此篇为自用破壳流程，仅供参考。
环境
- 越狱手机
- 手机需安装
- OpenSSH
- Clutch
步骤
- 下载
- 推到越狱手机上
电脑端scp ~/Desktop/autoCracker.sh root@100.85.109.112:/var/root/autoCracker.sh推荐放到root目录下. 由于不是经常需要破壳，所以经常会忘了有此脚本。
- 设置脚本权限
手机chmod +R 777 autoCracker.sh - 执行脚本
手机./autoCracker.sh
等待执行结果.
破壳结果检查
- 得到破壳后的ipa，copy到电脑端
电脑端scp root@100.85.109.167:/var/mobile/Documents/Dumped/net.openvpn.connect.app.ipa ~/Desktop
otool -l 执行文件 | grep crypt
cryptoff 16384
cryptsize 2949120
cryptid 0 /*0 破壳 ， 1未破壳*/
Weibo示例
此处有一些Extension的错误
iPhone:~ root# ./autoCracker.sh
输入需要破壳的App名字:weibo
开始查找: weibo
找到以下结果:
38: 微博-最新最热的热点资讯，最火最爆的视频直播 <com.sina.weibo>
输入搜索结果中需要破壳 app 行首标号 : 38
com.sina.weibo contains watchOS 2 compatible application. It's not possible to dump watchOS 2 apps with Clutch 2.0.4 at this moment.
Zipping Weibo.app
Error: Could not obtain mach port, either the process is dead (codesign error?) or entitlements were not properly signed!
Error: Failed to dump <NotificationServiceExtension> with arch arm64
2017-05-05 15:56:35.624 clutch[2614:367041] failed operation :(
2017-05-05 15:56:35.626 clutch[2614:367041] application <NSOperationQueue: 0x136f657d0>{name = 'NSOperationQueue 0x136f657d0'}
Error: Failed to dump <NotificationServiceExtension>
2017-05-05 15:56:35.627 clutch[2614:367041] failed operation :(
2017-05-05 15:56:35.627 clutch[2614:367041] application <NSOperationQueue: 0x136f657d0>{name = 'NSOperationQueue 0x136f657d0'}
ASLR slide: 0x100040000
Dumping <TodayExtension> (arm64)
Patched cryptid (64bit segment)
ASLR slide: 0x100008000
Dumping <ShareExtension> (arm64)
Patched cryptid (64bit segment)
Writing new checksum
Writing new checksum
ASLR slide: 0x100098000
Dumping <Weibo> (arm64)
Patched cryptid (64bit segment)
Writing new checksum
Zipping NotificationServiceExtension.appex
Zipping ShareExtension.appex
Zipping TodayExtension.appex
FAILED: <Weibo bundleID: com.sina.weibo>
Finished dumping com.sina.weibo in 81.4 seconds
电脑端操作. 参考
scp root@100.85.109.167:/var/mobile/Documents/Dumped/net.openvpn.connect.app-iOS6.1-(Clutch-2.0.4).ipa ~/Desktop