ဧည္႔စရင္း


hit counter

Sunday, August 30, 2020

macSubstrate - Tool For Interprocess Code Injection On macOS


macSubstrate is a platform tool for interprocess code injection on macOS, with the similar function to Cydia Substrate on iOS. Using macSubstrate, you can inject your plugins (.bundle or .framework) into a mac app (including sandboxed apps) to tweak it in the runtime.
  • All you need is to get or create plugins for your target app.
  • No trouble with modification and codesign for the original target app.
  • No more work after the target app is updated.
  • Super easy to install or uninstall a plugin.
  • Loading plugins automatically whenever the target app is relaunched.
  • Providing a GUI app to make injection much easier.

Prepare
  • Disable SIP
  • Why should disable SIP
    System Integrity Protection is a new security policy that applies to every running process, including privileged code and code that runs out of the sandbox. The policy extends additional protections to components on disk and at run-time, only allowing system binaries to be modified by the system installer and software updates. Code injection and runtime attachments to system binaries are no longer permitted.

Usage
  1. download macSubstrate.app, put into /Applications and launch it.
    StatusBar
  2. grant authorization if needed.
  3. install a plugin by importing or dragging into macSubstrate.
    ToInstall
  4. launch the target app.
    step 3 and step 4 can be switched
    Once a plugin is installed by macSubstrate, it will take effect immediately. But if you want it to work whenever the target app is relaunched or macOS is restarted, you need to keep macSubstrate running and allow it to automatically launch at login.
  5. uninstall a plugin when you do not need it anymore.
    Installed

Plugin
macSubstrate supports plugins of .bundle or .framework, so you just need to create a valid .bundle or .framework file. The most important thing is to add a key macSubstratePlugin into the info.plist, with the dictionary value:
Key Value
TargetAppBundleID the target app's CFBundleIdentifier, this tells macSubstrate which app to inject.
Description brief description of the plugin
AuthorName author name of the plugin
AuthorEmail author email of the plugin
Please check the demo plugins demo.bundle and demo.framework for details.

Xcode Templates
macSubstrate also provides Xcode Templates to help you create plugins conveniently:
  1. ln -fhs ./macSubstratePluginTemplate ~/Library/Developer/Xcode/Templates/macSubstrate\ Plugin
  2. Launch Xcode, and there will be 2 new plugin templates for you.

Security
  1. SIP is a new security policy on macOS, which will help to keep you away from potential security risk. Disable it means you will lose the protection from SIP.
  2. If you install a plugin from a developer, you should be responsible for the security of the plugin. If you do not trust it, please do not install it. macSubstrate will help to verify the code signature of a plugin, and I suggest you to scan it using VirusTotal. Anyway, macSubstrate is just a tool, and it is your choice to decide what plugin to install.


Related links


  1. Growth Hacker Tools
  2. Hacking Tools Free Download
  3. Hack Tools For Ubuntu
  4. Pentest Tools Android
  5. Hacker Tools 2019
  6. Hacking Tools And Software
  7. Hacker Tools Apk Download
  8. Pentest Tools Website
  9. Best Pentesting Tools 2018
  10. Tools For Hacker
  11. Hacker Tools 2019
  12. Hacker Tools
  13. Pentest Tools Online
  14. Black Hat Hacker Tools
  15. Install Pentest Tools Ubuntu
  16. Hacker Hardware Tools
  17. Hacking Tools For Games
  18. Hack Tools For Pc
  19. Pentest Tools List
  20. Hacker Tools 2019
  21. Hack Tools Online
  22. Hacker Techniques Tools And Incident Handling
  23. Hacking App
  24. Hacking Tools And Software
  25. Github Hacking Tools
  26. Best Hacking Tools 2020
  27. Hacking Tools Mac
  28. Pentest Tools List
  29. Pentest Tools Url Fuzzer
  30. Free Pentest Tools For Windows
  31. Pentest Reporting Tools
  32. Hacking Tools 2019
  33. Free Pentest Tools For Windows
  34. Pentest Tools For Android
  35. What Are Hacking Tools
  36. Hacking Tools Github
  37. Hacker Tools For Mac
  38. Best Hacking Tools 2020
  39. Hack Tools For Games
  40. Hacking Tools For Games
  41. Easy Hack Tools
  42. Hacking Tools Github
  43. Pentest Tools Website Vulnerability
  44. New Hacker Tools
  45. Hacking Tools Windows
  46. Underground Hacker Sites
  47. Nsa Hack Tools
  48. Hacker Tools Software
  49. Hacking Tools Online
  50. Hacking Tools Usb
  51. Pentest Recon Tools
  52. How To Install Pentest Tools In Ubuntu
  53. Nsa Hack Tools Download
  54. Hack Tool Apk
  55. Hacking Tools Name
  56. Hacking Tools Kit
  57. World No 1 Hacker Software
  58. Kik Hack Tools
  59. Free Pentest Tools For Windows
  60. Hacker Security Tools
  61. Pentest Tools For Windows
  62. Hack Tools Online
  63. Physical Pentest Tools
  64. Beginner Hacker Tools
  65. Hacking Tools Pc
  66. Hack Tools 2019
  67. Hacking Tools Hardware
  68. Pentest Tools Linux
  69. Pentest Tools Website
  70. Pentest Tools Website Vulnerability
  71. Tools For Hacker
  72. Termux Hacking Tools 2019
  73. Pentest Tools For Ubuntu

No comments: