Πέμπτη 27 Αυγούστου 2020

macSubstrate - Tool For Interprocess Code Injection On macOS


macSubstrate is a platform tool for interprocess code injection on macOS, with the similar function to Cydia Substrate on iOS. Using macSubstrate, you can inject your plugins (.bundle or .framework) into a mac app (including sandboxed apps) to tweak it in the runtime.
  • All you need is to get or create plugins for your target app.
  • No trouble with modification and codesign for the original target app.
  • No more work after the target app is updated.
  • Super easy to install or uninstall a plugin.
  • Loading plugins automatically whenever the target app is relaunched.
  • Providing a GUI app to make injection much easier.

Prepare
  • Disable SIP
  • Why should disable SIP
    System Integrity Protection is a new security policy that applies to every running process, including privileged code and code that runs out of the sandbox. The policy extends additional protections to components on disk and at run-time, only allowing system binaries to be modified by the system installer and software updates. Code injection and runtime attachments to system binaries are no longer permitted.

Usage
  1. download macSubstrate.app, put into /Applications and launch it.
    StatusBar
  2. grant authorization if needed.
  3. install a plugin by importing or dragging into macSubstrate.
    ToInstall
  4. launch the target app.
    step 3 and step 4 can be switched
    Once a plugin is installed by macSubstrate, it will take effect immediately. But if you want it to work whenever the target app is relaunched or macOS is restarted, you need to keep macSubstrate running and allow it to automatically launch at login.
  5. uninstall a plugin when you do not need it anymore.
    Installed

Plugin
macSubstrate supports plugins of .bundle or .framework, so you just need to create a valid .bundle or .framework file. The most important thing is to add a key macSubstratePlugin into the info.plist, with the dictionary value:
Key Value
TargetAppBundleID the target app's CFBundleIdentifier, this tells macSubstrate which app to inject.
Description brief description of the plugin
AuthorName author name of the plugin
AuthorEmail author email of the plugin
Please check the demo plugins demo.bundle and demo.framework for details.

Xcode Templates
macSubstrate also provides Xcode Templates to help you create plugins conveniently:
  1. ln -fhs ./macSubstratePluginTemplate ~/Library/Developer/Xcode/Templates/macSubstrate\ Plugin
  2. Launch Xcode, and there will be 2 new plugin templates for you.

Security
  1. SIP is a new security policy on macOS, which will help to keep you away from potential security risk. Disable it means you will lose the protection from SIP.
  2. If you install a plugin from a developer, you should be responsible for the security of the plugin. If you do not trust it, please do not install it. macSubstrate will help to verify the code signature of a plugin, and I suggest you to scan it using VirusTotal. Anyway, macSubstrate is just a tool, and it is your choice to decide what plugin to install.


Related posts

  1. Easy Hack Tools
  2. New Hacker Tools
  3. Pentest Tools
  4. Android Hack Tools Github
  5. Hack Website Online Tool
  6. Hacker Tools For Mac
  7. Hack App
  8. How To Hack
  9. Computer Hacker
  10. Hacking Tools 2020
  11. Hacking Tools Download
  12. Hack Tools 2019
  13. Pentest Automation Tools
  14. Pentest Tools Open Source
  15. Hacking Tools Name
  16. Beginner Hacker Tools
  17. Hacker Tools For Ios
  18. Pentest Tools Online
  19. Hacker Tools For Mac
  20. Hacking Tools For Pc
  21. Hacker Tools 2019
  22. Hacker Tools Github
  23. Hack Tools Pc
  24. Hackrf Tools
  25. Hack Tools 2019
  26. Hacking Tools Pc
  27. Pentest Tools
  28. Hack Tools
  29. Hack Tools 2019
  30. Wifi Hacker Tools For Windows
  31. Hacking Tools 2020
  32. Pentest Tools
  33. Best Hacking Tools 2020
  34. Hacker Tools Online
  35. Hacking Tools 2020
  36. Hacker Search Tools
  37. Tools 4 Hack
  38. Hacking Tools For Pc
  39. Hack Tools Mac
  40. Hacker Tools Free Download
  41. Termux Hacking Tools 2019
  42. Hacking Tools Mac
  43. Termux Hacking Tools 2019
  44. Pentest Tools Find Subdomains
  45. Pentest Tools
  46. Pentest Reporting Tools
  47. Hacking Tools For Pc
  48. Hacker Tools 2019
  49. Install Pentest Tools Ubuntu
  50. Hacking Tools 2019
  51. Blackhat Hacker Tools
  52. Hacking Tools Windows
  53. New Hacker Tools
  54. Hak5 Tools
  55. Pentest Tools Url Fuzzer
  56. Hacking Tools Download
  57. Hacker Tools Windows
  58. World No 1 Hacker Software
  59. How To Make Hacking Tools
  60. Hack And Tools
  61. Pentest Tools Subdomain
  62. Pentest Tools Website Vulnerability
  63. Hacking Tools For Windows Free Download
  64. Hacking Tools Github
  65. Hacker Tools 2020
  66. Ethical Hacker Tools
  67. Pentest Tools For Android
  68. Free Pentest Tools For Windows
  69. Hacking Tools Windows
  70. Pentest Tools Free
  71. Hacker Tools Linux
  72. Pentest Tools Find Subdomains
  73. Beginner Hacker Tools
  74. Black Hat Hacker Tools
  75. Pentest Tools For Ubuntu
  76. Tools For Hacker
  77. Pentest Tools Free
  78. Beginner Hacker Tools
  79. Hacker Tools For Mac
  80. Hack Tools Pc
  81. Ethical Hacker Tools
  82. Pentest Tools Website Vulnerability
  83. Hacking Tools For Mac
  84. Hack Apps
  85. Hacking Tools For Windows 7
  86. Hack Tools For Mac
  87. Hacking Tools For Kali Linux
  88. Hacker Tools For Mac
  89. Hacking Tools For Windows
  90. Pentest Tools List
  91. Hacking Tools
  92. Computer Hacker
  93. Hacking Tools 2020
  94. Hacker Search Tools
  95. Pentest Tools Find Subdomains
  96. Hacker Tools Free
  97. Black Hat Hacker Tools
  98. Pentest Tools Website Vulnerability
  99. Hack Tools For Pc
  100. Underground Hacker Sites
  101. Hacker Tools List
  102. Pentest Tools For Mac
  103. Pentest Tools Bluekeep
  104. Hacker Tools Mac
  105. Pentest Tools Find Subdomains
  106. Hacker Tools List
  107. Hacking Tools Pc

Δεν υπάρχουν σχόλια:

Δημοσίευση σχολίου