goios proxy命令不支持imazing图

prife commented 1 year ago

imazing，提供了图片推送功能，它具有以下特点：

将PC上的图片上传到手机上
手机上使用自带的相册app可以读取到图片

对比go-ios实现的fsync协议可以将图片上传到手机里，但是相册app缺无法识别到图片。

尝试使用go-ios自带的proxy协议逆向imazing协议，但是在开启SSL后，imazing图片推送功能失败

prife commented 1 year ago

go-ios 4月份左右的更新（assistd/go-ios已经合并相关改动），确认该问题已经不存在。

$ grep CFA6LPAA -Hlr --include="*.txt" dump-2022.12.30-02.14.23.781 | sort                                                                                                          [13:58:07]
dump-2022.12.30-02.14.23.781/connection-#196-2022.12.30-02.14.38.327/bindump-hostservice-to-proxy.txt
dump-2022.12.30-02.14.23.781/connection-#233-2022.12.30-02.14.38.911/bindump-hostservice-to-proxy.txt
dump-2022.12.30-02.14.23.781/connection-#260-2022.12.30-02.14.40.449/bindump-hostservice-to-proxy.txt
dump-2022.12.30-02.14.23.781/connection-#295-2022.12.30-02.14.40.803/bindump-hostservice-to-proxy.txt
dump-2022.12.30-02.14.23.781/connection-#332-2022.12.30-02.14.48.146/bindump-hostservice-to-proxy.txt
dump-2022.12.30-02.14.23.781/connection-#376-2022.12.30-02.14.48.905/bindump-hostservice-to-proxy.txt
dump-2022.12.30-02.14.23.781/connection-#400-2022.12.30-02.14.48.981/bindump-hostservice-to-proxy.txt
dump-2022.12.30-02.14.23.781/connection-#437-2022.12.30-02.14.49.432/bindump-hostservice-to-proxy.txt
dump-2022.12.30-02.14.23.781/connection-#461-2022.12.30-02.15.36.080/bindump-hostservice-to-proxy.txt
dump-2022.12.30-02.14.23.781/connection-#477-2022.12.30-02.15.36.294/bindump-hostservice-to-proxy.txt

写入图片到/Airlock/Photo/00000000-0000-0000-0000-000000000066
00000030  2f 41 69 72 6c 6f 63 6b  2f 50 68 6f 74 6f 2f 30  |/Airlock/Photo/0|
00000040  30 30 30 30 30 30 30 2d  30 30 30 30 2d 30 30 30  |0000000-0000-000|
00000050  30 2d 30 30 30 30 2d 30  30 30 30 30 30 30 30 30  |0-0000-000000000|
00000060  30 36 36 00 00 00 00 00  00 00 00 00 00 00 00 00  |066.............|

dump-2022.12.30-02.14.23.781/connection-#489-2022.12.30-02.15.36.361/bindump-hostservice-to-proxy.txt

/Photos/Sync/CurrentLibraryUUID.plist，找不到
dump-2022.12.30-02.14.23.781/connection-#500-2022.12.30-02.15.36.406/bindump-hostservice-to-proxy.txt

这个内容较多，稍后分析
dump-2022.12.30-02.14.23.781/connection-#514-2022.12.30-02.15.36.448/bindump-hostservice-to-proxy.txt

/PhotoData/syncInfo.plist，但找不到
dump-2022.12.30-02.14.23.781/connection-#528-2022.12.30-02.15.36.507/bindump-hostservice-to-proxy.txt

# /Photos/Sync/PhotoLibrary.plist.lastsynced，但是找不到
dump-2022.12.30-02.14.23.781/connection-#536-2022.12.30-02.15.36.545/bindump-hostservice-to-proxy.txt

# get info /Photos/Sync/PhotoLibrary.plist文件，找不到
dump-2022.12.30-02.14.23.781/connection-#542-2022.12.30-02.15.36.585/bindump-hostservice-to-proxy.txt

get info /Photos/Sync/PhotoLibrary.plist，并settime
dump-2022.12.30-02.14.23.781/connection-#549-2022.12.30-02.15.38.152/bindump-hostservice-to-proxy.txt

刷新数据库
dump-2022.12.30-02.14.23.781/connection-#571-2022.12.30-02.15.45.421/bindump-hostservice-to-proxy.txt

dump-2022.12.30-02.14.23.781/connection-#600-2022.12.30-02.15.45.902/bindump-hostservice-to-proxy.txt
dump-2022.12.30-02.14.23.781/connection-#665-2022.12.30-02.15.52.604/bindump-hostservice-to-proxy.txt
dump-2022.12.30-02.14.23.781/connection-#700-2022.12.30-02.15.53.074/bindump-hostservice-to-proxy.txt

总结：

使用afc推送图片到自建的文件夹下
利用afc将Phone.sqlite pull到mac上，同时锁定数据库文件（lock）
修改数据库（推测，没细看）
推送数据库回手机（推测，没细看）

考虑到该方案需要对不同的iOS版本做兼容，且对游戏相关非刚需，该方案后续的研究暂时搁置，等以后时机合适再重启。

相关资料归档至微盘 WeTest终端开发组-开发资料-imazing破解

prife commented 1 year ago

assistd / go-ios

goios proxy命令不支持imazing图 #41