xcode objective-c IOS微信逆向-免越狱抢红包防撤回等自定义功能实现

微信砸壳

CrackerXI+砸壳，或手动使用dumpdecrypted砸壳

把已砸壳的wech使用scp或者助手at.ipa导出

monkeydev

MonkeyDev集成在xcode上面，可以快速开发hook的代码，链接到Mach-O文件，支持修改ipa后的免越狱安装。

新建MonkeyDev项目

把砸壳后的微信ipa拖进工程中的TargetApp目录

run编译真机调试

打开微信设置页面，xcode打开Debug View Hierarychy查看层级。

新增控件类WCTableViewManager

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 %hook NewSettingViewController - (void)reloadTableData{ %orig; WCTableViewManager *tableViewMgr = MSHookIvar(self, "m_tableViewMgr"); MMTableView *tableView = [tableViewMgr getTableView]; WCTableViewNormalCellManager *newCell = [%c(WCTableViewNormalCellManager) normalCellForSel:@selector(setting) target:self title:@"你懂的"]; [((WCTableViewSectionManager*)tableViewMgr.sections[0]) addCell: newCell]; [tableView reloadData]; } %new - (void)setting { UIViewController *vc = [[HZWechatSettingController alloc] init]; [((UIViewController *)self).navigationController PushViewController:vc animated:true]; } %end

新增自动抢红包、消息防撤回、微信步数修改选项

1 2 3 4 5 6 7 8 WCTableViewCellManager *autoEnvelopCell = [HZWechat switchCellWithSel:@selector(autoEnvelopSwitchChange:) target:self title:@"自动抢红包" switchOn:[HZWechatConfig autoRedEnvelop]]; [nidongde addCell:autoEnvelopCell]; WCTableViewCellManager *revokeIntercept = [HZWechat switchCellWithSel:@selector(revokeIntercept:) target:self title:@"消息防撤回" switchOn:[HZWechatConfig preventRevoke]]; [nidongde addCell:revokeIntercept]; WCTableViewCellManager *changeStepsCell = [HZWechat switchCellWithSel:@selector(changedSteps:) target:self title:@"修改微信步数" switchOn:[HZWechatConfig changeSteps]]; [nidongde addCell:changeStepsCell];

hook红包消息实现自动抢

1 2 3 4 5 6 7 8 9 10 11 12 13 BOOL (^shouldReceiveRedEnvelop)() = ^BOOL() { if (!HZWechatConfig.autoRedEnvelop) { return NO; } if (isGroupInBlackList()) { return NO; } if (isContaintKeyWords()) { return NO; } return isGroupReceiver() || (isGroupSender() && isReceiveSelfRedEnvelop()) || (!isGroupReceiver() && HZWechatConfig.personalRedEnvelopEnable); }; NSDictionary *(^parseNativeUrl)(NSString *nativeUrl) = ^(NSString *nativeUrl) { nativeUrl = [nativeUrl substringFromIndex:[@"wxpay://c2cbizmessagehandler/hongbao/receivehongbao?" length]]; return [%c(WCBizUtil) dictionaryWithDecodedComponets:nativeUrl separator:@"&"]; };

防撤回实现

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 %hook CMessageMgr - (void)onRevokeMsg:(CMessageWrap *)arg1 { if (HZWechatConfig.preventRevoke) { NSString *msgContent = arg1.m_nsContent; NSString *(^parseParam)(NSString *, NSString *,NSString *) = ^NSString *(NSString *content, NSString *paramBegin,NSString *paramEnd) { NSUInteger startIndex = [content rangeOfString:paramBegin].location + paramBegin.length; NSUInteger endIndex = [content rangeOfString:paramEnd].location; NSRange range = NSMakeRange(startIndex, endIndex - startIndex); return [content substringWithRange:range]; }; NSString *session = parseParam(msgContent, @"", @""); NSString *newmsgid = parseParam(msgContent, @"", @""); NSString *fromUsrName = parseParam(msgContent, @"

修改微信运动步数

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 %hook WCDeviceStepObject -(NSInteger)m7StepCount { NSInteger stepCount = %orig; NSInteger newStepCount = HZWechatConfig.changedSteps; return HZWechatConfig.changeSteps ? newStepCount : stepCount; } -(NSInteger)hkStepCount { NSInteger stepCount = %orig; NSInteger newStepCount = HZWechatConfig.changedSteps; return HZWechatConfig.changeSteps ? newStepCount : stepCount; } %end

自签名打包后实现多开，配合AltDeploy+AltStore食用更佳

感谢

精彩内容

评论可见，请评论后查看内容，谢谢！！！