Skip to content
Permalink
master
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
Go to file
 
 
Cannot retrieve contributors at this time
#!/bin/sh
AppID=$1
SearchText=$3
HeaderName=$2
if [ ! -d "$AppID"_headers ]; then
#logic to check if the binfile is encrypted
binFile=$(find /var/mobile/Containers/Bundle/Application/"$AppID"/*.app -type f -exec file {} \; | grep Mach-O | cut -d":" -f1)
mkdir /Applications/iRE.app/"$AppID"_headers
isEncrypted=$(otool -lv "$binFile" | grep cryptid | sed 's/^ *//g' | tr ' ' ':' | cut -d":" -f4)
classDumpPath=$(grep -F classDumpZ /Applications/iRE.app/toolPaths.txt | cut -d":" -f2)
if [ $isEncrypted -eq 1 ]; then
#binary is encrypted
dumpPath=$(grep -F dumpdecrypted /Applications/iRE.app/toolPaths.txt | cut -d":" -f2)
newBin=$(echo "$binFile" | sed 's/ /\\ /g')
dumpit="DYLD_INSERT_LIBRARIES=$dumpPath "
dumpit2=$dumpit$newBin
eval $dumpit2
binFile2=$(basename "$newBin")
fileLoc=$(find / -name "$binFile2".decrypted -type f)
nFile=$( echo "$fileLoc" | sed 's/ /\\ /g' )
eval mv "$nFile" "/Applications/iRE.app/"
eval $classDumpPath /Applications/iRE.app/"$binFile2".decrypted -H -o /Applications/iRE.app/"$AppID"_headers
else
eval $classDumpPath "$binFile" -H -o /Applications/iRE.app/"$AppID"_headers
fi
fi
echo ' <html>
<head>
<title>iRET - iOS Reverse Engineering Toolkit</title>
<style type="text/css">
body { font-size: 80%; font-family: Lucida Grande, Verdana, Arial, Sans-Serif; }
ul#tabs { list-style-type: none; margin: 10px 0 0 0; padding: 0 0 0.3em 0; }
ul#tabs li { display: inline; }
ul#tabs li a { color: #000000; background-color: #d3d3d3; border: 1px solid #000000; border-bottom: none; padding: 0.3em; text-decoration: none; }
ul#tabs li a:hover { background-color: #377CC2; }
ul#tabs li a.selected { color: #000000; background-color: #FFFFFF; font-weight: bold; padding: 0.7em 0.3em 0.38em 0.3em; }
div.tabContent { border: 1px solid #000000; padding: 0.5em; background-color: #FFFFFF; }
div.tabContent.hide { display: none; }
.output {font-family: Times New Roman; font-size:12pt; word-wrap:break-word;}
table.output {background-color:#d3d3d3; border:1px solid black; font-family: Times New Roman; font-size:12pt; word-wrap:break-word;}
table.dboutput {background-color:#d3d3d3; border:1px solid black;}
tr.output {border:1px solid black; text-align:left; vertical-align:top;}
td.output {border:1px solid black; text-align:left; vertical-align:top;}
div#expand{display:block; width:500px;}
.boxsizingBorder
{
-moz-appearance: textfield-multiline;
-webkit-appearance: textarea;
border: 1px solid gray;
font: medium -moz-fixed;
font: -webkit-small-control;
height: 100%;
overflow: auto;
padding: 2px;
resize: both;
width: 100%;
}
</style>
<script type="text/javascript">
//<![CDATA[
var tabLinks = new Array();
var contentDivs = new Array();
function init() {
// Grab the tab links and content divs from the page
var tabListItems = document.getElementById("tabs").childNodes;
for ( var i = 0; i < tabListItems.length; i++ ) {
if ( tabListItems[i].nodeName == "LI" ) {
var tabLink = getFirstChildWithTagName( tabListItems[i], "A" );
var id = getHash( tabLink.getAttribute("href") );
tabLinks[id] = tabLink;
contentDivs[id] = document.getElementById( id );
}
}
// Assign onclick events to the tab links, and
// highlight the first tab
var i = 0;
for ( var id in tabLinks ) {
tabLinks[id].onclick = showTab;
tabLinks[id].onfocus = function() { this.blur() };
if ( i == 5 ) tabLinks[id].className = "selected";
i++;
}
// Hide all content divs except the first
var i = 5;
for ( var id in contentDivs ) {
if ( i != 5 ) contentDivs[id].className = "tabContent hide";
i++;
}
}
function showTab() {
var selectedId = getHash( this.getAttribute("href") );
// Highlight the selected tab, and dim all others.
// Also show the selected content div, and hide all others.
for ( var id in contentDivs ) {
if ( id == selectedId ) {
tabLinks[id].className = "selected";
contentDivs[id].className = "tabContent";
} else {
tabLinks[id].className = "";
contentDivs[id].className = "tabContent hide";
}
}
// Stop the browser following the link
return false;
}
function getFirstChildWithTagName( element, tagName ) {
for ( var i = 0; i < element.childNodes.length; i++ ) {
if ( element.childNodes[i].nodeName == tagName ) return element.childNodes[i];
}
}
function getHash( url ) {
var hashPos = url.lastIndexOf ( "#" );
return url.substring( hashPos + 1 );
}
function showDiv(divName)
{
if(document.getElementById(divName).style.display == "none")
document.getElementById(divName).style.display = "block";
else
document.getElementById(divName).style.display = "none";
}
function checkForm(strValue)
{
var oForm = document.getElementById("form1");
oForm.submit();
}
//]]>
</script>
</head>
<body onload="init();" bgcolor="#377CC2">
<table width="100%" height="100%">
<tr>
<td align="center" valign="center">
<table style="background-color:white;border:1px solid black;" height="90%" width="90%">
<tr>
<td align="center" valign="top" height="1%"><font face="arial black" color="black" size="6">Welcome to iRET<br>The iOS Reverse Engineering Toolkit</font></td>
</tr>
<tr>
<td valign="top">
<ul id="tabs">
<li><a href="/Binary?AppID='${AppID}'">Binary Analysis</a></li>
<li><a href="/Keychain?AppID='${AppID}'">Keychain Analysis</a></li>
<li><a href="/Database?AppID='${AppID}'">Database Analysis</a></li>
<li><a href="/Log?AppID='${AppID}'">Log Viewer</a></li>
<li><a href="/PList?AppID='${AppID}'">Plist Viewer</a></li>
<li><a href="#">Header Files</a></li>
<li><a href="/Theos?AppID='${AppID}'">Theos</a></li>
<li><a href="/Screenshot?AppID='${AppID}'">Screenshot</a></li>
<li><a href="/">Home</a></li>
</ul>
<!-- System Log -->
<div class="tabContent" id="log">
<div>
<!-- Application Header Files -->
<h2>Below are the header files that were dumped for the selected application.</h2><br>'
Headers=$(ls /Applications/iRE.app/"$AppID"_headers)
if [ -n "$Headers" ]
then
dropDownList="<option value=>Select A Header File</option>"
OIFS="$IFS"
IFS=$'\n'
for i in ${Headers}
do
fName="/Applications/iRE.app/"$AppID"_headers/"$i
if [ "$HeaderName" = "$fName" ]; then
dropDownList+="<option value='"/Applications/iRE.app/"$AppID"_headers/$i"' selected>"$i"</option>"
else
dropDownList+="<option value='"/Applications/iRE.app/"$AppID"_headers/$i"'>"$i"</option>"
fi
done
IFS="$OIFS"
echo '<font face="arial black" color="black" size="3">To begin, select a plist file from the list below:</font><br><br>
<form id="form1" method="GET" action="/ShowHeader">
<select name="AppID='${AppID}'&HeaderName" onchange="checkForm(this.value);">'
echo $dropDownList
echo '</select></form>
<div>
<br>'
if [ -n "$HeaderName" ]
then
#Use theos to logify the header
tmpDir="/Applications/iRE.app/tmp/"
file="/Applications/iRE.app/tmp/Tweak.xm"
#check if tmp directory exists
if [ ! -d "$tmpDir" ]; then
eval mkdir /Applications/iRE.app/tmp
fi
#check if "Tweak.xm" file exists
if [ -f "$file" ]; then
eval rm "$file"
fi
#nHeader=$(echo "$HeaderName" | sed 's/\\//g')
#nHeaderName=$(echo "$nHeader" | sed 's/ /\\ /g')
theosPath=$(grep -F theos /Applications/iRE.app/toolPaths.txt | cut -d":" -f2)
eval "$theosPath/bin/logify.pl $HeaderName > /Applications/iRE.app/tmp/Tweak.xm"
content=$(cat /Applications/iRE.app/tmp/Tweak.xm | sed 's/</\&lt;/g' | tr '\n' '!' | sed 's/!/<br>/g')
echo '<div id="divLog" style="height:300px;position:relative;background-color:#d3d3d3; width:50%; word-wrap: break-word;">
<div id="divLog2" style="max-height:100%;overflow:auto;border:1px solid black; word-wrap: break-word;">
<div id="divLog3" style="height:1500px; word-wrap: break-word;">
<pre class="output">'
if [ "$content" != "" ]
then
echo $content
else
echo "<font color="red"><b>No Content To Logify</b></font>"
fi
echo '</pre>
</div>
</div>
</div>'
fi
fi
echo '</div>
</div>
</body>
</html>'