search

KJCracks / Clutch

Fast iOS executable dumper
3.69k stars 647 forks source link

It's not possible to dump watchOS 2 apps with Clutch 2.0 at this moment. #118

Closed haoerloveyou closed 8 years ago

haoerloveyou commented 8 years ago

com.tencent.xin contains watchOS 2 compatible application. It's not possible to dump watchOS 2 apps with Clutch 2.0 at this moment.

waiting u update :)

iT0ny commented 8 years ago

It requires watchOS jailbreak I'm afraid

Tatsh commented 8 years ago

@iT0ny have you looked into changing the binary header to be armv7 and cracking it that way? Then maybe put it back to armv7k after?

This will reveal the code if it works, but it will not be loadable on an Apple Watch until there is a jailbreak for that, or at least an unsigned code patch.

From what I can see, LLVM is treating armv7k as armv7 (cortex-a7). Unfortunately I have not been able to find any real information on the difference between armv7k and armv7. It is probably not available for free from ARM yet. Our only hope is the commit log from LLVM it seems.

https://marc.info/?l=llvm-commits&w=2&r=1&s=armv7k&q=b

iT0ny commented 8 years ago

@Tatsh yep, tried that already, process gets SIGKILL'ed with no info in syslog/crashlog

Tatsh commented 8 years ago

Tried the same and got the same result. When I used LLDB remote debugging, it gave this output on the iPad:

./debugserver 0.0.0.0:9000 /private/var/mobile/Containers/Bundle/Application/0FACA3C7-E243-419A-8118-C8B5825C18C7/WeChat.app/Watch/WeChatWatchNative.app/WeChatWatchNativeExtension
debugserver-300.2 for arm64.
error: failed to launch process ./debugserver: Security
Exiting.

This is most likely due to a signature mismatch, since the binary is modified yet still hashed and DRM protected. The kernel would have to be patched to ignore this, but who knows if the code will run at that point.

XueshiQiao commented 8 years ago

Is there any solution to remove the native watch app from outer container app?

haoerloveyou commented 8 years ago

rename -ipa to zip.and zip it .enter the folder XXXX.app then delete Watch folder

by haoer

在 2016年2月19日，11:53，Joey notifications@github.com 写道：

Is there any solution to delete the native watch app?

— Reply to this email directly or view it on GitHub.