bfinject icon indicating copy to clipboard operation
bfinject copied to clipboard

Decrypt without launching app

Open subdiox opened this issue 6 years ago • 1 comments

Issue

bfinject needs the app to be launched successfully, because it searches process name using ps. Some applications I want to decrypt doesn't launch in jailbroken environment, so I need to decrypt them without launching it (or before launching process finishes).

Suggestion

Is it impossible to decrypt AppStore apps without launching it? The decrypting program called Clutch could do it (even though it doesn't seem to support iOS11).

Example

I could not test/decrypt/cycript com.aniplex.kirarafantasia app on AppStore [Link]. It has a jailbreak detection function when launching, and it kills itself quickly and bfinject cannot detect the app. Please refer to the following log:

root# bash bfinject -P com.aniplex.kirarafantasia -L test
[!] "com.aniplex.kirarafantasia" was not uniquely found, please check your criteria.

subdiox avatar Apr 08 '18 00:04 subdiox

You could try running "killall -SIGSTOP APPNAME" when app is launched and run bfinject. Not sure if it works though. Be quick or else watchdog will kill the app if not done quickly enough. Worth a shot.

CokePokes avatar Jul 31 '18 18:07 CokePokes