What I want
I’m trying to dump WhatsApp Messenger app’s headers.
After hours and hours I’m still stuck on this task.
I’ve tried the following on:
- iPhone 5C with iOS 8.2
- iPhone 6 with iOS 9.3.2
- and my computer is running on MacOS Sierra
What I’ve tried
I’ve tried to decrypt the bundle app using both Clutch2 and dumpdecrypted.
It worked only with Clutch2
After the binary is decrypted it’s impossible for me to get class-dump working.
I always have the same error:
$ ./class-dump WhatsAppClutched-ios8-v3\ 2/Payload/WhatsApp.app/WhatsApp -o ./headers 2018-01-03 17:46:00.994 class-dump[22529:4570161] Error: Cannot find offset for address 0x6800f3c2 in stringAtAddress: $
Note that I’ve tried to decrypt the binary either by running
Clutch -b <bundleId> or
Clutch -d <bundleId. Both commands give me an output without error but after that, class-dump does not work at all.
I’m using the latest release of class-dump, I’ve tried to directly use the source code and build it but I have other issues by doing this.
Please, could someone solve my issue OR at least dump up to date headers for me ?
PS: note that it work perfectly when I do this operation with another app like Snapchat for instance…