/dylib_dobby_hook

A macOS dylib project based on the Dobby Hook framework, aimed at enhancing and extending the functionality of target software.

Primary LanguagePythonMIT LicenseMIT

About

该项目是一个 macOS dylib 项目，集成了 Dobby Hook 框架，旨在通过使用 Dobby Hook 框架对软件进行辅助增强。

开发环境:

  • MacOS (关闭 SIP & 允许任何来源)
  • xcode 15.2 | clion
  • dobby
  • insert_dylib
  • hopper | ida

目录结构 :

  1. dylib_dobby_hook: 源码
  2. libs: 项目依赖的开源 dobby 库
  3. release: build 后的成品
  4. script:
    • auto_hack.sh 静态注入 sudo bash auto_hack.sh
    • auto_dynamic_hack.sh 动态注入[SIP OFF] sudo bash auto_dynamic_hack.sh
  5. tools: insert_dylib 开源注入工具

Feat

  1. 跨平台 HOOK
  2. Xcode|Clion 集成开发调试环境
  3. 特征码搜索
点击这里展开/收起
App version x86 arm Download SIP Author
TablePlus 6.* ✔ ✔ https://tableplus.com/
DevUtils 1.* ✔ ✔ https://devutils.com/
AirBuddy 2.* ✔ ✔ https://v2.airbuddy.app/download
Navicat Premium 17.* ✔ ✔ App Store
Paste 4.1.3 ✘ ✔ App Store LeeeMooo
Transmit 5.* ✔ ✔ https://panic.com/transmit/#download
AnyGo 7.* ✔ ✔ https://itoolab.com/gps-location-changer/
Downie 4.* ✔ ✔ https://software.charliemonroe.net/downie/
Permute 3.* ✔ ✔ https://software.charliemonroe.net/permute/
ProxyMan 5. ✔ ✔ https://proxyman.io/ ON
Movist Pro 2.* ✔ ✔ https://movistprime.com/
Surge 5.8.* ✔ ✔ https://nssurge.com/ ON
Infuse 7.7.* ✔ ✔ App Store
MacUpdater 3. ✔ ✔ https://www.corecode.io/macupdater/#download
CleanShotX 4. ✔ ✔ https://updates.getcleanshot.com/v3/
ForkLift 4. ✔ ✔ https://binarynights.com/ ON
IDA Pro 9. ✔ ✔ https://out5.hex-rays.com/beta90_6ba923/ alula

Usage

download latest release

tar -xzvf dylib_dobby_hook.tar.gz
cd script 
sudo bash auto_hack.sh

Develop

0x0

基础代码已经完成, 为了兼容更多的 app 补丁, 使用了适配器模式来进行扩展

0x1 定义实现类(以当前 XXX 为例)

#import <Foundation/Foundation.h>
#import <objc/runtime.h>
#import "HackProtocol.h"


@interface XXXHack : HackProtocolDefault

@end

@implementation XXXHack

- (NSString *)getAppName {
return @"com.dev.xxx";
}

- (NSString *)getSupportAppVersion {
return @"1.0";
}


- (BOOL)hack {

#if
defined(__arm64__) || defined(__aarch64__)
// do arm something..
#elif
defined(__x86_64__)
// do x86 something..
#endif
return YES;
}
@end

0x2 Build & 注入

编译后, 会得到一个我们的 dylib 补丁
然后编写 shell 脚本,来注入

cp -f source_bin source_bin_backup 
"${insert_dylib}" --weak --all-yes "${YOUR_BUILD_PATH}/libdylib_dobby_hook.dylib" "source_bin_backup" "source_bin"

Sponsor

JetBrains

Ref

  1. [MacOS逆向] MacOS TablePlus dylib注入 HOOK x86/arm 双插 完美破解 https://www.52pojie.cn/thread-1739112-1-1.html
  2. [C&C++ 原创] C++ 跨平台 内联汇编集成 (MacOS,Linux,Windows) https://www.52pojie.cn/thread-1653689-1-1.html
  3. jmpews/Dobby https://github.com/jmpews/Dobby

WARN

仅供研究学习使用，请勿用于非法用途
注：若转载请注明来源（本贴地址）与作者信息。