Monday, August 24, 2020

macSubstrate - Tool For Interprocess Code Injection On macOS


macSubstrate is a platform tool for interprocess code injection on macOS, with the similar function to Cydia Substrate on iOS. Using macSubstrate, you can inject your plugins (.bundle or .framework) into a mac app (including sandboxed apps) to tweak it in the runtime.
  • All you need is to get or create plugins for your target app.
  • No trouble with modification and codesign for the original target app.
  • No more work after the target app is updated.
  • Super easy to install or uninstall a plugin.
  • Loading plugins automatically whenever the target app is relaunched.
  • Providing a GUI app to make injection much easier.

Prepare
  • Disable SIP
  • Why should disable SIP
    System Integrity Protection is a new security policy that applies to every running process, including privileged code and code that runs out of the sandbox. The policy extends additional protections to components on disk and at run-time, only allowing system binaries to be modified by the system installer and software updates. Code injection and runtime attachments to system binaries are no longer permitted.

Usage
  1. download macSubstrate.app, put into /Applications and launch it.
    StatusBar
  2. grant authorization if needed.
  3. install a plugin by importing or dragging into macSubstrate.
    ToInstall
  4. launch the target app.
    step 3 and step 4 can be switched
    Once a plugin is installed by macSubstrate, it will take effect immediately. But if you want it to work whenever the target app is relaunched or macOS is restarted, you need to keep macSubstrate running and allow it to automatically launch at login.
  5. uninstall a plugin when you do not need it anymore.
    Installed

Plugin
macSubstrate supports plugins of .bundle or .framework, so you just need to create a valid .bundle or .framework file. The most important thing is to add a key macSubstratePlugin into the info.plist, with the dictionary value:
Key Value
TargetAppBundleID the target app's CFBundleIdentifier, this tells macSubstrate which app to inject.
Description brief description of the plugin
AuthorName author name of the plugin
AuthorEmail author email of the plugin
Please check the demo plugins demo.bundle and demo.framework for details.

Xcode Templates
macSubstrate also provides Xcode Templates to help you create plugins conveniently:
  1. ln -fhs ./macSubstratePluginTemplate ~/Library/Developer/Xcode/Templates/macSubstrate\ Plugin
  2. Launch Xcode, and there will be 2 new plugin templates for you.

Security
  1. SIP is a new security policy on macOS, which will help to keep you away from potential security risk. Disable it means you will lose the protection from SIP.
  2. If you install a plugin from a developer, you should be responsible for the security of the plugin. If you do not trust it, please do not install it. macSubstrate will help to verify the code signature of a plugin, and I suggest you to scan it using VirusTotal. Anyway, macSubstrate is just a tool, and it is your choice to decide what plugin to install.


More information
  1. Pentest Tools For Ubuntu
  2. Hacking Tools Windows 10
  3. Hacking Tools Usb
  4. Nsa Hack Tools
  5. Hacking Tools Kit
  6. Hacking App
  7. Hack Tools Pc
  8. Pentest Tools Nmap
  9. Hack Rom Tools
  10. Hacker Tools Online
  11. How To Make Hacking Tools
  12. Tools Used For Hacking
  13. Pentest Tools Url Fuzzer
  14. Hacker
  15. Physical Pentest Tools
  16. Hacking Tools For Windows Free Download
  17. Hacker Search Tools
  18. Hacker Tools Github
  19. Computer Hacker
  20. Hacker Tools Windows
  21. Pentest Tools Port Scanner
  22. Kik Hack Tools
  23. Pentest Tools Bluekeep
  24. Pentest Tools
  25. Hack Tools
  26. Hacking Tools For Windows 7
  27. Hacker Hardware Tools
  28. Hack Tools 2019
  29. Hacker Tools Free
  30. Growth Hacker Tools
  31. Hack Tools Pc
  32. Hacking Apps
  33. Pentest Tools List
  34. Pentest Tools Linux
  35. Hacking Tools 2020
  36. Hack Rom Tools
  37. Hack Apps
  38. Hacking Tools Software
  39. Hacking Tools Kit
  40. Pentest Automation Tools
  41. Hacking Apps
  42. Hack Tools Mac
  43. Pentest Tools Port Scanner
  44. Hack Tools 2019
  45. Hack Tool Apk No Root
  46. How To Make Hacking Tools
  47. Hacker Tools Apk
  48. Hacker Tool Kit
  49. Best Hacking Tools 2019
  50. Pentest Tools Download
  51. Hacker Tools
  52. Hacking Tools For Windows Free Download
  53. Pentest Tools Subdomain
  54. Pentest Tools Nmap
  55. Hacking Tools Usb
  56. Hack Tools Github
  57. Hacking Tools Github
  58. Pentest Tools Tcp Port Scanner
  59. Hacking Tools 2020
  60. Hack Website Online Tool
  61. Pentest Tools Find Subdomains
  62. Hack Rom Tools
  63. Tools Used For Hacking
  64. Hacking Tools Online
  65. Hacker Search Tools
  66. Hacker Tools List
  67. Hack Apps
  68. Hacker Techniques Tools And Incident Handling
  69. Nsa Hack Tools
  70. Pentest Tools Download
  71. Hacking Tools 2019
  72. Android Hack Tools Github
  73. Hacker Tools Mac
  74. Best Hacking Tools 2019
  75. Pentest Tools Open Source
  76. Pentest Tools Website
  77. Hacker Tools For Windows
  78. Pentest Tools Apk
  79. Hacker Tools For Mac
  80. Pentest Tools Kali Linux
  81. Hacker Hardware Tools
  82. Pentest Tools Github
  83. Nsa Hack Tools
  84. Hacker Tools
  85. Wifi Hacker Tools For Windows
  86. Pentest Tools Url Fuzzer
  87. Pentest Tools Website Vulnerability
  88. Best Hacking Tools 2020
  89. Hack Rom Tools

No comments:

Post a Comment