gengjf / dingtalkdylib Goto Github PK

非越狱环境劫持app的GPS和WIFI信息

Objective-C 92.12% C 7.88%

dingtalkdylib's Introduction

本代码是为了在非越狱环境下劫持钉钉的GPS和WIFI信息并修改，可以自动设置为指定的任意位置，具体使用方法请见下方链接 1、GPS:http://www.chinapyg.com/thread-88593-1-1.html 2、WIFI:http://www.chinapyg.com/thread-89902-1-1.html 3、水印：http://www.chinapyg.com/forum.php?mod=viewthread&tid=90452

经过几次优化，已经可以满足所有app修改GPS和wifi的需求，但是有些app除了调用[[NSBundle mainBundle] bundleIdentifier]获取bundleIdentifier进行校验之外，还会通过解析info.plist文件获取bundleIdentifier，因此最好的防止被发现办法是：签名时，使用*或com.*的证书，不要修改app的bundleIdentifier。

1、DingTalkDylib+WIFI中的代码可以劫持任意app，并进行GPS和WIFI篡改；

2、DingTalkDylib+WIFI+Camera中的代码新增了相机图片劫持功能，签到时可以将水印打在指定的图片上；

DingTalk从3.5.1版本开始新增了GPS劫持检测，上面的代码已经做了反检测。

谨慎使用！

dingtalkdylib's People

Contributors

Stargazers

Watchers

Forkers

huyusha25 sunlight2728 adonis321 sagexy zxfmpy keepyounger wangquansh sorke zpiverson onetaway hgzhao firewolf-ljw zikex jetzou s0nny7 wangdoubleyan pwd120 xiaoweixiong fantasticskybaby chenzhenjg lkmvip sunzhe tkkk14 snyiu100 aemonchan tildawatts fiveplus zhangjump obaby bigfacecat2017 laoyao piaoyunsoft zlhtech lobster-king wudajushi hexpang luckycoder-git yufeiskyer wyzoscar echowxsy worthydd 1148088867 allen0871 uzheng niuxinghua lgq2015 yuyujulin sweartogod degreyg baoyanlong tomshare smqh-github youzige lbg-lbg smilewangwei

dingtalkdylib's Issues

注入动态库闪退

您好，大神，我目前在注入动态库到钉钉（分享逍客）的时候，会闪退，但是此动态库在其他 app 注入的时候都是可以正常运行，是否因为钉钉做了防止动态注入的保护我一直卡顿在这里，不知道您是否有遇见过，如果有的话可否指点小弟一下

在越狱环境下，是否有更简单的方式呢？

登录的时候提示我 “param invalid ”

请问下如何安装，有详细一点的安装文档么？

HI，有办法hook掉急速打卡这个功能不？

现在因为改了定位，导致每次一进钉钉就自动急速打卡了。。有的时候并不想打卡都自动打了很是蛋疼，有办法搞一下吗？我能力有限试了下不行

签名丁丁需要 '.' 证书吗

现在哪里还有这种泛型证书，不是企业证书么

怎么联系你有qq吗

帮我指点一下

展开Load_Commands，滚动到最下面看到什么，证明成功？

文档里没有啊

Readme证书问题

请教下 “因此最好的防止被发现办法是：签名时，使用*或com.*的证书，不要修改app的bundleIdentifier”是什么意思

第一篇文章显示在审核中

hi 你好。您的第一篇关于GPS的文章显示在审核，查看不了呢。最近正在学习，请指教。

/opt/iOSOpenDev/bin/iosod --xcbp 对应MonkeyDev应该怎么写，谢谢

/opt/iOSOpenDev/bin/iosod --xcbp 对应MonkeyDev应该怎么写， MonkeyDev的bin目录下没有iosod

非官方钉钉，需要人脸识别

新版的钉钉（4.2.0）在打卡时候会提示，“你正在使用非官方版钉钉，无法进行打开。请到应用市场重新下载” 请问这个问题怎么解决

GPS功能可以用，照片替换功能失效了

IOS 11，钉钉3.5.3环境下，照片替换功能失效了，老大能不能辛苦更新下代码啊？

3.5.6闪退问题 iOS11

按照文档执行了以下命令
./insert_dylib @executable_path/libDingTalkDylib.dylib DingTalk.app/DingTalk

代码里JFBundleIdentifier设成了*
然后用 iOS App Signer 改了签名，使用了com.ding.iphone，安装到iPhone上闪退

Last Exception Backtrace:
0 CoreFoundation 0x1812dfd38 __exceptionPreprocess + 124
1 libobjc.A.dylib 0x1807f4528 objc_exception_throw + 55
2 CoreFoundation 0x1812dfc80 +[NSException raise:format:] + 115
3 Foundation 0x181c61990 -[NSData+ 653712 (NSData) initWithContentsOfFile:options:maxLength:error:] + 111
4 DingTalk 0x106e179bc 0x104e58000 + 33290684
5 DingTalk 0x106e17d60 0x104e58000 + 33291616
6 DingTalk 0x10547fcfc 0x104e58000 + 6454524
7 DingTalk 0x105b09778 0x104e58000 + 13309816
8 DingTalk 0x105b09530 0x104e58000 + 13309232
9 libDingTalkDylib.dylib 0x109102874 -[UIResponder(JFUtil) jf_application:didFinishLaunchingWithOptions:] + 43124 (UIResponder+JFUtil.m:29)
10 UIKit 0x18a75f050 -[UIApplication _handleDelegateCallbacksWithOptions:isSuspended:restoreState:] + 383
11 UIKit 0x18a952898 -[UIApplication _callInitializationDelegatesForMainScene:transitionContext:] + 3427
12 UIKit 0x18a9576e4 -[UIApplication _runWithMainScene:transitionContext:completion:] + 1711
13 UIKit 0x18abe5454 __111-[__UICanvasLifecycleMonitor_Compatability _scheduleFirstCommitForScene:transition:firstActivation:completion:]_block_invoke + 799
14 UIKit 0x18aeb51f0 +[_UICanvas _enqueuePostSettingUpdateTransactionBlock:] + 159
15 UIKit 0x18abe50b8 -[__UICanvasLifecycleMonitor_Compatability _scheduleFirstCommitForScene:transition:firstActivation:completion:] + 251
16 UIKit 0x18abe5928 -[__UICanvasLifecycleMonitor_Compatability activateEventsOnly:withContext:completion:] + 747
17 UIKit 0x18b34e6e8 __82-[_UIApplicationCanvas _transitionLifecycleStateWithTransitionContext:completion:]_block_invoke + 259
18 UIKit 0x18b34e58c -[_UIApplicationCanvas _transitionLifecycleStateWithTransitionContext:completion:] + 447
19 UIKit 0x18b0ca9c0 __125-[_UICanvasLifecycleSettingsDiffAction performActionsForCanvas:withUpdatedScene:settingsDiff:fromSettings:transitionContext:]_block_invoke + 219
20 UIKit 0x18b25ffc8 _performActionsWithDelayForTransitionContext + 111
21 UIKit 0x18b0ca870 -[_UICanvasLifecycleSettingsDiffAction performActionsForCanvas:withUpdatedScene:settingsDiff:fromSettings:transitionContext:] + 251
22 UIKit 0x18aeb4850 -[_UICanvas scene:didUpdateWithDiff:transitionContext:completion:] + 363
23 UIKit 0x18a955e28 -[UIApplication workspace:didCreateScene:withTransitionContext:completion:] + 539
24 UIKit 0x18ad596ec -[UIApplicationSceneClientAgent scene:didInitializeWithEvent:completion:] + 363
25 FrontBoardServices 0x183981768 -[FBSSceneImpl _didCreateWithTransitionContext:completion:] + 363
26 FrontBoardServices 0x18398a070 __56-[FBSWorkspace client:handleCreateScene:withCompletion:]_block_invoke_2 + 223
27 libdispatch.dylib 0x180c65048 _dispatch_client_callout + 15
28 libdispatch.dylib 0x180c6c6c8 _dispatch_block_invoke_direct$VARIANT$mp + 287
29 FrontBoardServices 0x1839b5a04 FBSSERIALQUEUE_IS_CALLING_OUT_TO_A_BLOCK + 35
30 FrontBoardServices 0x1839b56a8 -[FBSSerialQueue _performNext] + 403
31 FrontBoardServices 0x1839b5c44 -[FBSSerialQueue _performNextFromRunLoopSource] + 55
32 CoreFoundation 0x181288358 CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION + 23
33 CoreFoundation 0x1812882d8 __CFRunLoopDoSource0 + 87
34 CoreFoundation 0x181287b60 __CFRunLoopDoSources0 + 203
35 CoreFoundation 0x181285738 __CFRunLoopRun + 1047
36 CoreFoundation 0x1811a62d8 CFRunLoopRunSpecific + 435
37 GraphicsServices 0x183037f84 GSEventRunModal + 99
38 UIKit 0x18a753880 UIApplicationMain + 207
39 DingTalk 0x105153664 0x104e58000 + 3126884
40 libdyld.dylib 0x180cca56c start + 3

Thread 0 name: Thread 0 Crashed:
0 libsystem_kernel.dylib 1 libsystem_pthread.dylib 2 libsystem_c.dylib 3 DingTalk 4 CoreFoundation 5 libobjc.A.dylib 6 libc++abi.dylib 7 libc++abi.dylib 8 libdispatch.dylib 9 libdispatch.dylib 10 FrontBoardServices 11 FrontBoardServices 12 FrontBoardServices 13 CoreFoundation 14 CoreFoundation 15 CoreFoundation 16 CoreFoundation 17 CoreFoundation 18 GraphicsServices 19 UIKit 20 DingTalk 21 libdyld.dylib 994 Dispatch queue: com.apple.main-thread
0x0000000180df9348 __pthread_kill + 8
0x0000000180f0d354 pthread_kill$VARIANT$mp + 396
0x0000000180d68fd8 abort + 140
0x00000001066b0d78 0x104e58000 + 25529720
0x00000001812e00ac __handleUncaughtException + 628
0x00000001807f4804 _objc_terminate+ 34820 () + 112
0x00000001807e454c std::__terminate(void (*)+ 107852 ()) + 16
0x00000001807e45b8 std::terminate+ 107960 () + 60
0x0000000180c6505c _dispatch_client_callout + 36
0x0000000180c6c6c8 _dispatch_block_invoke_direct$VARIANT$mp + 288
0x00000001839b5a04 FBSSERIALQUEUE_IS_CALLING_OUT_TO_A_BLOCK + 36
0x00000001839b56a8 -[FBSSerialQueue _performNext] + 404
0x00000001839b5c44 -[FBSSerialQueue _performNextFromRunLoopSource] + 56
0x0000000181288358 CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION + 24
0x00000001812882d8 __CFRunLoopDoSource0 + 88
0x0000000181287b60 __CFRunLoopDoSources0 + 204
0x0000000181285738 __CFRunLoopRun + 1048
0x00000001811a62d8 CFRunLoopRunSpecific + 436
0x0000000183037f84 GSEventRunModal + 100
0x000000018a753880 UIApplicationMain + 208
0x0000000105153664 0x104e58000 + 3126884
0x0000000180cca56c start + 4