Installation, configuration and use of Reveal tool for iOS reverse engineering, iosreveal

Installation, configuration and use of Reveal tool for iOS reverse engineering, iosreveal

Today's Blog content is relatively simple, but it is quite important. Some friends often ask me privately on QQ about how to use Reveal in the blog to view the UI level of the app downloaded from the AppStore, in this blog, we will introduce this topic in a unified manner. Although the relevant information on the Internet has been captured, it is necessary to summarize it in detail.

In other words, the powerful analysis tool Reveal has been used more than once in many previous blogs, previously, we used it to view the UI level of our App and the App downloaded from the AppStore. The results were very good.RevealIn reverse engineering, it is not only used to view the UI level, but can help you locate the problem. For example, if you want to display an Alter on a page of an App, Reveal will help you easily find the page and related classes.

Well, the topic of today's blog is how to configure and use Reveal in the jailbreak environment to view the App UI level. Reveal for Mac can be downloaded from the Reveal official website, but it can only be used for 30 days. You can also download the cracked Reveal from the Internet. If you want to make it interesting, use Hopper to crack the official Reveal, and use Hopper to modify Reveal compilation and crack Reveal tutorials on the Internet. If you do not use Hopper to crack Reveal, go to"Reveal cracking Link", Which is valid in the latest version 1.6.3. The Reveal 1.6.3 used in this blog is to use Hopper for cracking. Of course, this is not the topic of today. Today's topic is how to use Reveal.

Of course, the content involved in today's blog is on the jailbreaking mobile phone. please Google it on your own to learn how to use Reveal to view the UI level of your App on a phone not jailbreaking, I will not go into detail here.

 

1. Configure Reveal on the jailbreak Device

The content below is based on the jailbreak device, and the system version of the device isIOS9.2.1Jailbreak version.

1. Reveal Loader Installation

First, we create Cydia for the jailbreak device, and then enter Reveal Loader in the search box and install it. The following figure shows the effect after installation. This step is relatively simple. After installation, restart SpringBoard.

 

 

2. Import libReveal. dylib

This step is also a key step.Reveal LoaderCheck whether there are/Library/RHRevealLoaderAnd check whether the folder containsLibReveal. dylibIf this file exists, skip this step. If not, let's take a look.

(1) tools required to operate jailbreak Device Files

Of course, this part needs to operate on the file system of the jailbreak device and import the folder on the Mac to the device. Of course, you can use OpenSSH to connect to your device. However, if you want to import the Mac files to the corresponding folder of the jailbreak device, you can use the visualization tools below to make it more intuitive.

Below are the two tools I installed locally. Of course, any one of them can operate the file system of the iOS device, but the iExplorer tool is more powerful. IExplorer can view the backup files of all iOS devices on your Mac, including those of non-jailbreaking devices.

　　

 

(2) libReveal. dylib

Reveal on Mac comes with two libraries: libReveal. dylib and Reveal. framework. The use of libraries on devices not jailbroken is the latter, and the former is used in this blog. These two files are located in the iOS Library in Reveal.Reveal menu-> Help-> Show Reveal Library in Finder-> iOS Library. We can find the files we need through the above directories. Of course, in this blog, we only needLibReveal. dylibThis file.

　　

FindLibReveal. dylibFile, useIExplorerCopy it to the corresponding directory in our device. As shown below.

　　

So far, ourRevealThe configuration is over, and the next step is to useRevealLet's do something.

 

 

Ii. Use Of Reveal

1. Select a Reveal-enabled App on the device

We have installed the jailbreak device.Reveal LoaderThen you can find the Reveal configuration item in settings. In this configuration item, you can select the App to Reveal. Of course, for the jailbreak mobile phone, all apps installed on the mobile phone can Reveal. Of course, this includesAppStoreDownload, which is also included in the iOS system. As follows:

 

2. view the UI level of the system App "Stock Market"

The preceding Reveal configuration is completed and configured. The next time is the Reveal usage time. You do not need to use USB to view the UI level of the App on the Mac, but ensure that your iOS device and your Mac are in the same LAN. Below is one of my Reveal devices. DecoupleDemo on (iOS 9.3.2) is owned by a colleague of mine. Of course, his mobile phone is not jailbroken, however, Reveal is introduced in his App. framework, so I can see it here. Below is my jailbreak device. Of course, this stock market App is an App that comes with the iOS system. Next, let's take a look at how to use Reveal to view the UI level of a third-party App on the jailbreak device.

　　

In the above, we can click the stock market below to Reveal the "stock market" App. Below is the UI hierarchy of the App "stock market.

　　

 

After the above steps, Reveal can work normally. As for how to make the Reveal function to its fullest extent, we have to look at the people who use it. Today's blog is here.