eni9889
commented
9 years ago Same issue here
Closed Tatsh closed 9 years ago
eni9889
commented
9 years ago Same issue here
Tatsh
commented
9 years ago Testing out 2.0 RC right now. Most apps work although some still do not. This may be caused WatchKit or similar since I am not on >= iOS 8.2 (8.1.1 on my iPhone). I will post more logs for failed apps later.
Tatsh
commented
9 years ago Tested all my apps installed. These failed on both iPad (8.1.2) and iPhone (8.1.1):
Tatsh
commented
9 years ago Think you need to watch out on WatchKit extensions. They don't appear to be decrypted at all. I opened one in IDA Pro with ARM set as the architecture (WatchKit applets are ARMv7K), and all I get there is one subroutine and _mh_execute_header(). Yet the app dumped 'successfully'.
Mila432
commented
9 years ago iPad:~ root# clutch -b jp.Marvelous.Dboku Dump | <ARMDumper: 0x148825f90> armv7 <Binary: 0x148813a60, executable: アイランド> swapping archs Dump | <ARMDumper: 0x148825f90> armv7 <Binary: 0x148813a60, executable: アイランド> wrote new header to binary Dump | <ARMDumper: 0x148825f90> armv7 <Binary: 0x148813a60, executable: アイランド> 32bit dumping: arch armv7 offset 16384 Failed to dump binary <Binary: 0x148813a60, executable: アイランド> with arch armv7 Dump | <ARM64Dumper: 0x146db0520> arm64 <Binary: 0x148813a60, executable: アイランド> 64bit dumping: arch arm64 offset 10436608 Failed to dump binary <Binary: 0x148813a60, executable: アイランド> with arch arm64 Failed to dump binary <Binary: 0x148813a60, executable: アイランド> FAILED: <アイランド bundleID: jp.Marvelous.Dboku> iPad:~ root#
LeoNatan
commented
9 years ago iPhone-5S:/User root# ./Clutch -d com.sap.mcm.release
Dump | <ARMDumper: 0x156d3def0> armv7 <Binary: 0x156e13a30, executable: Mobile Docs> swapping archs
Dump | <ARMDumper: 0x156d3def0> armv7 <Binary: 0x156e13a30, executable: Mobile Docs> wrote new header to binary
Dump | <ARMDumper: 0x156d3def0> armv7 <Binary: 0x156e13a30, executable: Mobile Docs> 32bit dumping: arch armv7 offset 16384
Dump | <ARMDumper: 0x156d3def0> armv7 <Binary: 0x156e13a30, executable: Mobile Docs> to MH_PIE or not to MH_PIE, that is the question
Dump | <ARMDumper: 0x156d3def0> armv7 <Binary: 0x156e13a30, executable: Mobile Docs> ERROR: Could not obtain mach port, did you sign with proper entitlements?
sh: line 0: kill: (1976) - No such process
Killed: 9
Sm4rt
commented
9 years ago Device: iPad mini 3 iOS Version: iOS 8.0, JB TaiG. Clutch Version: Clutch 2.0.RC2. AppName: Asphalt 8 1.9.1 (Latest, May 21,2015).
Issue: iPad:~ root# Clutch -b com.gameloft.asphalt8 Dump | <ARMDumper: 0x1565514e0> armv7 <Binary: 0x15654bb00, executable: watchkitextension> swapping archs Dump | <ARMDumper: 0x1565524d0> armv7 <Binary: 0x15654bac0, executable: todayextension> swapping archs Dump | <ARMDumper: 0x1565514e0> armv7 <Binary: 0x15654bb00, executable: watchkitextension> wrote new header to binary Dump | <ARMDumper: 0x1565514e0> armv7 <Binary: 0x15654bb00, executable: watchkitextension> 32bit dumping: arch armv7 offset 16384 Dump | <ARMDumper: 0x1565514e0> armv7 <Binary: 0x15654bb00, executable: watchkitextension> to MH_PIE or not to MH_PIE, that is the question Dump | <ARMDumper: 0x1565524d0> armv7 <Binary: 0x15654bac0, executable: todayextension> wrote new header to binary Dump | <ARMDumper: 0x1565524d0> armv7 <Binary: 0x15654bac0, executable: todayextension> 32bit dumping: arch armv7 offset 16384 Dump | <ARMDumper: 0x1565524d0> armv7 <Binary: 0x15654bac0, executable: todayextension> to MH_PIE or not to MH_PIE, that is the question Dump | <ARMDumper: 0x1565524d0> armv7 <Binary: 0x15654bac0, executable: todayextension> ASLR slide: 0x32000 Dump | <ARMDumper: 0x1565514e0> armv7 <Binary: 0x15654bb00, executable: watchkitextension> ASLR slide: 0x5c000 Finished dumping binary <Binary: 0x15654bac0, executable: todayextension> armv7 with result: 1 Dump | <ARM64Dumper: 0x1565524d0> arm64 <Binary: 0x15654bac0, executable: todayextension> 64bit dumping: arch arm64 offset 196608 Dump | <ARM64Dumper: 0x1565524d0> arm64 <Binary: 0x15654bac0, executable: todayextension> to MH_PIE or not to MH_PIE, that is the question Finished dumping binary <Binary: 0x15654bb00, executable: watchkitextension> armv7 with result: 1 Dump | <ARM64Dumper: 0x156649ad0> arm64 <Binary: 0x15654bb00, executable: watchkitextension> 64bit dumping: arch arm64 offset 262144 Dump | <ARM64Dumper: 0x156649ad0> arm64 <Binary: 0x15654bb00, executable: watchkitextension> to MH_PIE or not to MH_PIE, that is the question Dump | <ARM64Dumper: 0x1565524d0> arm64 <Binary: 0x15654bac0, executable: todayextension> ASLR slide: 0x10007c000 Dump | <ARM64Dumper: 0x156649ad0> arm64 <Binary: 0x15654bb00, executable: watchkitextension> ASLR slide: 0x1000f0000 Finished dumping binary <Binary: 0x15654bac0, executable: todayextension> arm64 with result: 1 Finished dumping binary <Binary: 0x15654bb00, executable: watchkitextension> arm64 with result: 1 Dump | <ARMDumper: 0x15654fa70> armv7 <Binary: 0x156632240, executable: Asphalt8> swapping archs Dump | <ARMDumper: 0x15654fa70> armv7 <Binary: 0x156632240, executable: Asphalt8> wrote new header to binary Dump | <ARMDumper: 0x15654fa70> armv7 <Binary: 0x156632240, executable: Asphalt8> 32bit dumping: arch armv7 offset 16384 Dump | <ARMDumper: 0x15654fa70> armv7 <Binary: 0x156632240, executable: Asphalt8> to MH_PIE or not to MH_PIE, that is the question Dump | <ARMDumper: 0x15654fa70> armv7 <Binary: 0x156632240, executable: Asphalt8> ERROR: Could not obtain mach port, did you sign with proper entitlements? Killed: 9 iPad:~ root#
Using iOS 8.1.1 and Clutch 2.0 PB4. Clutch < 2 could never crack this completely.
Output for American Airlines (
com.aa.AmericanAirlines) which has extensions and a WatchKit extension: