ptoomey3 / Keychain-Dumper

A tool to check which keychain items are available to an attacker once an iOS device has been jailbroken
BSD 3-Clause "New" or "Revised" License
1.34k stars 299 forks source link

ios 15 - ldid missing Info.plist #73

Closed bensh closed 1 year ago

bensh commented 1 year ago

Just fiddling around with keychain_dumper on iOS15.6 jailbroken with palera1n and went to sign the binary with ldid with a modified ent.xml file and getting the following:

iPhone# ldid -S/private/var/root/keychain_ent.xml /var/jb/usr/sbin
ldid: Could not find Info.plist

No idea what this is or means, works fine on iOS 14.4.

EDIt: Sorry!! my mistake! it works when adding the binary actually in the path haha. mind exploding since jailbreaking palera1n and having to find all testing tools again.

ptoomey3 commented 1 year ago

I'm a bit confused by the output above since it looks like the second argument to ldid is a directory (/var/jb/usr/sbin). Are you using the shell script to do this: https://github.com/ptoomey3/Keychain-Dumper/blob/master/updateEntitlements.sh ?

bensh commented 1 year ago

error behind keyboard! works fine

iPhone:~ root# ldid -S/private/var/root/keychain_ent.xml /var/jb/usr/sbin/keychain_dumper
iPhone:~ root# keychain_dumper -a | head
Generic Password
----------------
Service: com.apple.gs.beta.auth.com.apple.account.AppleIDAuthentication.token
ptoomey3 commented 1 year ago

😅 - Glad it was an easy "fix".