在iOS12上面运行cycript

unc0ver3.6.2越狱,使用cyrun附加App,进入cycrip后所有操作跟之前一样

  • 通过Cydia安装New Curses,readline,adv-cmds

  • 通过Cydia安装wget,主要为了在iPhone上可以下载deb文件

  • 以root用户登录到iPhone上,分别下载

    1
    2
    3
    wget http://apt.saurik.com/debs/cycript_0.9.594_iphoneos-arm.deb
    wget http://www.tateu.net/repo/files/net.tateu.cycriptlistenertweak_1.0.0_iphoneos-arm.deb
    wget http://www.tateu.net/repo/files/net.tateu.cyrun_1.0.5_iphoneos-arm.deb
  • 以root用户安装下载的deb

    1
    2
    dpkg -i cycript_0.9.594_iphoneos-arm.deb
    dpkg -i net.tateu.cycriptlistenertweak_1.0.0_iphoneos-arm.deb net.tateu.cyrun_1.0.5_iphoneos-arm.deb
  • cyrun -n SpringBoard -e -d -f会重启SpringBoard,然后进入cycript模式,退出cycript时自动杀掉SpringBoard并卸载

    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
      iPhone:~ root# cyrun -n SpringBoard -e -d -f
    applicationName: SpringBoard is running (8039)
    executableName: SpringBoard
    bundleIdentifier: com.apple.springboard
    Cycript is inactive:
    Device is not passcode locked
    Tweak Mode
    Waiting for Process to close...
    Waiting for SpringBoard to launch...
    Waiting for Cycript to become active...
    Success, you may now run
    cycript -r 127.0.0.1:8556
    cy#
  • 进入cy#模式后愉快的玩耍。