Open Cregin opened 5 months ago
It’s not a crash. After the app is launched, it will flash for about 2 seconds and then return to the home screen.
iPhone 11 | iOS14.7.1 | tweak version 1.5.1
00:19:13.808027+0800 APP-sample === SSL Kill Switch 3: [info] Using LogLevel = 10 00:19:13.808084+0800 APP-sample === SSL Kill Switch 3: [info] Preference set to 1. 00:19:13.808182+0800 APP-sample === SSL Kill Switch 3: [info] Hook enabled. 00:19:13.808233+0800 APP-sample === SSL Kill Switch 3: [info] iOS 13+ detected 00:19:13.808270+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('/usr/lib/libboringssl.dylib', 'SSL_set_custom_verify', 0x106c079a8, 0x106c100c0); 00:19:13.809169+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1b9cc0160 -> 0x1b9cc0160 00:19:13.809221+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SSL_set_custom_verify ptr 0x1b9cc0160, from 0xb4000068f9400408 0xf900190239056101 0x7945f008d65f03c0 to 0x9126a231f0a67a31 0xf9001902d61f0220 0x7945f008d65f03c0 00:19:13.809257+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('/usr/lib/libboringssl.dylib', 'SSL_get_psk_identity', 0x106c0683c, 0x0); 00:19:13.810126+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1b9cc0878 -> 0x1b9cc0878 00:19:13.810182+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SSL_get_psk_identity ptr 0x1b9cc0878, from 0xa9bf7bfdd503237f 0xb4000080910003fd 0xb4000040940072b6 to 0x9120f231d0a67a31 0xb4000080d61f0220 0xb4000040940072b6 00:19:13.810233+0800 APP-sample === SSL Kill Switch 3: [info] Hooking Security framework... 00:19:13.810282+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecIsInternalRelease', 0x106c0836c, 0x106c10108); 00:19:13.810331+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3f238c -> 0x1ab3f238c 00:19:13.810367+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecIsInternalRelease ptr 0x1ab3f238c, from 0x911e4400f0000260 0xd503237f164b0157 0xa90167faa9ba6ffc to 0x910db231d0adc0b1 0xd503237fd61f0220 0xa90167faa9ba6ffc 00:19:13.810420+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustEvaluate', 0x106c08474, 0x106c10110); 00:19:13.810467+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3e90b4 -> 0x1ab3e90b4 00:19:13.810501+0800 APP-sample === SSL Kill Switch 3: [info] SecTrustEvaluate jumps to 0x1ab3e90b8: d101c3ffd503237f, hook new addr instead! 00:19:13.810537+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustEvaluate ptr 0x1ab3e90b4, from 0xd503237f14000001 0xa9054ff4d101c3ff 0x910183fda9067bfd to 0xf0adc0f114000001 0xd61f02209111d231 0x910183fda9067bfd 00:19:13.810571+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustEvaluateAsync', 0x106c085d4, 0x106c10118); 00:19:13.810604+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3ea6e8 -> 0x1ab3ea6e8 00:19:13.810638+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustEvaluateAsync ptr 0x1ab3ea6e8, from 0xd10183ffd503237f 0xa9044ff4a90357f6 0x910143fda9057bfd to 0x91175231d0adc0f1 0xa9044ff4d61f0220 0x910143fda9057bfd 00:19:13.810671+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustEvaluateWithError', 0x106c08750, 0x106c10120); 00:19:13.810702+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3e9584 -> 0x1ab3e9584 00:19:13.810735+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustEvaluateWithError ptr 0x1ab3e9584, from 0xd100c3ffd503237f 0xa9027bfda9014ff4 0xaa0103f3910083fd to 0x911d4231f0adc0f1 0xa9027bfdd61f0220 0xaa0103f3910083fd 00:19:13.810770+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustEvaluateAsyncWithError', 0x106c088b8, 0x106c10128); 00:19:13.810802+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3eb618 -> 0x1ab3eb618 00:19:13.810837+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustEvaluateAsyncWithError ptr 0x1ab3eb618, from 0xd10183ffd503237f 0xa9044ff4a90357f6 0x910143fda9057bfd to 0x9122e231b0adc0f1 0xa9044ff4d61f0220 0x910143fda9057bfd 00:19:13.810869+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustEvaluateFastAsync', 0x106c08a34, 0x106c10130); 00:19:13.810908+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3ea7f0 -> 0x1ab3ea7f0 00:19:13.810940+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustEvaluateFastAsync ptr 0x1ab3ea7f0, from 0xd10183ffd503237f 0xa9044ff4a90357f6 0x910143fda9057bfd to 0x9128d231d0adc0f1 0xa9044ff4d61f0220 0x910143fda9057bfd 00:19:13.810978+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustSetPolicies', 0x106c08bb4, 0x106c10138); 00:19:13.811011+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3e6858 -> 0x1ab3e6858 00:19:13.811044+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustSetPolicies ptr 0x1ab3e6858, from 0xd10303ffd503237f 0xa9085ff8a90767fa 0xa90a4ff4a90957f6 to 0x912ed231d0adc111 0xa9085ff8d61f0220 0xa90a4ff4a90957f6 00:19:13.811083+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecKeyVerifySignature', 0x106c08cbc, 0x106c10140); 00:19:13.811115+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3be0fc -> 0x1ab3be0fc 00:19:13.811148+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecKeyVerifySignature ptr 0x1ab3be0fc, from 0xd101c3ffd503237f 0xa90457f6a9035ff8 0xa9067bfda9054ff4 to 0x9132f231d0adc251 0xa90457f6d61f0220 0xa9067bfda9054ff4 00:19:13.811187+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecKeyRawVerify', 0x106c08dec, 0x106c10148); 00:19:13.811220+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3bdffc -> 0x1ab3bdffc 00:19:13.811260+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecKeyRawVerify ptr 0x1ab3bdffc, from 0xd101c3ffd503237f 0xa90457f6a9035ff8 0xa9067bfda9054ff4 to 0x9137b231f0adc251 0xa90457f6d61f0220 0xa9067bfda9054ff4 00:19:13.811302+0800 APP-sample === SSL Kill Switch 3: [info] Hooking URLSession... 00:19:13.811336+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x2064ed048, '_onqueue_didReceiveChallenge:request:withCompletion:', 0x106c08ef4, 0x106c10150); 00:19:13.811383+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x206c4e220, '_onqueue_sendSessionChallenge:completionHandler:', 0x106c090d8, 0x106c10158); 00:19:13.811415+0800 APP-sample === SSL Kill Switch 3: [info] AFNetworking detected; hooking it... 00:19:13.811448+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x103ba30e8, 'setSSLPinningMode:', 0x106c092a0, 0x106c10160); 00:19:13.811486+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x103ba30e8, 'setAllowInvalidCertificates:', 0x106c09424, 0x106c10168); 00:19:13.811531+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x103ba3110, 'policyWithPinningMode:', 0x106c095bc, 0x106c10170); 00:19:13.811577+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x103ba3110, 'policyWithPinningMode:withPinnedCertificates:', 0x106c09744, 0x106c10178); 00:19:13.811626+0800 APP-sample === SSL Kill Switch 3: [info] Finished Hooking! 00:19:13.860332+0800 APP-sample === SSL Kill Switch 3: [verb] >> Entering newAFSecurityPolicy_setSSLPinningMode() 00:19:13.860366+0800 APP-sample === SSL Kill Switch 3: [verb] AFSecurityPolicy setSSLPinningMode: 0 -> 0 00:19:13.860399+0800 APP-sample === SSL Kill Switch 3: [verb] << Leaving new__AFSecurityPolicy_setSSLPinningMode() 00:19:13.860634+0800 APP-sample === SSL Kill Switch 3: [verb] >> Entering newAFSecurityPolicy_policyWithPinningMode() 00:19:13.860677+0800 APP-sample === SSL Kill Switch 3: [verb] AFSecurityPolicy policyWithPinningMode: 0 -> AFSSLPinningModeNone 00:19:13.860711+0800 APP-sample === SSL Kill Switch 3: [verb] << Leaving newAFSecurityPolicy_policyWithPinningMode() 00:19:14.411916+0800 APP-sample === SSL Kill Switch 3: [info] Using LogLevel = 10 00:19:14.411967+0800 APP-sample === SSL Kill Switch 3: [info] Preference set to 1. 00:19:14.412122+0800 APP-sample === SSL Kill Switch 3: [info] Hook enabled. 00:19:14.412189+0800 APP-sample === SSL Kill Switch 3: [info] iOS 13+ detected 00:19:14.412245+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('/usr/lib/libboringssl.dylib', 'SSL_set_custom_verify', 0x1027279a8, 0x1027300c0); 00:19:14.413136+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1b9cc0160 -> 0x1b9cc0160 00:19:14.413188+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SSL_set_custom_verify ptr 0x1b9cc0160, from 0xb4000068f9400408 0xf900190239056101 0x7945f008d65f03c0 to 0x9126a231f0a45331 0xf9001902d61f0220 0x7945f008d65f03c0 00:19:14.413244+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('/usr/lib/libboringssl.dylib', 'SSL_get_psk_identity', 0x10272683c, 0x0); 00:19:14.414326+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1b9cc0878 -> 0x1b9cc0878 00:19:14.414393+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SSL_get_psk_identity ptr 0x1b9cc0878, from 0xa9bf7bfdd503237f 0xb4000080910003fd 0xb4000040940072b6 to 0x9120f231d0a45331 0xb4000080d61f0220 0xb4000040940072b6 00:19:14.414442+0800 APP-sample === SSL Kill Switch 3: [info] Hooking Security framework... 00:19:14.414486+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecIsInternalRelease', 0x10272836c, 0x102730108); 00:19:14.414520+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3f238c -> 0x1ab3f238c 00:19:14.414555+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecIsInternalRelease ptr 0x1ab3f238c, from 0x911e4400f0000260 0xd503237f164b0157 0xa90167faa9ba6ffc to 0x910db231d0ab99b1 0xd503237fd61f0220 0xa90167faa9ba6ffc 00:19:14.414592+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustEvaluate', 0x102728474, 0x102730110); 00:19:14.414628+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3e90b4 -> 0x1ab3e90b4 00:19:14.414669+0800 APP-sample === SSL Kill Switch 3: [info] SecTrustEvaluate jumps to 0x1ab3e90b8: d101c3ffd503237f, hook new addr instead! 00:19:14.414705+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustEvaluate ptr 0x1ab3e90b4, from 0xd503237f14000001 0xa9054ff4d101c3ff 0x910183fda9067bfd to 0xf0ab99f114000001 0xd61f02209111d231 0x910183fda9067bfd 00:19:14.414738+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustEvaluateAsync', 0x1027285d4, 0x102730118); 00:19:14.414771+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3ea6e8 -> 0x1ab3ea6e8 00:19:14.414805+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustEvaluateAsync ptr 0x1ab3ea6e8, from 0xd10183ffd503237f 0xa9044ff4a90357f6 0x910143fda9057bfd to 0x91175231d0ab99f1 0xa9044ff4d61f0220 0x910143fda9057bfd 00:19:14.414839+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustEvaluateWithError', 0x102728750, 0x102730120); 00:19:14.414870+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3e9584 -> 0x1ab3e9584 00:19:14.414905+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustEvaluateWithError ptr 0x1ab3e9584, from 0xd100c3ffd503237f 0xa9027bfda9014ff4 0xaa0103f3910083fd to 0x911d4231f0ab99f1 0xa9027bfdd61f0220 0xaa0103f3910083fd 00:19:14.414947+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustEvaluateAsyncWithError', 0x1027288b8, 0x102730128); 00:19:14.414980+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3eb618 -> 0x1ab3eb618 00:19:14.415015+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustEvaluateAsyncWithError ptr 0x1ab3eb618, from 0xd10183ffd503237f 0xa9044ff4a90357f6 0x910143fda9057bfd to 0x9122e231b0ab99f1 0xa9044ff4d61f0220 0x910143fda9057bfd 00:19:14.415049+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustEvaluateFastAsync', 0x102728a34, 0x102730130); 00:19:14.415081+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3ea7f0 -> 0x1ab3ea7f0 00:19:14.415116+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustEvaluateFastAsync ptr 0x1ab3ea7f0, from 0xd10183ffd503237f 0xa9044ff4a90357f6 0x910143fda9057bfd to 0x9128d231d0ab99f1 0xa9044ff4d61f0220 0x910143fda9057bfd 00:19:14.415149+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustSetPolicies', 0x102728bb4, 0x102730138); 00:19:14.415180+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3e6858 -> 0x1ab3e6858 00:19:14.415226+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustSetPolicies ptr 0x1ab3e6858, from 0xd10303ffd503237f 0xa9085ff8a90767fa 0xa90a4ff4a90957f6 to 0x912ed231d0ab9a11 0xa9085ff8d61f0220 0xa90a4ff4a90957f6 00:19:14.415261+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecKeyVerifySignature', 0x102728cbc, 0x102730140); 00:19:14.415303+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3be0fc -> 0x1ab3be0fc 00:19:14.415347+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecKeyVerifySignature ptr 0x1ab3be0fc, from 0xd101c3ffd503237f 0xa90457f6a9035ff8 0xa9067bfda9054ff4 to 0x9132f231d0ab9b51 0xa90457f6d61f0220 0xa9067bfda9054ff4 00:19:14.415380+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecKeyRawVerify', 0x102728dec, 0x102730148); 00:19:14.415416+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3bdffc -> 0x1ab3bdffc 00:19:14.415451+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecKeyRawVerify ptr 0x1ab3bdffc, from 0xd101c3ffd503237f 0xa90457f6a9035ff8 0xa9067bfda9054ff4 to 0x9137b231f0ab9b51 0xa90457f6d61f0220 0xa9067bfda9054ff4 00:19:14.415491+0800 APP-sample === SSL Kill Switch 3: [info] Hooking URLSession... 00:19:14.415524+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x2064ed048, '_onqueue_didReceiveChallenge:request:withCompletion:', 0x102728ef4, 0x102730150); 00:19:14.415556+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x206c4e220, '_onqueue_sendSessionChallenge:completionHandler:', 0x1027290d8, 0x102730158); 00:19:14.415606+0800 APP-sample === SSL Kill Switch 3: [info] AFNetworking detected; hooking it... 00:19:14.415640+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x101a830e8, 'setSSLPinningMode:', 0x1027292a0, 0x102730160); 00:19:14.415673+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x101a830e8, 'setAllowInvalidCertificates:', 0x102729424, 0x102730168); 00:19:14.415704+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x101a83110, 'policyWithPinningMode:', 0x1027295bc, 0x102730170); 00:19:14.415738+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x101a83110, 'policyWithPinningMode:withPinnedCertificates:', 0x102729744, 0x102730178); 00:19:14.415767+0800 APP-sample === SSL Kill Switch 3: [info] Finished Hooking! 00:19:14.462752+0800 APP-sample === SSL Kill Switch 3: [verb] >> Entering new__AFSecurityPolicy_setSSLPinningMode() 00:19:14.462784+0800 APP-sample === SSL Kill Switch 3: [verb] AFSecurityPolicy setSSLPinningMode: 0 -> 0 00:19:14.462816+0800 APP-sample === SSL Kill Switch 3: [verb] << Leaving newAFSecurityPolicy_setSSLPinningMode() 00:19:14.462964+0800 APP-sample === SSL Kill Switch 3: [verb] >> Entering new__AFSecurityPolicy_policyWithPinningMode() 00:19:14.462995+0800 APP-sample === SSL Kill Switch 3: [verb] AFSecurityPolicy policyWithPinningMode: 0 -> AFSSLPinningModeNone 00:19:14.463027+0800 APP-sample === SSL Kill Switch 3: [verb] << Leaving new__AFSecurityPolicy_policyWithPinningMode()
https://github.com/NyaMisty/ssl-kill-switch3/issues/12
Cregin
commented
5 months ago Cregin
commented
5 months ago
It’s not a crash. After the app is launched, it will flash for about 2 seconds and then return to the home screen.
iPhone 11 | iOS14.7.1 | tweak version 1.5.1
00:19:13.808027+0800 APP-sample === SSL Kill Switch 3: [info] Using LogLevel = 10 00:19:13.808084+0800 APP-sample === SSL Kill Switch 3: [info] Preference set to 1. 00:19:13.808182+0800 APP-sample === SSL Kill Switch 3: [info] Hook enabled. 00:19:13.808233+0800 APP-sample === SSL Kill Switch 3: [info] iOS 13+ detected 00:19:13.808270+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('/usr/lib/libboringssl.dylib', 'SSL_set_custom_verify', 0x106c079a8, 0x106c100c0); 00:19:13.809169+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1b9cc0160 -> 0x1b9cc0160 00:19:13.809221+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SSL_set_custom_verify ptr 0x1b9cc0160, from 0xb4000068f9400408 0xf900190239056101 0x7945f008d65f03c0 to 0x9126a231f0a67a31 0xf9001902d61f0220 0x7945f008d65f03c0 00:19:13.809257+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('/usr/lib/libboringssl.dylib', 'SSL_get_psk_identity', 0x106c0683c, 0x0); 00:19:13.810126+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1b9cc0878 -> 0x1b9cc0878 00:19:13.810182+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SSL_get_psk_identity ptr 0x1b9cc0878, from 0xa9bf7bfdd503237f 0xb4000080910003fd 0xb4000040940072b6 to 0x9120f231d0a67a31 0xb4000080d61f0220 0xb4000040940072b6 00:19:13.810233+0800 APP-sample === SSL Kill Switch 3: [info] Hooking Security framework... 00:19:13.810282+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecIsInternalRelease', 0x106c0836c, 0x106c10108); 00:19:13.810331+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3f238c -> 0x1ab3f238c 00:19:13.810367+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecIsInternalRelease ptr 0x1ab3f238c, from 0x911e4400f0000260 0xd503237f164b0157 0xa90167faa9ba6ffc to 0x910db231d0adc0b1 0xd503237fd61f0220 0xa90167faa9ba6ffc 00:19:13.810420+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustEvaluate', 0x106c08474, 0x106c10110); 00:19:13.810467+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3e90b4 -> 0x1ab3e90b4 00:19:13.810501+0800 APP-sample === SSL Kill Switch 3: [info] SecTrustEvaluate jumps to 0x1ab3e90b8: d101c3ffd503237f, hook new addr instead! 00:19:13.810537+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustEvaluate ptr 0x1ab3e90b4, from 0xd503237f14000001 0xa9054ff4d101c3ff 0x910183fda9067bfd to 0xf0adc0f114000001 0xd61f02209111d231 0x910183fda9067bfd 00:19:13.810571+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustEvaluateAsync', 0x106c085d4, 0x106c10118); 00:19:13.810604+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3ea6e8 -> 0x1ab3ea6e8 00:19:13.810638+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustEvaluateAsync ptr 0x1ab3ea6e8, from 0xd10183ffd503237f 0xa9044ff4a90357f6 0x910143fda9057bfd to 0x91175231d0adc0f1 0xa9044ff4d61f0220 0x910143fda9057bfd 00:19:13.810671+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustEvaluateWithError', 0x106c08750, 0x106c10120); 00:19:13.810702+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3e9584 -> 0x1ab3e9584 00:19:13.810735+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustEvaluateWithError ptr 0x1ab3e9584, from 0xd100c3ffd503237f 0xa9027bfda9014ff4 0xaa0103f3910083fd to 0x911d4231f0adc0f1 0xa9027bfdd61f0220 0xaa0103f3910083fd 00:19:13.810770+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustEvaluateAsyncWithError', 0x106c088b8, 0x106c10128); 00:19:13.810802+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3eb618 -> 0x1ab3eb618 00:19:13.810837+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustEvaluateAsyncWithError ptr 0x1ab3eb618, from 0xd10183ffd503237f 0xa9044ff4a90357f6 0x910143fda9057bfd to 0x9122e231b0adc0f1 0xa9044ff4d61f0220 0x910143fda9057bfd 00:19:13.810869+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustEvaluateFastAsync', 0x106c08a34, 0x106c10130); 00:19:13.810908+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3ea7f0 -> 0x1ab3ea7f0 00:19:13.810940+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustEvaluateFastAsync ptr 0x1ab3ea7f0, from 0xd10183ffd503237f 0xa9044ff4a90357f6 0x910143fda9057bfd to 0x9128d231d0adc0f1 0xa9044ff4d61f0220 0x910143fda9057bfd 00:19:13.810978+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustSetPolicies', 0x106c08bb4, 0x106c10138); 00:19:13.811011+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3e6858 -> 0x1ab3e6858 00:19:13.811044+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustSetPolicies ptr 0x1ab3e6858, from 0xd10303ffd503237f 0xa9085ff8a90767fa 0xa90a4ff4a90957f6 to 0x912ed231d0adc111 0xa9085ff8d61f0220 0xa90a4ff4a90957f6 00:19:13.811083+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecKeyVerifySignature', 0x106c08cbc, 0x106c10140); 00:19:13.811115+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3be0fc -> 0x1ab3be0fc 00:19:13.811148+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecKeyVerifySignature ptr 0x1ab3be0fc, from 0xd101c3ffd503237f 0xa90457f6a9035ff8 0xa9067bfda9054ff4 to 0x9132f231d0adc251 0xa90457f6d61f0220 0xa9067bfda9054ff4 00:19:13.811187+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecKeyRawVerify', 0x106c08dec, 0x106c10148); 00:19:13.811220+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3bdffc -> 0x1ab3bdffc 00:19:13.811260+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecKeyRawVerify ptr 0x1ab3bdffc, from 0xd101c3ffd503237f 0xa90457f6a9035ff8 0xa9067bfda9054ff4 to 0x9137b231f0adc251 0xa90457f6d61f0220 0xa9067bfda9054ff4 00:19:13.811302+0800 APP-sample === SSL Kill Switch 3: [info] Hooking URLSession... 00:19:13.811336+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x2064ed048, '_onqueue_didReceiveChallenge:request:withCompletion:', 0x106c08ef4, 0x106c10150); 00:19:13.811383+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x206c4e220, '_onqueue_sendSessionChallenge:completionHandler:', 0x106c090d8, 0x106c10158); 00:19:13.811415+0800 APP-sample === SSL Kill Switch 3: [info] AFNetworking detected; hooking it... 00:19:13.811448+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x103ba30e8, 'setSSLPinningMode:', 0x106c092a0, 0x106c10160); 00:19:13.811486+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x103ba30e8, 'setAllowInvalidCertificates:', 0x106c09424, 0x106c10168); 00:19:13.811531+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x103ba3110, 'policyWithPinningMode:', 0x106c095bc, 0x106c10170); 00:19:13.811577+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x103ba3110, 'policyWithPinningMode:withPinnedCertificates:', 0x106c09744, 0x106c10178); 00:19:13.811626+0800 APP-sample === SSL Kill Switch 3: [info] Finished Hooking! 00:19:13.860332+0800 APP-sample === SSL Kill Switch 3: [verb] >> Entering newAFSecurityPolicy_setSSLPinningMode() 00:19:13.860366+0800 APP-sample === SSL Kill Switch 3: [verb] AFSecurityPolicy setSSLPinningMode: 0 -> 0 00:19:13.860399+0800 APP-sample === SSL Kill Switch 3: [verb] << Leaving new__AFSecurityPolicy_setSSLPinningMode() 00:19:13.860634+0800 APP-sample === SSL Kill Switch 3: [verb] >> Entering newAFSecurityPolicy_policyWithPinningMode() 00:19:13.860677+0800 APP-sample === SSL Kill Switch 3: [verb] AFSecurityPolicy policyWithPinningMode: 0 -> AFSSLPinningModeNone 00:19:13.860711+0800 APP-sample === SSL Kill Switch 3: [verb] << Leaving newAFSecurityPolicy_policyWithPinningMode() 00:19:14.411916+0800 APP-sample === SSL Kill Switch 3: [info] Using LogLevel = 10 00:19:14.411967+0800 APP-sample === SSL Kill Switch 3: [info] Preference set to 1. 00:19:14.412122+0800 APP-sample === SSL Kill Switch 3: [info] Hook enabled. 00:19:14.412189+0800 APP-sample === SSL Kill Switch 3: [info] iOS 13+ detected 00:19:14.412245+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('/usr/lib/libboringssl.dylib', 'SSL_set_custom_verify', 0x1027279a8, 0x1027300c0); 00:19:14.413136+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1b9cc0160 -> 0x1b9cc0160 00:19:14.413188+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SSL_set_custom_verify ptr 0x1b9cc0160, from 0xb4000068f9400408 0xf900190239056101 0x7945f008d65f03c0 to 0x9126a231f0a45331 0xf9001902d61f0220 0x7945f008d65f03c0 00:19:14.413244+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('/usr/lib/libboringssl.dylib', 'SSL_get_psk_identity', 0x10272683c, 0x0); 00:19:14.414326+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1b9cc0878 -> 0x1b9cc0878 00:19:14.414393+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SSL_get_psk_identity ptr 0x1b9cc0878, from 0xa9bf7bfdd503237f 0xb4000080910003fd 0xb4000040940072b6 to 0x9120f231d0a45331 0xb4000080d61f0220 0xb4000040940072b6 00:19:14.414442+0800 APP-sample === SSL Kill Switch 3: [info] Hooking Security framework... 00:19:14.414486+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecIsInternalRelease', 0x10272836c, 0x102730108); 00:19:14.414520+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3f238c -> 0x1ab3f238c 00:19:14.414555+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecIsInternalRelease ptr 0x1ab3f238c, from 0x911e4400f0000260 0xd503237f164b0157 0xa90167faa9ba6ffc to 0x910db231d0ab99b1 0xd503237fd61f0220 0xa90167faa9ba6ffc 00:19:14.414592+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustEvaluate', 0x102728474, 0x102730110); 00:19:14.414628+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3e90b4 -> 0x1ab3e90b4 00:19:14.414669+0800 APP-sample === SSL Kill Switch 3: [info] SecTrustEvaluate jumps to 0x1ab3e90b8: d101c3ffd503237f, hook new addr instead! 00:19:14.414705+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustEvaluate ptr 0x1ab3e90b4, from 0xd503237f14000001 0xa9054ff4d101c3ff 0x910183fda9067bfd to 0xf0ab99f114000001 0xd61f02209111d231 0x910183fda9067bfd 00:19:14.414738+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustEvaluateAsync', 0x1027285d4, 0x102730118); 00:19:14.414771+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3ea6e8 -> 0x1ab3ea6e8 00:19:14.414805+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustEvaluateAsync ptr 0x1ab3ea6e8, from 0xd10183ffd503237f 0xa9044ff4a90357f6 0x910143fda9057bfd to 0x91175231d0ab99f1 0xa9044ff4d61f0220 0x910143fda9057bfd 00:19:14.414839+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustEvaluateWithError', 0x102728750, 0x102730120); 00:19:14.414870+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3e9584 -> 0x1ab3e9584 00:19:14.414905+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustEvaluateWithError ptr 0x1ab3e9584, from 0xd100c3ffd503237f 0xa9027bfda9014ff4 0xaa0103f3910083fd to 0x911d4231f0ab99f1 0xa9027bfdd61f0220 0xaa0103f3910083fd 00:19:14.414947+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustEvaluateAsyncWithError', 0x1027288b8, 0x102730128); 00:19:14.414980+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3eb618 -> 0x1ab3eb618 00:19:14.415015+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustEvaluateAsyncWithError ptr 0x1ab3eb618, from 0xd10183ffd503237f 0xa9044ff4a90357f6 0x910143fda9057bfd to 0x9122e231b0ab99f1 0xa9044ff4d61f0220 0x910143fda9057bfd 00:19:14.415049+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustEvaluateFastAsync', 0x102728a34, 0x102730130); 00:19:14.415081+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3ea7f0 -> 0x1ab3ea7f0 00:19:14.415116+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustEvaluateFastAsync ptr 0x1ab3ea7f0, from 0xd10183ffd503237f 0xa9044ff4a90357f6 0x910143fda9057bfd to 0x9128d231d0ab99f1 0xa9044ff4d61f0220 0x910143fda9057bfd 00:19:14.415149+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecTrustSetPolicies', 0x102728bb4, 0x102730138); 00:19:14.415180+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3e6858 -> 0x1ab3e6858 00:19:14.415226+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecTrustSetPolicies ptr 0x1ab3e6858, from 0xd10303ffd503237f 0xa9085ff8a90767fa 0xa90a4ff4a90957f6 to 0x912ed231d0ab9a11 0xa9085ff8d61f0220 0xa90a4ff4a90957f6 00:19:14.415261+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecKeyVerifySignature', 0x102728cbc, 0x102730140); 00:19:14.415303+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3be0fc -> 0x1ab3be0fc 00:19:14.415347+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecKeyVerifySignature ptr 0x1ab3be0fc, from 0xd101c3ffd503237f 0xa90457f6a9035ff8 0xa9067bfda9054ff4 to 0x9132f231d0ab9b51 0xa90457f6d61f0220 0xa9067bfda9054ff4 00:19:14.415380+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF('(null)', 'SecKeyRawVerify', 0x102728dec, 0x102730148); 00:19:14.415416+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF resolved pFunc -> 0x1ab3bdffc -> 0x1ab3bdffc 00:19:14.415451+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookF result: func SecKeyRawVerify ptr 0x1ab3bdffc, from 0xd101c3ffd503237f 0xa90457f6a9035ff8 0xa9067bfda9054ff4 to 0x9137b231f0ab9b51 0xa90457f6d61f0220 0xa9067bfda9054ff4 00:19:14.415491+0800 APP-sample === SSL Kill Switch 3: [info] Hooking URLSession... 00:19:14.415524+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x2064ed048, '_onqueue_didReceiveChallenge:request:withCompletion:', 0x102728ef4, 0x102730150); 00:19:14.415556+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x206c4e220, '_onqueue_sendSessionChallenge:completionHandler:', 0x1027290d8, 0x102730158); 00:19:14.415606+0800 APP-sample === SSL Kill Switch 3: [info] AFNetworking detected; hooking it... 00:19:14.415640+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x101a830e8, 'setSSLPinningMode:', 0x1027292a0, 0x102730160); 00:19:14.415673+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x101a830e8, 'setAllowInvalidCertificates:', 0x102729424, 0x102730168); 00:19:14.415704+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x101a83110, 'policyWithPinningMode:', 0x1027295bc, 0x102730170); 00:19:14.415738+0800 APP-sample === SSL Kill Switch 3: [verb] [init] hookM(0x101a83110, 'policyWithPinningMode:withPinnedCertificates:', 0x102729744, 0x102730178); 00:19:14.415767+0800 APP-sample === SSL Kill Switch 3: [info] Finished Hooking! 00:19:14.462752+0800 APP-sample === SSL Kill Switch 3: [verb] >> Entering new__AFSecurityPolicy_setSSLPinningMode() 00:19:14.462784+0800 APP-sample === SSL Kill Switch 3: [verb] AFSecurityPolicy setSSLPinningMode: 0 -> 0 00:19:14.462816+0800 APP-sample === SSL Kill Switch 3: [verb] << Leaving newAFSecurityPolicy_setSSLPinningMode() 00:19:14.462964+0800 APP-sample === SSL Kill Switch 3: [verb] >> Entering new__AFSecurityPolicy_policyWithPinningMode() 00:19:14.462995+0800 APP-sample === SSL Kill Switch 3: [verb] AFSecurityPolicy policyWithPinningMode: 0 -> AFSSLPinningModeNone 00:19:14.463027+0800 APP-sample === SSL Kill Switch 3: [verb] << Leaving new__AFSecurityPolicy_policyWithPinningMode()