:
count
addObject:
rangeOfString:
countByEnumeratingWithState:objects:count:
init
alloc
arrayWithArray:
intValue
objectAtIndex:
numberWithInt:
setObject:forKey:
allKeys
isSubclassOfClass:
class
JSONObjectWithData:options:error:
getJailBrokenDeviceInfoDict
jailbreakAction
shieldDelegateDidDetectJailbreak:
shieldDelegateDidDetectLibraryInjection:
postNotification:value:
repackagingStatus:
debuggerStatus:
libraryInjectionDetected
handleLibraryInjectionDetected
jailbreakStatus:
numberWithBool:
runtimeConfigurationValueForKey:
rangeOfString:options:
canOpenURL:
openURL:
stringByDeletingLastPathComponent
writeToFile:atomically:encoding:error:
lastPathComponent
valueForKey:
infoDictionary
isEqualToString:
stringWithFormat:
retain
bundleIdentifier
boolValue
objectForKey:
dictionaryWithContentsOfFile:
containsString:
absoluteString
executableURL
mainBundle

我們發現這裏跟xCon驚人的相似。。。畢竟檢測越獄就這麼多手段。

發表評論
所有評論
還沒有人評論,想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章