Saturday, August 29, 2020

macSubstrate - Tool For Interprocess Code Injection On macOS


macSubstrate is a platform tool for interprocess code injection on macOS, with the similar function to Cydia Substrate on iOS. Using macSubstrate, you can inject your plugins (.bundle or .framework) into a mac app (including sandboxed apps) to tweak it in the runtime.
  • All you need is to get or create plugins for your target app.
  • No trouble with modification and codesign for the original target app.
  • No more work after the target app is updated.
  • Super easy to install or uninstall a plugin.
  • Loading plugins automatically whenever the target app is relaunched.
  • Providing a GUI app to make injection much easier.

Prepare
  • Disable SIP
  • Why should disable SIP
    System Integrity Protection is a new security policy that applies to every running process, including privileged code and code that runs out of the sandbox. The policy extends additional protections to components on disk and at run-time, only allowing system binaries to be modified by the system installer and software updates. Code injection and runtime attachments to system binaries are no longer permitted.

Usage
  1. download macSubstrate.app, put into /Applications and launch it.
    StatusBar
  2. grant authorization if needed.
  3. install a plugin by importing or dragging into macSubstrate.
    ToInstall
  4. launch the target app.
    step 3 and step 4 can be switched
    Once a plugin is installed by macSubstrate, it will take effect immediately. But if you want it to work whenever the target app is relaunched or macOS is restarted, you need to keep macSubstrate running and allow it to automatically launch at login.
  5. uninstall a plugin when you do not need it anymore.
    Installed

Plugin
macSubstrate supports plugins of .bundle or .framework, so you just need to create a valid .bundle or .framework file. The most important thing is to add a key macSubstratePlugin into the info.plist, with the dictionary value:
Key Value
TargetAppBundleID the target app's CFBundleIdentifier, this tells macSubstrate which app to inject.
Description brief description of the plugin
AuthorName author name of the plugin
AuthorEmail author email of the plugin
Please check the demo plugins demo.bundle and demo.framework for details.

Xcode Templates
macSubstrate also provides Xcode Templates to help you create plugins conveniently:
  1. ln -fhs ./macSubstratePluginTemplate ~/Library/Developer/Xcode/Templates/macSubstrate\ Plugin
  2. Launch Xcode, and there will be 2 new plugin templates for you.

Security
  1. SIP is a new security policy on macOS, which will help to keep you away from potential security risk. Disable it means you will lose the protection from SIP.
  2. If you install a plugin from a developer, you should be responsible for the security of the plugin. If you do not trust it, please do not install it. macSubstrate will help to verify the code signature of a plugin, and I suggest you to scan it using VirusTotal. Anyway, macSubstrate is just a tool, and it is your choice to decide what plugin to install.


Related word


  1. Hack Tools 2019
  2. Blackhat Hacker Tools
  3. Tools Used For Hacking
  4. Hack Tool Apk
  5. Hacker Tools 2019
  6. Hacker Search Tools
  7. Black Hat Hacker Tools
  8. Pentest Tools Linux
  9. Hacker Tools Online
  10. Hacking Tools Name
  11. Hacker Tools Hardware
  12. Pentest Tools For Android
  13. Top Pentest Tools
  14. Hacking Tools Windows
  15. Hack Tools For Ubuntu
  16. Install Pentest Tools Ubuntu
  17. Pentest Tools Kali Linux
  18. Usb Pentest Tools
  19. Hacking Tools For Pc
  20. Hak5 Tools
  21. Pentest Tools Find Subdomains
  22. Physical Pentest Tools
  23. Hacker Hardware Tools
  24. Pentest Tools Online
  25. Pentest Tools Website
  26. Best Pentesting Tools 2018
  27. Hacker Tools Github
  28. Free Pentest Tools For Windows
  29. Hacking Tools Online
  30. Hacker Security Tools
  31. Nsa Hack Tools Download
  32. Kik Hack Tools
  33. Pentest Automation Tools
  34. Hacker Tools For Mac
  35. Hacker Tools Windows
  36. Tools For Hacker
  37. Tools 4 Hack
  38. Pentest Tools For Windows
  39. Pentest Tools Nmap
  40. Hack Apps
  41. Pentest Recon Tools
  42. Hacker Tools
  43. Hack Tools For Mac
  44. Best Hacking Tools 2020
  45. Hacking Tools Software
  46. Hacker Tools 2020
  47. Best Pentesting Tools 2018
  48. Hacking Tools Kit
  49. Hacking Tools For Windows Free Download
  50. Computer Hacker
  51. Hacking Tools For Kali Linux
  52. Hacker Tools Mac
  53. Pentest Tools Alternative
  54. How To Hack
  55. Hack Tools
  56. Pentest Reporting Tools
  57. Hack Tools Github
  58. What Is Hacking Tools
  59. Easy Hack Tools
  60. Hack Rom Tools
  61. Best Hacking Tools 2019
  62. Hacking Tools Hardware
  63. How To Hack
  64. Hacker Tools 2019
  65. Pentest Tools Port Scanner
  66. Hack Rom Tools
  67. Pentest Tools Subdomain
  68. Hack Tool Apk No Root
  69. Pentest Tools Find Subdomains
  70. Black Hat Hacker Tools
  71. Black Hat Hacker Tools
  72. Hacker Tools Mac
  73. Bluetooth Hacking Tools Kali
  74. Pentest Tools Bluekeep
  75. Termux Hacking Tools 2019
  76. Hacker Tools Hardware
  77. Termux Hacking Tools 2019
  78. World No 1 Hacker Software
  79. Termux Hacking Tools 2019
  80. Kik Hack Tools
  81. Hack Website Online Tool
  82. Hacking Tools For Pc
  83. Install Pentest Tools Ubuntu
  84. Pentest Tools List
  85. Hacking Tools For Games
  86. Hacking Tools Name
  87. What Is Hacking Tools
  88. Hacking Tools Mac
  89. Underground Hacker Sites
  90. Hack Tools Mac
  91. Hacker Tools Mac
  92. Pentest Tools List
  93. Pentest Tools Online
  94. Pentest Tools Github
  95. Hacker Tools Github
  96. Black Hat Hacker Tools
  97. Hacker
  98. Hacking Tools Pc
  99. Nsa Hack Tools
  100. Pentest Tools Apk
  101. Hacker Tools Github
  102. How To Install Pentest Tools In Ubuntu
  103. Pentest Tools Website Vulnerability
  104. Pentest Recon Tools
  105. Hacker Tools 2020
  106. Pentest Tools Linux
  107. Tools Used For Hacking
  108. Hack Tools
  109. Pentest Tools Website Vulnerability

No comments: