1.按照上一个博文的内容,可将重签名和注入代码运行到如下的样子,然后viewdebeg点击到注册,右边可以回去到如图所示的信息,如果3中没有,则 日志栏中 po 地址即可。
2.下载sublimetext product中的包按下图中步骤使用sublimetext,在sublime中查找的话,按shift + command + f,进入搜索结果的话,双击搜索到的内容。
所需代码实现:
#import "InjectCode.h"
#import <objc/runtime.h>
#import <UIKit/UIKit.h>
@implementation InjectCode
//1.通过方法的交换,实现方法的替换,使微信的注册无法使用。
//+(void)load
//{
// Method old_method = class_getInstanceMethod(objc_getClass("WCAccountLoginControlLogic"), @selector(onFirstViewRegister));
// Method new_method = class_getInstanceMethod(self, @selector(CC_OnfirshViewRegister));
// method_exchangeImplementations(old_method, new_method);
//}
//-(void)CC_OnfirshViewRegister
//{
// NSLog(@"\n\n\n\n\n\n注入恶意代码");
//}
//2.单纯的交换方法,无法实现方法的替换,因为再次调用原来的方法的时候,因为原来的类中没有My_onNext 的声明和实现,会报错
//+(void)load
//{
// Method onNext = class_getInstanceMethod(objc_getClass("WCAccountMainLoginViewController"), @selector(onNext));
// Method My_onNext = class_getInstanceMethod(self, @selector(My_onNext));
// method_exchangeImplementations(onNext, My_onNext);
//}
//-(void)My_onNext
//{
// UITextField * textField = [[self valueForKey:@"_textFieldUserPwdItem"] valueForKey:@"m_textField"];
// NSLog(@"密码是:%@",textField.text);
// [self My_onNext];
//}
//3.通过添加方法,然后交换方法,实现方法的替换
//+(void)load
//{
// Method onNext = class_getInstanceMethod(objc_getClass("WCAccountMainLoginViewController"), @selector(onNext));
// class_addMethod(objc_getClass("WCAccountMainLoginViewController"), @selector(My_onNext), My_onNext, "v@:");
// method_exchangeImplementations(onNext, class_getInstanceMethod(objc_getClass("WCAccountMainLoginViewController"), @selector(My_onNext)));
//}
//
//void My_onNext(id self,SEL sel)
//{
// UITextField * textField = [[self valueForKey:@"_textFieldUserPwdItem"] valueForKey:@"m_textField"];
// NSLog(@"密码是:%@",textField.text);
// [self performSelector:@selector(My_onNext)];
//}
//4.通过替换方法,实现方法的交换
//+(void)load
//{
// Method onNext = class_getInstanceMethod(objc_getClass("WCAccountMainLoginViewController"), @selector(onNext));
// old_onNext = method_getImplementation(onNext);
// class_replaceMethod(objc_getClass("WCAccountMainLoginViewController"), @selector(onNext), My_onNext, "");
//}
//IMP (*old_onNext)(id self,SEL cmd);
//void My_onNext(id self,SEL sel)
//{
// UITextField * textField = [[self valueForKey:@"_textFieldUserPwdItem"] valueForKey:@"m_textField"];
// NSLog(@"密码是:%@",textField.text);
// old_onNext(self,sel);
//}
//5.通过get IMP ,SET IMP 实现方法的交换
+(void)load
{
Method onNext = class_getInstanceMethod(objc_getClass("WCAccountMainLoginViewController"), @selector(onNext));
old_onNext = method_getImplementation(onNext);
method_setImplementation(onNext, My_onNext);
}
IMP (*old_onNext)(id self,SEL cmd);
void My_onNext(id self,SEL sel)
{
UITextField * textField = [[self valueForKey:@"_textFieldUserPwdItem"] valueForKey:@"m_textField"];
NSLog(@"密码是:%@",textField.text);
old_onNext(self,sel);
}
@end