iSpy icon indicating copy to clipboard operation
iSpy copied to clipboard

obj_msgSend Logging error 404

Open sup3rgiu opened this issue 9 years ago • 3 comments

Hi, I'm trying to use the obj_msgSend Logging feature from the Web GUI, but I'm getting error 404: http://prntscr.com/6y4f0j

I'm getting the same error keychain feature too.

sup3rgiu avatar Apr 25 '15 20:04 sup3rgiu

Those features have not been completely implemented in UI yet.

moloch-- avatar Apr 27 '15 00:04 moloch--

Well, then how can I see them without the UI?

sup3rgiu avatar Apr 27 '15 12:04 sup3rgiu

Enable the objc_msgSend Logging setting in the device's Settings app (under "RUNTIME COUNTERMEASURES AND MONITORING").

Open up the web ui and send paste the following into your JS console:

/* Enable the logging! */
var enableMsgSend = {
    "messageType":"setMsgSendLoggingState",
    "messageData": {
        "state":"true"
    },
    "responseId":"response31337"
}

iSpy.SyncSocket.send(JSON.stringify(enableMsgSend));

It should send the data over the WebSocket (actually this may be disabled atm) but it should also log information to the application's data container in ~/Documents/.ispy/logs/msgsend.log there is a whitelist that is created when the application launches to filter out some messages, or the device/browser tends to get overloaded after a few minutes from too much data. Basically the data collected from the msgSend ends up here.

If you decide to modify that code please keep in mind you're in the middle of an objcMsgSend call, so you have to rely on pure C, calling an objc method will land you in a recursive nightmare. Here's a quick diff to make sure the messages get sent to all websockets, right now it's setup to only send to the first open one.

moloch-- avatar Apr 27 '15 17:04 moloch--