Sunday, August 30, 2020

macSubstrate - Tool For Interprocess Code Injection On macOS


macSubstrate is a platform tool for interprocess code injection on macOS, with the similar function to Cydia Substrate on iOS. Using macSubstrate, you can inject your plugins (.bundle or .framework) into a mac app (including sandboxed apps) to tweak it in the runtime.
  • All you need is to get or create plugins for your target app.
  • No trouble with modification and codesign for the original target app.
  • No more work after the target app is updated.
  • Super easy to install or uninstall a plugin.
  • Loading plugins automatically whenever the target app is relaunched.
  • Providing a GUI app to make injection much easier.

Prepare
  • Disable SIP
  • Why should disable SIP
    System Integrity Protection is a new security policy that applies to every running process, including privileged code and code that runs out of the sandbox. The policy extends additional protections to components on disk and at run-time, only allowing system binaries to be modified by the system installer and software updates. Code injection and runtime attachments to system binaries are no longer permitted.

Usage
  1. download macSubstrate.app, put into /Applications and launch it.
    StatusBar
  2. grant authorization if needed.
  3. install a plugin by importing or dragging into macSubstrate.
    ToInstall
  4. launch the target app.
    step 3 and step 4 can be switched
    Once a plugin is installed by macSubstrate, it will take effect immediately. But if you want it to work whenever the target app is relaunched or macOS is restarted, you need to keep macSubstrate running and allow it to automatically launch at login.
  5. uninstall a plugin when you do not need it anymore.
    Installed

Plugin
macSubstrate supports plugins of .bundle or .framework, so you just need to create a valid .bundle or .framework file. The most important thing is to add a key macSubstratePlugin into the info.plist, with the dictionary value:
Key Value
TargetAppBundleID the target app's CFBundleIdentifier, this tells macSubstrate which app to inject.
Description brief description of the plugin
AuthorName author name of the plugin
AuthorEmail author email of the plugin
Please check the demo plugins demo.bundle and demo.framework for details.

Xcode Templates
macSubstrate also provides Xcode Templates to help you create plugins conveniently:
  1. ln -fhs ./macSubstratePluginTemplate ~/Library/Developer/Xcode/Templates/macSubstrate\ Plugin
  2. Launch Xcode, and there will be 2 new plugin templates for you.

Security
  1. SIP is a new security policy on macOS, which will help to keep you away from potential security risk. Disable it means you will lose the protection from SIP.
  2. If you install a plugin from a developer, you should be responsible for the security of the plugin. If you do not trust it, please do not install it. macSubstrate will help to verify the code signature of a plugin, and I suggest you to scan it using VirusTotal. Anyway, macSubstrate is just a tool, and it is your choice to decide what plugin to install.


More articles

  1. Hack Tools Online
  2. Hacking Tools Windows 10
  3. Hak5 Tools
  4. Growth Hacker Tools
  5. Hacker Tools For Windows
  6. Hacker Tools 2019
  7. Hacker Tools Apk
  8. Pentest Tools Kali Linux
  9. Hacking Tools For Windows
  10. Hack Tools Download
  11. Game Hacking
  12. Hacker Tools Apk Download
  13. Free Pentest Tools For Windows
  14. Top Pentest Tools
  15. Hacking Tools For Windows
  16. Hack Apps
  17. Hacker Tools Free Download
  18. Pentest Tools Nmap
  19. Hack Rom Tools
  20. Hacker Tools For Pc
  21. Blackhat Hacker Tools
  22. Hacking Tools 2019
  23. Pentest Tools Framework
  24. Android Hack Tools Github
  25. Hack Tools For Windows
  26. Hack Tools For Games
  27. Hacker Tools Linux
  28. Pentest Tools Website
  29. Blackhat Hacker Tools
  30. Hack App
  31. Pentest Tools Github
  32. Hacker Tools Github
  33. Hacker Tools 2020
  34. Hacking Tools For Kali Linux
  35. Hacker Tools Free Download
  36. Hacking Tools Free Download
  37. Pentest Tools
  38. Hacker Tools For Ios
  39. Pentest Tools Windows
  40. Hack And Tools
  41. Hacking Tools For Windows
  42. Hacker Tools For Pc
  43. Hacking Tools Github
  44. Pentest Tools Open Source
  45. Hacker Tools Windows
  46. Hack Tools Download
  47. Hacking Tools Github
  48. Hack Tools 2019
  49. Hack App
  50. Hacking Tools For Windows Free Download
  51. New Hacker Tools
  52. Hacking Tools Name
  53. Hacking Tools 2020
  54. Hack Tool Apk
  55. Hacking Tools
  56. Hacker Tools Online
  57. Hacker Tool Kit
  58. Tools For Hacker
  59. Tools Used For Hacking
  60. Hacking Tools Name
  61. Hack App
  62. Hacker Hardware Tools
  63. Hack Tools Download
  64. Hack Tools
  65. Beginner Hacker Tools
  66. Pentest Tools Tcp Port Scanner
  67. Hacker Hardware Tools
  68. Best Hacking Tools 2020
  69. Hacker Tools Apk Download
  70. Hacking Tools For Games
  71. Hacker Tools For Windows
  72. Hack Tools Github
  73. Pentest Tools For Android
  74. Pentest Tools List
  75. Hacker Tool Kit
  76. Hack Tools
  77. Pentest Tools Online
  78. Hack App
  79. What Is Hacking Tools
  80. Hacker Tools 2019
  81. Pentest Tools Open Source
  82. Hacker Tools Linux
  83. Pentest Automation Tools
  84. Hacking Apps
  85. Tools Used For Hacking
  86. Pentest Tools For Android
  87. Computer Hacker
  88. Hacker
  89. Hacker Tools Free Download
  90. Hack Tools For Windows
  91. Hacking Tools Pc
  92. Hacker Tools
  93. Pentest Tools Linux
  94. Hack Tools 2019
  95. Install Pentest Tools Ubuntu
  96. How To Install Pentest Tools In Ubuntu
  97. Pentest Tools Review
  98. Nsa Hack Tools Download
  99. Pentest Tools Alternative
  100. Install Pentest Tools Ubuntu
  101. Hacking Tools Hardware
  102. Hacker Tools 2020
  103. Nsa Hack Tools Download
  104. New Hacker Tools
  105. Hack Tools Mac
  106. Hack Tools For Mac
  107. Blackhat Hacker Tools
  108. Hack Tools For Windows
  109. Pentest Tools Review
  110. Nsa Hacker Tools
  111. Hacking App
  112. Hacking Tools Kit
  113. Hacker Tools Mac
  114. Pentest Tools Find Subdomains
  115. Hacking Tools Pc
  116. Hacker Tools Linux
  117. Pentest Tools Subdomain
  118. Pentest Tools Kali Linux
  119. Hacking Tools Free Download
  120. New Hacker Tools
  121. Tools For Hacker
  122. Hacker Tools List
  123. Pentest Tools Subdomain
  124. Hacks And Tools
  125. Hacker Tools Apk Download
  126. Pentest Recon Tools
  127. Hacker Tools Apk Download
  128. How To Hack
  129. Hacking Tools And Software
  130. Hacking Tools 2020
  131. Hacker Tools Windows
  132. Hacking Tools Software
  133. Hack Tools For Ubuntu
  134. Tools For Hacker
  135. Hacking Tools Name
  136. Pentest Tools Tcp Port Scanner
  137. Hacking Tools Download
  138. Hacking Apps
  139. Hack Tools For Pc
  140. Pentest Automation Tools
  141. Hak5 Tools
  142. Pentest Tools Github
  143. Beginner Hacker Tools
  144. Pentest Tools Open Source
  145. Pentest Tools Website
  146. Pentest Tools For Windows
  147. Hack And Tools
  148. Hacking Tools Free Download
  149. Pentest Tools Alternative
  150. Physical Pentest Tools
  151. Pentest Tools For Ubuntu
  152. Android Hack Tools Github
  153. Free Pentest Tools For Windows
  154. Hack Tools For Windows
  155. Pentest Tools Port Scanner
  156. Hacking Tools Github
  157. Pentest Tools
  158. Pentest Tools Kali Linux
  159. Hacker Tools Online
  160. Pentest Automation Tools
  161. Hacking Tools Mac
  162. Hacking Tools Download
  163. Game Hacking
  164. Hack Website Online Tool
  165. Hacker Tools 2020
  166. Best Hacking Tools 2019
  167. Hack Apps
  168. Hack Tools For Ubuntu
  169. Pentest Tools Alternative
  170. Hacking Tools For Games
  171. Game Hacking
  172. Hack Tools For Mac
  173. Hacking Tools For Mac
  174. Hacking Tools For Beginners
  175. Pentest Tools Windows
  176. Pentest Tools Linux
  177. Pentest Tools Download

No comments:

Post a Comment