This repository has been archived by the owner on Nov 22, 2022. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 86
/
ThirdPartyTemplate.xm
69 lines (63 loc) · 2.6 KB
/
ThirdPartyTemplate.xm
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
//Shall We Use Marcos instead of this shit?
#import "../Global.h"
#import <mach-o/getsect.h>
#import <dlfcn.h>
extern NSString* RandomString();
typedef void (*WTLoaderPrototype)();
extern void init_TEMPLATENAME_hook(){
#ifndef NonJailbroken
//Because We Ain't Ready Yet. No Test
for(int i=0;i<_dyld_image_count();i++){
const char * Nam=_dyld_get_image_name(i);
NSString* curName=[NSString stringWithUTF8String:Nam];
if([curName containsString:WTFJHTWEAKNAME]){
#ifdef DEBUG
NSLog(@"Found TEMPLATENAME At %i th Image",i);
#endif
intptr_t ASLROffset=_dyld_get_image_vmaddr_slide(i);
//We Found Ourself
#ifndef __LP64__
uint32_t size=0;
const struct mach_header* selfHeader=(const struct mach_header*)_dyld_get_image_header(i);
char * data=getsectdatafromheader(selfHeader,"WTFJH","TEMPLATENAME",&size);
#else
uint64_t size=0;
const struct mach_header_64* selfHeader=(const struct mach_header_64*)_dyld_get_image_header(i);
char * data=getsectdatafromheader_64(selfHeader,"WTFJH","TEMPLATENAME",&size);
#endif
data=ASLROffset+data;//Add ASLR Offset To Pointer And Fix Address
NSData* SDData=[NSData dataWithBytes:data length:size];
NSString* randomPath=[NSString stringWithFormat:@"%@/tmp/%@",NSHomeDirectory(),RandomString()];
[SDData writeToFile:randomPath atomically:YES];
void* handle=dlopen(randomPath.UTF8String,RTLD_NOW|RTLD_GLOBAL);//Open Created dylib
WTLoaderPrototype WTHandle =(WTLoaderPrototype) dlsym(handle, "WTFJHInitTEMPLATENAME"); //Call Init Function
if(WTHandle!=NULL){
WTHandle();
}
dlclose(handle);
[[NSFileManager defaultManager] removeItemAtPath:randomPath error:nil];
//Inform Our Logger
WTInit(@"WTFJH",@"LoadThirdPartyTools");
WTAdd(@"dlopen",@"Type");
WTAdd(randomPath,@"Path");
char* Err=dlerror();
if(Err!=NULL){
WTAdd([NSString stringWithUTF8String:Err],@"Error");
}
WTAdd(@"TEMPLATENAME",@"ModuleName");
WTSave;
WTRelease;
//End
[SDData release];
[randomPath release];
[curName release];
break;
}
[curName release];
}
#else
NSString* BundledDYLIBPath=[NSString stringWithFormat:@"%@/TEMPLATENAME.dylib",[NSBundle mainBundle].bundlePath];
dlopen(BundledDYLIBPath.UTF8String,RTLD_NOW|RTLD_GLOBAL);
[BundledDYLIBPath release];
#endif
}