Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Decrypt without launching app #28

Open
subdiox opened this issue Apr 8, 2018 · 1 comment
Open

Decrypt without launching app #28

subdiox opened this issue Apr 8, 2018 · 1 comment

Comments

@subdiox
Copy link

subdiox commented Apr 8, 2018

Issue

bfinject needs the app to be launched successfully, because it searches process name using ps.
Some applications I want to decrypt doesn't launch in jailbroken environment, so I need to decrypt them without launching it (or before launching process finishes).

Suggestion

Is it impossible to decrypt AppStore apps without launching it? The decrypting program called Clutch could do it (even though it doesn't seem to support iOS11).

Example

I could not test/decrypt/cycript com.aniplex.kirarafantasia app on AppStore [Link].
It has a jailbreak detection function when launching, and it kills itself quickly and bfinject cannot detect the app.
Please refer to the following log:

root# bash bfinject -P com.aniplex.kirarafantasia -L test
[!] "com.aniplex.kirarafantasia" was not uniquely found, please check your criteria.
@CokePokes
Copy link

You could try running "killall -SIGSTOP APPNAME" when app is launched and run bfinject. Not sure if it works though. Be quick or else watchdog will kill the app if not done quickly enough. Worth a shot.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants