mirror of
https://github.com/MobSF/Mobile-Security-Framework-MobSF.git
synced 2026-10-12 02:06:59 +00:00
6e875fb77b
Enables dynamic analysis on real jailbroken iOS devices connected via USB or WiFi SSH, complementing the existing Corellium-based iOS analysis.
- SSH connectivity — connects to jailbroken devices over USB (via iproxy port forwarding) or WiFi using Paramiko SSH
- Frida instrumentation — spawns/attaches Frida on-device, with full hook support matching the existing Corellium flow
- Environment setup — installs AppSync Unified and Frida server on first run; supports both arm and arm64 devices
- Dynamic analysis — app file extraction, system log streaming (oslog), screenshot capture, process listing, and report generation
- SSH terminal — execute shell commands on the device over SSH
---------
Co-authored-by: CylentSec <[email protected]>
Co-authored-by: Oz <[email protected]>
30 lines
779 B
JavaScript
30 lines
779 B
JavaScript
function listAppClasses() {
|
|
if (!ObjC.available) {
|
|
send("❌ Objective-C runtime is not available.");
|
|
return;
|
|
}
|
|
|
|
try {
|
|
const loaded = ObjC.enumerateLoadedClassesSync();
|
|
let count = 0;
|
|
|
|
for (const imagePath in loaded) {
|
|
if (!imagePath.includes(".app")) continue;
|
|
|
|
const classList = loaded[imagePath];
|
|
send(`📦 Classes in ${imagePath}: ${classList.length}`);
|
|
|
|
for (const className of classList) {
|
|
send(`[AUXILIARY] ${className}`);
|
|
count++;
|
|
}
|
|
}
|
|
|
|
send(`✅ Total app-owned classes found: ${count}`);
|
|
} catch (err) {
|
|
send("❌ Error during enumeration: " + err.message);
|
|
}
|
|
}
|
|
|
|
setImmediate(listAppClasses);
|