Dumpdecrypted砸壳(有壳还是没壳)？

@cfc_boy wrote:

chendeMac:Downloads chen$ file WeChat
WeChat: Mach-O universal binary with 2 architectures: [arm_v7: Mach-O executable arm_v7] [x86_64]
WeChat (for architecture armv7): Mach-O executable arm_v7
WeChat (for architecture x86_64): Mach-O 64-bit executable x86_64

chendeMac:Downloads chen$ otool -l WeChat |grep -B 2 crypt
cmd LC_ENCRYPTION_INFO_64
cmdsize 24
cryptoff 16384
cryptsize 49610752
cryptid 1

chendeMac:Downloads chen$ otool -l WeChat |grep crypt
cryptoff 16384
cryptsize 49610752
cryptid 1

Administratorde-iPhone:/var/mobile/Containers/Data/Application/2851C7EF-967B-41D1-97FD-830B397D8959/Documents root# DYLD_INSERT_LIBRARIES=./dumpdecrypted.dylib /var/mobile/Containers/Bundle/Application/32E244B9-C3EE-43B0-A71B-E96919AD9CAC/WeChat.app/WeChat
mach-o decryption dumper

DISCLAIMER: This tool is only meant for security research purposes, not for application crackers.

[+] detected 32bit ARM binary in memory.
[-] This mach-o file is not encrypted. Nothing was decrypted.

新手，有大神指导一下吗

Posts: 1

Participants: 1

Read full topic