iOS12通过cyrun使用cycript调试

介绍

手机系统iOS12.0，通过unc0ver越狱，cycript的停止维护，无法正常进行cycript调试。 庆幸的是cyrun支持了通过unc0ver越狱的iOS12系统。

操作流程

1. 在**Cydia**中搜索，并安装 New Curses, readline 和 adv-cmds
2. 下载安装包

• 下载 cycript_0.9.594

wget http://apt.saurik.com/debs/cycript_0.9.594_iphoneos-arm.deb

• 下载nertweak_1.0.0_iphoneos-arm.deb

wget http://www.tateu.net/repo/files/net.tateu.cycriptlistenertweak_1.0.0_iphoneos-arm.deb

• 下载net.tateu.cyrun_1.0.5_iphoneos-arm.deb

wget http://www.tateu.net/repo/files/net.tateu.cyrun_1.0.5_iphoneos-arm.deb

此处下载有三种方式：

• 通过终端wget
• 下载安装包到mac，然后scp到手机
• 借助ifunbox导入安装包

3. 安装

dpkg -i cycript_0.9.594_iphoneos-arm.deb

dpkg -i net.tateu.cycriptlistenertweak_1.0.0_iphoneos-arm.deb net.tateu.cyrun_1.0.5_iphoneos-arm.deb

4. 使用方法

• -n 代表AppName、ExecutableName、IconName、LocalizedName。
• -b 代表bundleIdentifier
• -e 加载
• -d 卸载
• -f 关闭询问是否继续功能
• -c 加载脚本文件

• 加载

cyrun -n SpringBoard -e  
cyrun -b com.apple.springboard -e

• 卸载

cyrun -n SpringBoard -d
cyrun -b com.apple.springboard -d

• 加载和自动卸载，退出cycript时自动杀掉App并卸载

cyrun -x backboardd -e -d

• 关闭询问继续功能和加载脚本

cyrun -b com.apple.springboard -e -d -f -c /path/to/script.cy

来源:

• www.reddit.com/r/jailbreak…
• github.com/tateu/cyrun

示例

akira:/var root# cyrun -n SpringBoard -e
applicationName: SpringBoard is running (7165)
    executableName: SpringBoard
    bundleIdentifier: com.apple.springboard
    Cycript is inactive:
    Device is passcode locked
    Tweak Mode
Do you want to continue enabling Cycript (y or n)? y
Waiting for Process to close...
Waiting for SpringBoard to launch...
Waiting for Cycript to become active...
Success, you may now run
    cycript -r 127.0.0.1:8556
cy# [NSBundle mainBundle].bundleIdentifier
@"com.apple.springboard"
cy# exit(0)
*** _assert(CYRecvAll(socket_, &size, sizeof(size))):../Console.cpp(328):Run
akira:/var root# cyrun -b com.apple.springboard -d
applicationName: SpringBoard is running (7271)
    executableName: SpringBoard
    bundleIdentifier: com.apple.springboard
    Cycript is active: com.apple.springboard
    Device is not passcode locked
    Tweak Mode
Do you want to continue disabling Cycript (y or n)? y
Waiting for Process to close...
Waiting for Cycript to be inactive...
Successfully disabled
    SpringBoard was killed
akira:/var root#