Sunday, August 30, 2020

macSubstrate - Tool For Interprocess Code Injection On macOS


macSubstrate is a platform tool for interprocess code injection on macOS, with the similar function to Cydia Substrate on iOS. Using macSubstrate, you can inject your plugins (.bundle or .framework) into a mac app (including sandboxed apps) to tweak it in the runtime.
  • All you need is to get or create plugins for your target app.
  • No trouble with modification and codesign for the original target app.
  • No more work after the target app is updated.
  • Super easy to install or uninstall a plugin.
  • Loading plugins automatically whenever the target app is relaunched.
  • Providing a GUI app to make injection much easier.

Prepare
  • Disable SIP
  • Why should disable SIP
    System Integrity Protection is a new security policy that applies to every running process, including privileged code and code that runs out of the sandbox. The policy extends additional protections to components on disk and at run-time, only allowing system binaries to be modified by the system installer and software updates. Code injection and runtime attachments to system binaries are no longer permitted.

Usage
  1. download macSubstrate.app, put into /Applications and launch it.
    StatusBar
  2. grant authorization if needed.
  3. install a plugin by importing or dragging into macSubstrate.
    ToInstall
  4. launch the target app.
    step 3 and step 4 can be switched
    Once a plugin is installed by macSubstrate, it will take effect immediately. But if you want it to work whenever the target app is relaunched or macOS is restarted, you need to keep macSubstrate running and allow it to automatically launch at login.
  5. uninstall a plugin when you do not need it anymore.
    Installed

Plugin
macSubstrate supports plugins of .bundle or .framework, so you just need to create a valid .bundle or .framework file. The most important thing is to add a key macSubstratePlugin into the info.plist, with the dictionary value:
Key Value
TargetAppBundleID the target app's CFBundleIdentifier, this tells macSubstrate which app to inject.
Description brief description of the plugin
AuthorName author name of the plugin
AuthorEmail author email of the plugin
Please check the demo plugins demo.bundle and demo.framework for details.

Xcode Templates
macSubstrate also provides Xcode Templates to help you create plugins conveniently:
  1. ln -fhs ./macSubstratePluginTemplate ~/Library/Developer/Xcode/Templates/macSubstrate\ Plugin
  2. Launch Xcode, and there will be 2 new plugin templates for you.

Security
  1. SIP is a new security policy on macOS, which will help to keep you away from potential security risk. Disable it means you will lose the protection from SIP.
  2. If you install a plugin from a developer, you should be responsible for the security of the plugin. If you do not trust it, please do not install it. macSubstrate will help to verify the code signature of a plugin, and I suggest you to scan it using VirusTotal. Anyway, macSubstrate is just a tool, and it is your choice to decide what plugin to install.


Related news
  1. Hacker Tools Apk Download
  2. Hacker Tools 2020
  3. Hack And Tools
  4. Best Hacking Tools 2020
  5. Pentest Tools Tcp Port Scanner
  6. Pentest Box Tools Download
  7. Best Hacking Tools 2020
  8. Hack Tools 2019
  9. Hacks And Tools
  10. Hacker Tools Github
  11. Github Hacking Tools
  12. Hacking Tools For Beginners
  13. Top Pentest Tools
  14. Hacker Tools Linux
  15. Hacking Tools Online
  16. Pentest Tools Download
  17. Nsa Hack Tools
  18. Hack Tools Mac
  19. Free Pentest Tools For Windows
  20. Hackrf Tools
  21. Hack Tool Apk
  22. Pentest Tools Website
  23. How To Hack
  24. Hacker Tools 2020
  25. Hacking Tools For Windows Free Download
  26. Hacker Tools For Windows
  27. Tools For Hacker
  28. Hack Apps
  29. Hacker Tools Software
  30. Hacker Hardware Tools
  31. Hacking Tools For Windows Free Download
  32. Hacker Tools Mac
  33. Hacker Search Tools
  34. Hacking Tools
  35. Hack Tools For Ubuntu
  36. Hacker Tools Free Download
  37. New Hacker Tools
  38. New Hack Tools
  39. Pentest Tools
  40. Best Hacking Tools 2019
  41. Hacking Tools 2020
  42. Hacker Tools Apk Download
  43. Hack Tools For Games
  44. Pentest Tools Review
  45. Blackhat Hacker Tools
  46. Pentest Tools For Android
  47. Pentest Tools For Ubuntu
  48. Top Pentest Tools
  49. Hacking Tools Usb
  50. Pentest Tools List
  51. How To Install Pentest Tools In Ubuntu
  52. Hacking Tools For Kali Linux
  53. Hacking Tools And Software
  54. Hacking Tools Online
  55. Hacking Tools Name
  56. Computer Hacker
  57. Android Hack Tools Github
  58. Hack Tools Github
  59. How To Hack
  60. Hacker Tools Online
  61. Pentest Tools Download
  62. Hacking Tools For Beginners
  63. Hacking Apps
  64. Hack Tools
  65. Pentest Tools For Mac
  66. Hacker Tool Kit
  67. Pentest Tools List
  68. Hacking Tools Kit
  69. Hack Tools For Mac
  70. Hack Tools
  71. Hack Tools Pc
  72. Hack Tools Pc
  73. Pentest Tools For Android
  74. Hacking Tools 2019
  75. Hack Tools For Pc
  76. Tools Used For Hacking
  77. Hacking Tools For Windows 7
  78. Top Pentest Tools
  79. Hacking Apps
  80. Best Pentesting Tools 2018
  81. Computer Hacker
  82. World No 1 Hacker Software
  83. Hacker Hardware Tools
  84. Physical Pentest Tools
  85. Hacking Apps
  86. Hack Tools 2019
  87. Pentest Tools Website Vulnerability
  88. Hacker Security Tools
  89. Pentest Tools Tcp Port Scanner
  90. Pentest Tools Apk
  91. Pentest Tools For Ubuntu
  92. Black Hat Hacker Tools
  93. Hacking Tools And Software
  94. Black Hat Hacker Tools
  95. Pentest Tools Tcp Port Scanner
  96. Hack Tools
  97. Hack Tools Mac
  98. What Is Hacking Tools
  99. Install Pentest Tools Ubuntu
  100. What Are Hacking Tools
  101. Hack Tools Pc
  102. Hacking Tools And Software
  103. Install Pentest Tools Ubuntu
  104. Pentest Tools Alternative
  105. Pentest Tools Review
  106. Hacker Tools Github
  107. Nsa Hack Tools
  108. Hacker Tools Github
  109. Install Pentest Tools Ubuntu
  110. Usb Pentest Tools

No comments:

Post a Comment