Sunday, August 30, 2020

macSubstrate - Tool For Interprocess Code Injection On macOS


macSubstrate is a platform tool for interprocess code injection on macOS, with the similar function to Cydia Substrate on iOS. Using macSubstrate, you can inject your plugins (.bundle or .framework) into a mac app (including sandboxed apps) to tweak it in the runtime.
  • All you need is to get or create plugins for your target app.
  • No trouble with modification and codesign for the original target app.
  • No more work after the target app is updated.
  • Super easy to install or uninstall a plugin.
  • Loading plugins automatically whenever the target app is relaunched.
  • Providing a GUI app to make injection much easier.

Prepare
  • Disable SIP
  • Why should disable SIP
    System Integrity Protection is a new security policy that applies to every running process, including privileged code and code that runs out of the sandbox. The policy extends additional protections to components on disk and at run-time, only allowing system binaries to be modified by the system installer and software updates. Code injection and runtime attachments to system binaries are no longer permitted.

Usage
  1. download macSubstrate.app, put into /Applications and launch it.
    StatusBar
  2. grant authorization if needed.
  3. install a plugin by importing or dragging into macSubstrate.
    ToInstall
  4. launch the target app.
    step 3 and step 4 can be switched
    Once a plugin is installed by macSubstrate, it will take effect immediately. But if you want it to work whenever the target app is relaunched or macOS is restarted, you need to keep macSubstrate running and allow it to automatically launch at login.
  5. uninstall a plugin when you do not need it anymore.
    Installed

Plugin
macSubstrate supports plugins of .bundle or .framework, so you just need to create a valid .bundle or .framework file. The most important thing is to add a key macSubstratePlugin into the info.plist, with the dictionary value:
Key Value
TargetAppBundleID the target app's CFBundleIdentifier, this tells macSubstrate which app to inject.
Description brief description of the plugin
AuthorName author name of the plugin
AuthorEmail author email of the plugin
Please check the demo plugins demo.bundle and demo.framework for details.

Xcode Templates
macSubstrate also provides Xcode Templates to help you create plugins conveniently:
  1. ln -fhs ./macSubstratePluginTemplate ~/Library/Developer/Xcode/Templates/macSubstrate\ Plugin
  2. Launch Xcode, and there will be 2 new plugin templates for you.

Security
  1. SIP is a new security policy on macOS, which will help to keep you away from potential security risk. Disable it means you will lose the protection from SIP.
  2. If you install a plugin from a developer, you should be responsible for the security of the plugin. If you do not trust it, please do not install it. macSubstrate will help to verify the code signature of a plugin, and I suggest you to scan it using VirusTotal. Anyway, macSubstrate is just a tool, and it is your choice to decide what plugin to install.


Related posts

  1. Ethical Hacker Tools
  2. Black Hat Hacker Tools
  3. Hacking Tools 2019
  4. Pentest Tools Review
  5. Pentest Tools Url Fuzzer
  6. Pentest Tools Kali Linux
  7. Hacking Tools For Pc
  8. Hack Tools For Mac
  9. Pentest Recon Tools
  10. Pentest Tools Download
  11. Hacking Tools 2019
  12. Pentest Tools Find Subdomains
  13. Tools Used For Hacking
  14. Hacker Tools Github
  15. Kik Hack Tools
  16. Hacking Tools Download
  17. Hacking Tools Download
  18. Hacker Tools
  19. Pentest Tools Port Scanner
  20. Hacking Tools Online
  21. Hacking App
  22. Hacker Tools Apk Download
  23. Usb Pentest Tools
  24. Hack Tools For Windows
  25. Pentest Reporting Tools
  26. Top Pentest Tools
  27. Pentest Tools Kali Linux
  28. Blackhat Hacker Tools
  29. Hacking Tools Windows 10
  30. Hacking Tools Pc
  31. Hack Tools Github
  32. Blackhat Hacker Tools
  33. Hacks And Tools
  34. What Is Hacking Tools
  35. Hack Tools For Games
  36. Hacker Tools Linux
  37. Hacking Tools For Pc
  38. Hacker Security Tools
  39. Hack Tools Github
  40. Bluetooth Hacking Tools Kali
  41. Hacking Tools For Windows
  42. Hacker Tools 2020
  43. Hacking Apps
  44. Hacker Search Tools
  45. Best Pentesting Tools 2018
  46. Hak5 Tools
  47. How To Make Hacking Tools
  48. Nsa Hack Tools Download
  49. Underground Hacker Sites
  50. Hack Tools
  51. Hack And Tools
  52. Hacking App
  53. Tools Used For Hacking

No comments:

Post a Comment