Frida一键dump

安装Frida

• iOS端安装

  打开cydia 添加源： https://build.frida.re

  打开刚刚添加的源 安装 frida（64位和32位，看自己手机类型）

• Mac端安装

  首先最好有brew & python版本为2.x （Mac默认为2.x，可以用pyenv管理python版本）

  终端执行：sudo pip install frida

  假如报以下错误：Uninstalling a distutils installed project (six) has been deprecated and will be removed in a future version. This is due to the fact that uninstalling a distutils project will only partially uninstall the project.
  使用以下命令安装：sudo pip install frida –upgrade –ignore-installed six
  假如报以下错误：Cannot uninstall ‘six’. It is a distutils installed project and thus we cannot accurately determine which files belong to it which would lead to only a partial uninstall.
  使用以下命令安装：只需要把six注释掉不安装就可以了：sudo python -m pip install -U matplotlib –ignore-installed six

• 安装 frida-ios-dump

  1. sudo mkdir /opt/dump && cd /opt/dump && sudo git clone https://github.com/AloneMonkey/frida-ios-dump

  2. 安装依赖

     sudo pip install -r /opt/dump/frida-ios-dump/requirements.txt –upgrade

  3. 修改dump.py（可选—-如果做了2222端口转发则不需要改）

     vim /opt/dump/frida-ios-dump/dump.py

     修改.zshrc 添加alias

     alias dump.py=”/opt/dump/frida-ios-dump/dump.py”

一键dump

dump.py -l 查看当前手机可脱壳应用

dump.py 应用名称，会在当前目录输出脱壳文件