Thursday, August 27, 2020

macSubstrate - Tool For Interprocess Code Injection On macOS


macSubstrate is a platform tool for interprocess code injection on macOS, with the similar function to Cydia Substrate on iOS. Using macSubstrate, you can inject your plugins (.bundle or .framework) into a mac app (including sandboxed apps) to tweak it in the runtime.
  • All you need is to get or create plugins for your target app.
  • No trouble with modification and codesign for the original target app.
  • No more work after the target app is updated.
  • Super easy to install or uninstall a plugin.
  • Loading plugins automatically whenever the target app is relaunched.
  • Providing a GUI app to make injection much easier.

Prepare
  • Disable SIP
  • Why should disable SIP
    System Integrity Protection is a new security policy that applies to every running process, including privileged code and code that runs out of the sandbox. The policy extends additional protections to components on disk and at run-time, only allowing system binaries to be modified by the system installer and software updates. Code injection and runtime attachments to system binaries are no longer permitted.

Usage
  1. download macSubstrate.app, put into /Applications and launch it.
    StatusBar
  2. grant authorization if needed.
  3. install a plugin by importing or dragging into macSubstrate.
    ToInstall
  4. launch the target app.
    step 3 and step 4 can be switched
    Once a plugin is installed by macSubstrate, it will take effect immediately. But if you want it to work whenever the target app is relaunched or macOS is restarted, you need to keep macSubstrate running and allow it to automatically launch at login.
  5. uninstall a plugin when you do not need it anymore.
    Installed

Plugin
macSubstrate supports plugins of .bundle or .framework, so you just need to create a valid .bundle or .framework file. The most important thing is to add a key macSubstratePlugin into the info.plist, with the dictionary value:
Key Value
TargetAppBundleID the target app's CFBundleIdentifier, this tells macSubstrate which app to inject.
Description brief description of the plugin
AuthorName author name of the plugin
AuthorEmail author email of the plugin
Please check the demo plugins demo.bundle and demo.framework for details.

Xcode Templates
macSubstrate also provides Xcode Templates to help you create plugins conveniently:
  1. ln -fhs ./macSubstratePluginTemplate ~/Library/Developer/Xcode/Templates/macSubstrate\ Plugin
  2. Launch Xcode, and there will be 2 new plugin templates for you.

Security
  1. SIP is a new security policy on macOS, which will help to keep you away from potential security risk. Disable it means you will lose the protection from SIP.
  2. If you install a plugin from a developer, you should be responsible for the security of the plugin. If you do not trust it, please do not install it. macSubstrate will help to verify the code signature of a plugin, and I suggest you to scan it using VirusTotal. Anyway, macSubstrate is just a tool, and it is your choice to decide what plugin to install.


More info
  1. Tools 4 Hack
  2. Nsa Hacker Tools
  3. Hack Tools 2019
  4. Hacker Tool Kit
  5. Hacking Tools 2019
  6. Black Hat Hacker Tools
  7. Pentest Tools Open Source
  8. Hack Rom Tools
  9. Hacker Techniques Tools And Incident Handling
  10. Hack Tools For Windows
  11. Best Hacking Tools 2020
  12. Pentest Tools Free
  13. Blackhat Hacker Tools
  14. Pentest Tools Linux
  15. New Hacker Tools
  16. Easy Hack Tools
  17. Hacker Tools Github
  18. Hackrf Tools
  19. Pentest Recon Tools
  20. Hacker Tools Hardware
  21. Hacker Tools 2020
  22. Hacking Tools For Windows 7
  23. Hacker Tools Hardware
  24. Hacker Tools For Ios
  25. Hack App
  26. Hacker Tools Hardware
  27. Hack Tools For Windows
  28. Pentest Tools Linux
  29. Hacking Tools Online
  30. Pentest Recon Tools
  31. Best Pentesting Tools 2018
  32. New Hacker Tools
  33. Easy Hack Tools
  34. Hacking Tools For Games
  35. Hacker Tools Online
  36. Hack Website Online Tool
  37. Bluetooth Hacking Tools Kali
  38. Hack Website Online Tool
  39. Android Hack Tools Github
  40. Hacker Tools Windows
  41. Hack Tools For Pc
  42. Beginner Hacker Tools
  43. Pentest Tools Free
  44. Hacker Security Tools
  45. Pentest Tools List
  46. Android Hack Tools Github
  47. Hackers Toolbox
  48. World No 1 Hacker Software
  49. Pentest Tools For Android
  50. Hack Tools For Mac
  51. Usb Pentest Tools
  52. Hacker Tools Github
  53. Hacking Tools 2020
  54. Pentest Tools
  55. Hack Tools For Windows
  56. Hacking Tools For Pc
  57. Hacker Tools 2019
  58. Pentest Tools
  59. Hacking Tools
  60. Hack Tools Github
  61. Hack Website Online Tool
  62. Hack Tools Mac
  63. Bluetooth Hacking Tools Kali
  64. Hack Tools Pc
  65. Hacking Tools Free Download
  66. Game Hacking
  67. Hacker Tools Online
  68. Hack Website Online Tool
  69. Pentest Box Tools Download
  70. Hacking Tools Name
  71. Hacker Tools Apk
  72. Pentest Reporting Tools
  73. Pentest Tools Tcp Port Scanner
  74. Hacking Tools Usb
  75. Pentest Tools Find Subdomains
  76. New Hacker Tools
  77. Hack Tools For Games
  78. Hack Tools 2019
  79. Hacker Tools For Pc
  80. Hacker Tools Mac
  81. Hacker Tools Online
  82. Hack Tools For Ubuntu
  83. World No 1 Hacker Software
  84. Hack Website Online Tool
  85. New Hacker Tools
  86. Pentest Tools Website Vulnerability
  87. Hack Tools
  88. Pentest Tools Tcp Port Scanner
  89. Hacking Tools For Pc
  90. Hacking Tools For Windows Free Download
  91. Pentest Box Tools Download
  92. Best Pentesting Tools 2018
  93. Hack Tools Github
  94. Pentest Tools Android
  95. Hacking Tools Mac
  96. Hacking Tools And Software
  97. Pentest Tools Download
  98. Pentest Tools Github
  99. Hacker Tool Kit
  100. Hacker Tools Linux
  101. Hack Tools For Games
  102. Best Hacking Tools 2019
  103. Hacker Tools Linux
  104. Pentest Tools Linux
  105. Hacking Tools For Pc
  106. Hacking Tools Name
  107. Hack Tool Apk No Root
  108. Hacks And Tools
  109. How To Make Hacking Tools
  110. Hacking Tools For Windows 7
  111. How To Install Pentest Tools In Ubuntu

No comments:

Post a Comment