search

dmayer / idb

idb is a tool to simplify some common tasks for iOS pentesting and research
MIT License
942 stars 156 forks source link

Weak Class Dump - cycript can't find running process #40

Closed sanitybit closed 10 years ago

sanitybit commented 10 years ago

Trying to dump weak classes using cycript. The dialog pops up telling me to wait, but I never hear a lock sound. No debug output.

[INFO] 2014-04-03 19:44:56 :: gidb ::  Checking if cycript is installed...
[INFO] 2014-04-03 19:44:56 :: gidb ::  cycript found at /usr/bin/cycript.
[INFO] 2014-04-03 19:44:56 :: gidb ::  Launching app...
/usr/bin/open "com.realvnc.VNCViewer"
[INFO] 2014-04-03 19:44:56 :: gidb ::  Injecting: cycript -p 'VNC Viewer' /var/root/weak_classdump.cy
[INFO] 2014-04-03 19:44:56 :: gidb ::  Running cycript using weak_classdump.
[INFO] 2014-04-03 19:44:56 :: gidb ::  Running: cycript -p 'VNC Viewer' /var/root/weak_classdump_instructions.cy

If I run cycript -p 'VNC Viewer' /var/root/weak_classdump_instructions.cy manually, I get back unable to find processVNC Viewer' using pseven thoughps aux|grep VNCreturnsmobile 2997 0.0 3.0 415304 15204 ?? Ss 7:36PM 0:01.50 /var/mobile/Applications/3672B369-49F6-423B-963F-C431BD0D63AC/VNC Viewer.2.2.3.002740.app/VNC Viewer`.

dmayer commented 10 years ago

Interesting. I'll check into that. I assume its due to the space in the process name, but not sure.

dmayer commented 10 years ago

I'm closing this as "works for me". I just installed VNC Viewer and ran the class dumper. One thing to keep in mind is that the app should be completely closed before running. Something I should probably add to the UI :smile: