1. update check iOS app package

crifan · Aug 29, 2023 · 12831a5 · 12831a5
1 parent 9338511
commit 12831a5
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 3 deletions.
diff --git a/src/appendix/reference.md b/src/appendix/reference.md
@@ -14,6 +14,7 @@
 * [iOS逆向开发：iPhone越狱](http://book.crifan.org/books/ios_re_iphone_jailbreak/website)
 * [安装Frida · 逆向调试利器：Frida](https://book.crifan.org/books/reverse_debug_frida/website/install_upgrade/install_frida.html)
 *  
+* [frida-ps | Frida • A world-class dynamic instrumentation toolkit](https://frida.re/docs/frida-ps/)
 * [[iOS]判断ipa是否脱壳_风浅月明的博客-CSDN博客_ipa脱壳](https://blog.csdn.net/wsyx768/article/details/124691420)
 * [[iOS逆向]18、砸壳 - 简书 (jianshu.com)](https://www.jianshu.com/p/d2c5e5388d60)
 * [十、iOS逆向之《越狱砸壳/ipa脱壳》 - 简书 (jianshu.com)](https://www.jianshu.com/p/1991854c65af)

diff --git a/src/crack_tools/frida_ios_dump.md b/src/crack_tools/frida_ios_dump.md
@@ -52,9 +52,20 @@
 ## 使用=砸壳
 
 * 概述
-  ```bash
-  ./dump.py iOSAppPackageOriOSAppName
-  ```
+  * 查看app包名或app名称
+    * 方式1：`frida-ps`
+      ```bash
+      frida-ps -Uai
+      ```
+    * 方式2：`ideviceinstaller`
+      ```bash
+      ideviceinstaller -l -o list_user
+      ```
+  * 开始砸壳
+    * 命令
+      ```bash
+      ./dump.py iOSAppPackageOriOSAppName
+      ```
     * 举例
       ```bash
       ./dump.py com.zhiliaoapp.musically