jjolano / shadow

A jailbreak detection bypass for modern iOS jailbreaks.
https://ios.jjolano.me
BSD 3-Clause "New" or "Revised" License
792 stars 131 forks source link

[Bug] Cannt run any frida script when Shadow option "Dynamic Libraries" enabled #157

Open MrR1p opened 1 year ago

MrR1p commented 1 year ago

Description When enable option to bypass "Dynamic Libraries" in Essential Hooks section any Frida script failed execution to bypass or monitor something. Maybe it is problem in a way how hooks loaded in Frida or how Shadow try to hide dynamic modules loaded into the process.

To Reproduce Steps to reproduce the behavior:

  1. Enable Shadow for any user installed Application with "Dynamic Libraries" option enabled (for example application https://apps.apple.com/ru/app/%D0%B8%D0%BD%D0%B3%D0%BE%D1%81%D1%81%D1%82%D1%80%D0%B0%D1%85-ingomobile-%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD/id1319319386)
  2. Spawn this application with Frida (frida -U -f ru.ingos.ingomobile)
  3. Try to run any script (for example simple var current_window = ObjC.classes.UIWindow.keyWindow()
  4. See error:
    TypeError: cannot read property 'objc_lookUpClass' of null
    at o (frida/node_modules/frida-objc-bridge/index.js:179)
    at get (frida/node_modules/frida-objc-bridge/index.js:149)
    at <eval> (<input>:1)
    at eval (native)

Expected behavior Frida script sucessfully loaded and execute

Device Information (please complete the following information):