@chensh wrote:
大家好，最近学习砸壳分析App头文件的时候，遇到一个无法砸壳的问题。上来论坛请教一下大家。
砸壳目标应用：Tumblr
机型：iPhone5s
工具：Clutch dumpdecrypted
遇到的情况：无法砸壳。首先使用的是 Clutch的 2.0.1版本：
出现了“Segmentation fault: 11”的异常错误，具体信息如下：root# clutch -d com.tumblr.tumblr
Now dumping com.tumblr.tumblr
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Tumblr
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/Analytics.framework/Analytics
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/BRYEqualsBuilder.framework/BRYEqualsBuilder
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/BRYHTMLParser.framework/BRYHTMLParser
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/BRYHashCodeBuilder.framework/BRYHashCodeBuilder
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/BRYMailToURIParser.framework/BRYMailToURIParser
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/BRYParseKeyboardNotification.framework/BRYParseKeyboardNotification
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/BlueLogger.framework/BlueLogger
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/Bolts.framework/Bolts
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/CHTCollectionViewWaterfallLayout.framework/CHTCollectionViewWaterfallLayout
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/CocktailsRT.framework/CocktailsRT
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/CocoaLumberjack.framework/CocoaLumberjack
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/ComposeUI.framework/ComposeUI
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/CoreExplore.framework/CoreExplore
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/CoreTumblr.framework/CoreTumblr
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/DataDisplayKit.framework/DataDisplayKit
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/Dwifft.framework/Dwifft
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/ExploreUI.framework/ExploreUI
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/FBSDKCoreKit.framework/FBSDKCoreKit
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/FBSDKLoginKit.framework/FBSDKLoginKit
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/FBSDKMessengerShareKit.framework/FBSDKMessengerShareKit
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/FBSDKShareKit.framework/FBSDKShareKit
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/GIFCreator.framework/GIFCreator
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/GIFEncoder.framework/GIFEncoder
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/GRMustache.framework/GRMustache
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/JRSwizzle.framework/JRSwizzle
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/JXHTTP.framework/JXHTTP
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/KVOController.framework/KVOController
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/Logger.framework/Logger
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/Mantle.framework/Mantle
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/Messaging.framework/Messaging
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/MessagingSDK.framework/MessagingSDK
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/NetworkAbstractions.framework/NetworkAbstractions
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/OnePasswordExtension.framework/OnePasswordExtension
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/PSPhotoset.framework/PSPhotoset
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/PigeonSDK.framework/PigeonSDK
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/PlaybackAbstractions.framework/PlaybackAbstractions
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/PostAudioView.framework/PostAudioView
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/Reachability.framework/Reachability
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/SSKeychain.framework/SSKeychain
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/Scimitar.framework/Scimitar
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/ShareExtension.framework/ShareExtension
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/ShareSheet.framework/ShareSheet
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/SharedUI.framework/SharedUI
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/SnoopySDK.framework/SnoopySDK
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/Spectacles.framework/Spectacles
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/TMAudio.framework/TMAudio
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/TMCache.framework/TMCache
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/TMDictionaryUpdatableManagedObject.framework/TMDictionaryUpdatableManagedObject
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/TMTimelineObject.framework/TMTimelineObject
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/TMTumblrSDK.framework/TMTumblrSDK
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/TMTumblrSDK2.framework/TMTumblrSDK2
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/TMVideoPlayer.framework/TMVideoPlayer
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/TZStackView.framework/TZStackView
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/TakeoverMediaBanner.framework/TakeoverMediaBanner
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/VENTouchLock.framework/VENTouchLock
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/WebViewJavascriptBridge.framework/WebViewJavascriptBridge
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/XExtensionItem.framework/XExtensionItem
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/XMLKit.framework/XMLKit
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/YAccounts.framework/YAccounts
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/YAppManagement.framework/YAppManagement
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/YFlurrySDK.framework/YFlurrySDK
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/YI13N.framework/YI13N
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/YLogTelemetry.framework/YLogTelemetry
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/YOTeamID.framework/YOTeamID
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/YOVeriJSON.framework/YOVeriJSON
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/YOWebStringHelpers.framework/YOWebStringHelpers
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/YReachability.framework/YReachability
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/YRemoteControlSDK.framework/YRemoteControlSDK
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/YahooBrowserKit.framework/YahooBrowserKit
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/YahooVideo.framework/YahooVideo
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/sConnectionMonitor.framework/sConnectionMonitor
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Frameworks/youtube_ios_player_helper.framework/youtube_ios_player_helper
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/PlugIns/Share.appex/Share
Preparing to dump
Path: /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/PlugIns/Today.appex/Today
Zipping com.tumblr.Orangina-122-distribution.app
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | ARMDumper Swapping architectures..
DUMP | ARMDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
DUMP | FrameworkDumper Swapping architectures..
Segmentation fault: 11接着我重新下载了一个版本的Clutch 2.0.2版本：
也是一样的异常错误“Segmentation fault: 11”。我以为Clutch无法使用，就换了 dumpdecrypted的方法，具体操作如下：
1.编译了 dumpdecrypted.dylib，用ifunbox放置到了tumblr的Document路径下：
root# cd /var/mobile/Containers/Data/Application/3FC15D89-0F43-4A98-86D6-9632996A36EF/Documents/
root# ls
AnalyticsBuffer InternalEventLogger TMPushNotificationRegistrar YI13N/ dumpdecrypted.dylib
- 在这个Document目录下，执行了命令：
root# DYLD_INSERT_LIBRARIES=dumpdecrypted.dylib /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Tumblr
- 具体信息为：
mach-o decryption dumper
DISCLAIMER: This tool is only meant for security research purposes, not for application crackers.
[+] detected 64bit ARM binary in memory.
[+] offset to cryptid found: @0x100060d48(from 0x100060000) = d48
[+] Found encrypted data at address 00004000 of length 8028160 bytes - type 1.
[+] Opening /private/var/mobile/Containers/Bundle/Application/79FDC8F4-A945-4EAA-85FB-BB4188A07D1F/com.tumblr.Orangina-122-distribution.app/Tumblr for reading.
[+] Reading header
[+] Detecting header type
[+] Executable is a FAT image - searching for right architecture
[+] Correct arch is at offset 9846784 in the file
[+] Opening Tumblr.decrypted for writing.
[-] Failed opening: Operation not permitted出错问题为“Operation not permitted”。
这里的工具都可以正常的为其他app砸壳，目前只有遇到这个Tumblr不行。
我google了很多信息，都无法解决这个问题。
所以上来请教大家一下 ：① 为什么这个app无法砸壳？是这个app加密了还是什么原因？
② 观察到其他 有引用第三方sdk的app砸壳的时候，出现的信息只有"ARMDumper"，而这个tumblr的信息则是 "FrameworkDumper".
这是为什么呢？是这个app的第三方sdk引用方式不一样吗？还请大家不吝赐教。谢谢大家！
Posts: 2
Participants: 2