ChiChou / bagbak

Yet another frida based iOS dumpdecrypted. Also decrypts app extensions
MIT License
1.12k stars 184 forks source link

unable to spawn executable when dumping app extensions #105

Closed asdfzxcvbn closed 11 months ago

asdfzxcvbn commented 11 months ago

Describe the bug when dumping snapchat, the bundle will be dumped correctly. however, this will happen when dumping the app extensions:

[decrypt] Snapchat
[decrypt] PlugIns/SnapchatHomeScreenWidget.appex/SnapchatHomeScreenWidget
[decrypt] PlugIns/SnapchatIntentsExtension.appex/SnapchatIntentsExtension
node:internal/process/promises:288
            triggerUncaughtException(err, true /* fromPromise */);
            ^

[Error: Unable to spawn executable at '/private/var/containers/Bundle/Application/AAD2D010-58DC-4E8C-9057-865D30392D5D/Snapchat.app/PlugIns/SnapchatLocationPushExtension.appex/SnapchatLocationPushExtension': Undefined error: 0]

Node.js v18.16.0

To Reproduce Steps to reproduce the behavior:

  1. bagbak Snapchat

Expected behavior the app is dumped successfully.

Desktop (please complete the following information):

Additional context this is the only app i've seen this happen on.

asdfzxcvbn commented 11 months ago

also, while i'm here, could you add an option to not package the dumped app into an ipa? my script relies on bagbak dumping into a folder, so i'd appreciate it :)

ChiChou commented 11 months ago

@asdfzxcvbn Snapchat has a malformed package.

Workaround: SSH to device, chmod +Xx /private/var/containers/Bundle/Application/AAD2D010-58DC-4E8C-9057-865D30392D5D/Snapchat.app/PlugIns/SnapchatLocationPushExtension.appex/SnapchatLocationPushExtension

ChiChou commented 11 months ago

Fixed in v3.0.3

https://github.com/ChiChou/bagbak/commit/ceca864163c9f0c40ce2fdc21690b08a8e87f052