python dump.py 今日头条
WARNING: Executing a script that is loading libcrypto in an unsafe way. This will fail in a future version of macOS. Set the LIBRESSL_REDIRECT_STUB_ABORT=1 in the environment to force this into an error.
/Library/Python/2.7/site-packages/paramiko/kex_ecdh_nist.py:39: CryptographyDeprecationWarning: encode_point has been deprecated on EllipticCurvePublicNumbers and will be removed in a future version. Please use EllipticCurvePublicKey.public_bytes to obtain both compressed and uncompressed point encoding.
m.add_string(self.Q_C.public_numbers().encode_point())
/Library/Python/2.7/site-packages/paramiko/kex_ecdh_nist.py:96: CryptographyDeprecationWarning: Support for unsafe construction of public numbers from encoded data will be removed in a future version. Please use EllipticCurvePublicKey.from_encoded_point
self.curve, Q_S_bytes
/Library/Python/2.7/site-packages/paramiko/kex_ecdh_nist.py:111: CryptographyDeprecationWarning: encode_point has been deprecated on EllipticCurvePublicNumbers and will be removed in a future version. Please use EllipticCurvePublicKey.public_bytes to obtain both compressed and uncompressed point encoding.
hm.add_string(self.Q_C.public_numbers().encode_point())
Start the target app 今日头条
Dumping 今日头条 to /var/folders/fq/xtctlqwd08q4c27cvbl_p5wm0000gp/T
[frida-ios-dump]: Load Flutter.framework success.
[frida-ios-dump]: Load skialite.framework success.
[frida-ios-dump]: Load App.framework success.
[frida-ios-dump]: Load AATTLaunchTimeTracker.framework success.
start dump /private/var/containers/Bundle/Application/BAC7A1DB-CDDA-4161-86A6-F8E455ED7C33/News.app/News
News.fid: 100%|██████████| 131M/131M [00:50<00:00, 2.72MB/s]
start dump /private/var/containers/Bundle/Application/BAC7A1DB-CDDA-4161-86A6-F8E455ED7C33/News.app/Frameworks/AATTLaunchTimeTracker.framework/AATTLaunchTimeTracker
AATTLaunchTimeTracker.fid: 100%|██████████| 91.8k/91.8k [00:00<00:00, 414kB/s]
start dump /private/var/containers/Bundle/Application/BAC7A1DB-CDDA-4161-86A6-F8E455ED7C33/News.app/Frameworks/App.framework/App
App.fid: 11%|█ | 816k/7.21M [00:00<00:28, 236kB/s]
python dump.py 今日头条 WARNING: Executing a script that is loading libcrypto in an unsafe way. This will fail in a future version of macOS. Set the LIBRESSL_REDIRECT_STUB_ABORT=1 in the environment to force this into an error. /Library/Python/2.7/site-packages/paramiko/kex_ecdh_nist.py:39: CryptographyDeprecationWarning: encode_point has been deprecated on EllipticCurvePublicNumbers and will be removed in a future version. Please use EllipticCurvePublicKey.public_bytes to obtain both compressed and uncompressed point encoding. m.add_string(self.Q_C.public_numbers().encode_point()) /Library/Python/2.7/site-packages/paramiko/kex_ecdh_nist.py:96: CryptographyDeprecationWarning: Support for unsafe construction of public numbers from encoded data will be removed in a future version. Please use EllipticCurvePublicKey.from_encoded_point self.curve, Q_S_bytes /Library/Python/2.7/site-packages/paramiko/kex_ecdh_nist.py:111: CryptographyDeprecationWarning: encode_point has been deprecated on EllipticCurvePublicNumbers and will be removed in a future version. Please use EllipticCurvePublicKey.public_bytes to obtain both compressed and uncompressed point encoding. hm.add_string(self.Q_C.public_numbers().encode_point()) Start the target app 今日头条 Dumping 今日头条 to /var/folders/fq/xtctlqwd08q4c27cvbl_p5wm0000gp/T [frida-ios-dump]: Load Flutter.framework success. [frida-ios-dump]: Load skialite.framework success. [frida-ios-dump]: Load App.framework success. [frida-ios-dump]: Load AATTLaunchTimeTracker.framework success. start dump /private/var/containers/Bundle/Application/BAC7A1DB-CDDA-4161-86A6-F8E455ED7C33/News.app/News News.fid: 100%|██████████| 131M/131M [00:50<00:00, 2.72MB/s]
start dump /private/var/containers/Bundle/Application/BAC7A1DB-CDDA-4161-86A6-F8E455ED7C33/News.app/Frameworks/AATTLaunchTimeTracker.framework/AATTLaunchTimeTracker AATTLaunchTimeTracker.fid: 100%|██████████| 91.8k/91.8k [00:00<00:00, 414kB/s] start dump /private/var/containers/Bundle/Application/BAC7A1DB-CDDA-4161-86A6-F8E455ED7C33/News.app/Frameworks/App.framework/App App.fid: 11%|█ | 816k/7.21M [00:00<00:28, 236kB/s]
ssh 报错 Requesting connecion to device handle == 451 (serial: 1ef2763118117ecbc1951af1a7b7688cb5f342b5), port 22 run_ctos_loop: fd = 4 run_stoc_loop: fd = 4 recv failed: Resource temporarily unavailable recv failed: Operation not permitted