遇到个奇怪app,frida无法使用ObjC.classes

frida能够正常启动,但是无法使用frida封装的oc函数

执行ObjC.classes.NSString会报错:

TypeError: cannot read property 'objc_lookUpClass' of null
    at o (frida/node_modules/frida-objc-bridge/index.js:179)
    at get (frida/node_modules/frida-objc-bridge/index.js:149)
    at main (SFReader.js)
    at apply (native)
    at <anonymous> (frida/runtime/core.js:51)

经过排查,发现是 Module.enumerateExports('libobjc.A.dylib'); 返回了空

使用MonkeyDev的模板Logos Tweak会打印错误:
[Shadow] isPathRestricted: restricted path: /Library/MobileSubstrate/DynamicLibraries/SFReader.dylib

Shadow防越狱检测把动态库给屏蔽了吧

还真是