Skip to content

Instantly share code, notes, and snippets.

@interference-security
Created September 30, 2020 20:08
Show Gist options
  • Save interference-security/dbedd4fccaa6e7e7c0bbaf6167719ff7 to your computer and use it in GitHub Desktop.
Save interference-security/dbedd4fccaa6e7e7c0bbaf6167719ff7 to your computer and use it in GitHub Desktop.
Running third-party executables on iOS

iDevice:~ root#ldid -e `which bash` > ent.xml

iDevice:~ root# cat ent.xml

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
        <key>platform-application</key>
        <true/>
        <key>com.apple.private.security.no-container</key>
        <true/>
        <key>com.apple.private.skip-library-validation</key>
        <true/>
</dict>
</plist>

iDevice:~ root#ldid -Sent.xml YOUR_BINARY_FILE

iDevice:~ root#chmod 755 YOUR_BINARY_FILE

iDevice:~ root#inject ./YOUR_BINARY_FILE

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment