KJCracks / Clutch

Fast iOS executable dumper
3.67k stars 646 forks source link

Can't dump apps - iOS 11.3 #224

Closed ftitreefly closed 6 years ago

ftitreefly commented 6 years ago

Clutch -i works, and shows app list.

Attempting to dump any app, such as YouTube, it always fails:

Log

    # iPhone-7:~ root# Clutch -d com.google.ios.youtube --verbose
2018-07-10 23:44:16.939 Clutch[1459:36341] command: Print verbose messages
2018-07-10 23:44:16.953 Clutch[1459:36341] command: Dump specified bundleID into .ipa file
Now dumping com.google.ios.youtube
Preparing to dump <YouTube>
Path: /var/containers/Bundle/Application/8BF364DB-927F-4EE8-BACC-6FFF95EF9722/YouTube.app/YouTube
Preparing to dump <Module_Framework>
Path: /var/containers/Bundle/Application/8BF364DB-927F-4EE8-BACC-6FFF95EF9722/YouTube.app/Frameworks/Module_Framework.framework/Module_Framework
Preparing to dump <BroadcastUIExtension>
Path: /var/containers/Bundle/Application/8BF364DB-927F-4EE8-BACC-6FFF95EF9722/YouTube.app/PlugIns/BroadcastUIExtension.appex/BroadcastUIExtension
Preparing to dump <BroadcastUploadExtension>
Path: /var/containers/Bundle/Application/8BF364DB-927F-4EE8-BACC-6FFF95EF9722/YouTube.app/PlugIns/BroadcastUploadExtension.appex/BroadcastUploadExtension
Preparing to dump <MessagesExtension>
Path: /var/containers/Bundle/Application/8BF364DB-927F-4EE8-BACC-6FFF95EF9722/YouTube.app/PlugIns/MessagesExtension.appex/MessagesExtension
Preparing to dump <NotificationServiceExtension>
Path: /var/containers/Bundle/Application/8BF364DB-927F-4EE8-BACC-6FFF95EF9722/YouTube.app/PlugIns/NotificationServiceExtension.appex/NotificationServiceExtension
Zipping YouTube.app
Could not obtain mach port, either the process is dead (codesign error?) or entitlements were not properly signed!
Could not obtain mach port, either the process is dead (codesign error?) or entitlements were not properly signed!
Failed to dump <BroadcastUploadExtension> with arch arm64
2018-07-10 23:44:42.433 Clutch[1459:36450] failed operation :(
2018-07-10 23:44:42.433 Clutch[1459:36450] application <NSOperationQueue: 0x102ae8650>{name = 'NSOperationQueue 0x102ae8650'}
Failed to dump <NotificationServiceExtension> with arch arm64
2018-07-10 23:44:42.433 Clutch[1459:36452] failed operation :(
2018-07-10 23:44:42.433 Clutch[1459:36452] application <NSOperationQueue: 0x102b02020>{name = 'NSOperationQueue 0x102b02020'}
Failed to dump <NotificationServiceExtension>
2018-07-10 23:44:42.433 Clutch[1459:36452] failed operation :(
2018-07-10 23:44:42.433 Clutch[1459:36452] application <NSOperationQueue: 0x102b02020>{name = 'NSOperationQueue 0x102b02020'}
Can't execute task_for_pid! Do you have the right permissions/entitlements?
Can't execute task_for_pid! Do you have the right permissions/entitlements?
Failed to dump <BroadcastUploadExtension>
2018-07-10 23:44:42.435 Clutch[1459:36450] failed operation :(
2018-07-10 23:44:42.435 Clutch[1459:36450] application <NSOperationQueue: 0x102ae8650>{name = 'NSOperationQueue 0x102ae8650'}
Failed to find address of header!
Failed to find address of header!
Failed to dump <MessagesExtension> with arch arm64
2018-07-10 23:44:42.436 Clutch[1459:36451] failed operation :(
2018-07-10 23:44:42.436 Clutch[1459:36451] application <NSOperationQueue: 0x102af2bd0>{name = 'NSOperationQueue 0x102af2bd0'}
Failed to dump <YouTube> with arch arm64
2018-07-10 23:44:42.436 Clutch[1459:36449] failed operation :(
2018-07-10 23:44:42.436 Clutch[1459:36449] application <NSOperationQueue: 0x102940c80>{name = 'NSOperationQueue 0x102940c80'}
Failed to dump <YouTube>
2018-07-10 23:44:42.436 Clutch[1459:36449] failed operation :(
2018-07-10 23:44:42.436 Clutch[1459:36449] application <NSOperationQueue: 0x102940c80>{name = 'NSOperationQueue 0x102940c80'}
Failed to dump <MessagesExtension>
2018-07-10 23:44:42.436 Clutch[1459:36451] failed operation :(
2018-07-10 23:44:42.436 Clutch[1459:36451] application <NSOperationQueue: 0x102af2bd0>{name = 'NSOperationQueue 0x102af2bd0'}
Can't execute task_for_pid! Do you have the right permissions/entitlements?
Failed to find address of header!
Failed to dump <BroadcastUIExtension> with arch arm64
2018-07-10 23:44:42.437 Clutch[1459:36448] failed operation :(
2018-07-10 23:44:42.437 Clutch[1459:36448] application <NSOperationQueue: 0x102ad9030>{name = 'NSOperationQueue 0x102ad9030'}
Failed to dump <BroadcastUIExtension>
2018-07-10 23:44:42.437 Clutch[1459:36448] failed operation :(
2018-07-10 23:44:42.437 Clutch[1459:36448] application <NSOperationQueue: 0x102ad9030>{name = 'NSOperationQueue 0x102ad9030'}
posix_spawn: Operation not permitted (Error 1)
Failed to dump <Module_Framework> with arch arm64
2018-07-10 23:44:42.452 Clutch[1459:36445] failed operation :(
2018-07-10 23:44:42.452 Clutch[1459:36445] application <NSOperationQueue: 0x1028e6a90>{name = 'NSOperationQueue 0x1028e6a90'}
Failed to dump <Module_Framework>
2018-07-10 23:44:42.453 Clutch[1459:36445] failed operation :(
2018-07-10 23:44:42.453 Clutch[1459:36445] application <NSOperationQueue: 0x1028e6a90>{name = 'NSOperationQueue 0x1028e6a90'}
Zipping Module_Framework.framework
Zipping BroadcastUIExtension.appex
Zipping BroadcastUploadExtension.appex
Zipping MessagesExtension.appex
Zipping NotificationServiceExtension.appex
FAILED: <YouTube bundleID: com.google.ios.youtube>
Finished dumping com.google.ios.youtube in 12.9 seconds
ftitreefly commented 6 years ago

tfp0 patch!

truewebber commented 5 years ago

@ftitreefly, hey!

I'm not good in software dev, especially in jailbreak. So, i found this https://www.theiphonewiki.com/wiki/Tfp0_patch#Example_code, build and sign example code for my iOS 11 device and got in result KERN_FAILURE.

Do you or anyone else know what does it mean? I guess it means that Electra(1.0.4 in my case) don't provide working task_for_pid, right?