文件分析
在Cydia中安装完之后,ssh连接手机,然后进入/Library/MobileSubstrate/DynamicLibraries目录下
cd/Library/MobileSubstrate/DynamicLibraries
这里会发现LibertyLite安装了AppList.dylib、PreferenceLoader.dylib、RocketBootstrap.dylib、xlsn0wiosre.dylib四个库以及他们各自的plist文件。
其中AppList,PreferenceLoader,RocketBootstrap都是跟设置有关的tweak,主要代码在xlsn0wiosre中。
我们通过分析xlsn0wiosre.plist会发现他依旧是在加载UIKit的时候执行,
同样的,我们利用otool和strings命令,逆向以及获取里面的字符串:
?Desktopotool-tVzzzzLiberty.dylibxCon?DesktopstringszzzzLiberty.dylib/Applications/Applications//Applications/Cydia.app/Applications/Cydia.app//Applications/Cydia.app/Cydia/Applications/Cydia.app/Info.plist/Applications/Cydia.app/../Cydia.app/Applications/Cydia.app/../Cydia.app//Applications/Cydia.app/../Cydia.app/Info.plist/Applications/FakeCarrier.app/Applications/Icy.app/Applications/Iny.app/Applications/iFile.app/Applications/Activator.app/Applications/IntelliScreen.app/Applications/MxTube.app/Applications/RockApp.app/Applications/SBSettings.app/Applications/WinterBoard.app/Applications/blackra1n.app/Library/Activator/Library/Flipswitch/Library/Frameworks/CydiaSubstrate.framework/Library/MobileSubstrate/Library/MobileSubstrate/DynamicLibraries/Library/MobileSubstrate/DynamicLibraries/LiveClock.plist/Library/MobileSubstrate/DynamicLibraries/Veency.plist/Library/MobileSubstrate/MobileSubstrate.dylib/Library/MobileSubstrateMobileSubstrate.dylib/Library/Ringtones/Library/Switchs/Library/Wallpaper/System/Library/LaunchDaemons/