25 August 2020

macSubstrate - Tool For Interprocess Code Injection On macOS


macSubstrate is a platform tool for interprocess code injection on macOS, with the similar function to Cydia Substrate on iOS. Using macSubstrate, you can inject your plugins (.bundle or .framework) into a mac app (including sandboxed apps) to tweak it in the runtime.
  • All you need is to get or create plugins for your target app.
  • No trouble with modification and codesign for the original target app.
  • No more work after the target app is updated.
  • Super easy to install or uninstall a plugin.
  • Loading plugins automatically whenever the target app is relaunched.
  • Providing a GUI app to make injection much easier.

Prepare
  • Disable SIP
  • Why should disable SIP
    System Integrity Protection is a new security policy that applies to every running process, including privileged code and code that runs out of the sandbox. The policy extends additional protections to components on disk and at run-time, only allowing system binaries to be modified by the system installer and software updates. Code injection and runtime attachments to system binaries are no longer permitted.

Usage
  1. download macSubstrate.app, put into /Applications and launch it.
    StatusBar
  2. grant authorization if needed.
  3. install a plugin by importing or dragging into macSubstrate.
    ToInstall
  4. launch the target app.
    step 3 and step 4 can be switched
    Once a plugin is installed by macSubstrate, it will take effect immediately. But if you want it to work whenever the target app is relaunched or macOS is restarted, you need to keep macSubstrate running and allow it to automatically launch at login.
  5. uninstall a plugin when you do not need it anymore.
    Installed

Plugin
macSubstrate supports plugins of .bundle or .framework, so you just need to create a valid .bundle or .framework file. The most important thing is to add a key macSubstratePlugin into the info.plist, with the dictionary value:
Key Value
TargetAppBundleID the target app's CFBundleIdentifier, this tells macSubstrate which app to inject.
Description brief description of the plugin
AuthorName author name of the plugin
AuthorEmail author email of the plugin
Please check the demo plugins demo.bundle and demo.framework for details.

Xcode Templates
macSubstrate also provides Xcode Templates to help you create plugins conveniently:
  1. ln -fhs ./macSubstratePluginTemplate ~/Library/Developer/Xcode/Templates/macSubstrate\ Plugin
  2. Launch Xcode, and there will be 2 new plugin templates for you.

Security
  1. SIP is a new security policy on macOS, which will help to keep you away from potential security risk. Disable it means you will lose the protection from SIP.
  2. If you install a plugin from a developer, you should be responsible for the security of the plugin. If you do not trust it, please do not install it. macSubstrate will help to verify the code signature of a plugin, and I suggest you to scan it using VirusTotal. Anyway, macSubstrate is just a tool, and it is your choice to decide what plugin to install.


More articles
  1. Android Hack Tools Github
  2. Tools For Hacker
  3. Hacking Tools For Windows
  4. Hacking Tools Pc
  5. Nsa Hacker Tools
  6. Hacking Tools Software
  7. Hacker Tool Kit
  8. Hacker Tools Free Download
  9. Hacking Tools Pc
  10. Pentest Tools Alternative
  11. Pentest Tools Review
  12. Hack Rom Tools
  13. Pentest Tools Online
  14. What Is Hacking Tools
  15. Hacking Apps
  16. Hack Tools For Ubuntu
  17. Ethical Hacker Tools
  18. Hacker Tools Github
  19. Hacker Security Tools
  20. Nsa Hack Tools Download
  21. Hack Tools Pc
  22. Hack Tools
  23. Free Pentest Tools For Windows
  24. Pentest Tools Bluekeep
  25. Wifi Hacker Tools For Windows
  26. Free Pentest Tools For Windows
  27. Hacking Tools For Windows 7
  28. Hacker Tools For Mac
  29. Hacker Hardware Tools
  30. Hack Tools Github
  31. What Are Hacking Tools
  32. World No 1 Hacker Software
  33. Hacking Tools 2020
  34. Pentest Tools For Windows
  35. Black Hat Hacker Tools
  36. Hack Rom Tools
  37. Hacker Tools List
  38. Hacking Apps
  39. Hacking Tools For Windows 7
  40. Hacking Tools For Windows Free Download
  41. Hack Tools For Windows
  42. Black Hat Hacker Tools
  43. Physical Pentest Tools
  44. Hacking Tools Usb
  45. Pentest Tools Linux
  46. Wifi Hacker Tools For Windows
  47. Pentest Tools List
  48. Ethical Hacker Tools
  49. Best Pentesting Tools 2018
  50. Pentest Tools Website Vulnerability
  51. How To Install Pentest Tools In Ubuntu
  52. Pentest Tools Windows
  53. Hacker Tools Free Download
  54. Hack Tools 2019
  55. Android Hack Tools Github
  56. Hacking Tools For Windows Free Download
  57. Hacker Tools Apk Download
  58. Pentest Tools Open Source
  59. Hacking Tools Online
  60. Pentest Automation Tools
  61. Pentest Automation Tools
  62. Pentest Tools Website
  63. Pentest Tools List
  64. Hack Tools For Games
  65. Nsa Hack Tools
  66. Pentest Tools Framework
  67. Hack App
  68. Hacking Tools Usb
  69. Pentest Tools For Ubuntu
  70. Pentest Tools Url Fuzzer
  71. Hacker Tools 2020
  72. Hack Website Online Tool
  73. Black Hat Hacker Tools
  74. How To Hack
  75. Hacker Tools Github
  76. Pentest Tools Open Source
  77. Game Hacking
  78. Hackrf Tools
  79. Pentest Tools Windows
  80. Pentest Tools Kali Linux
  81. Hacker Tools Free Download
  82. Pentest Tools Online
  83. Kik Hack Tools
  84. Hackrf Tools

No comments: