1

In this pdf file written by the great Saleo: https://saelo.github.io/presentations/36c3_messenger_hacking.pdf enter image description here

Saleo was able to debug the called method names of imessage during runtime with ida pro, which suggests that he was able to attach debugserver or an equivalent to imessage. My question is whether a rootful jailbroken iphone is necessary to set up a similar debugging environment, or whether a rootless jailbreak will also suffice. In case a rootless jailbreak is not enough due to lack of permission, what are some ways by which a similar imessage debugging environment with ida pro can be set up, for a rootless jailbroken A12+ device <= ios 16.0.3?

*Edit: I have figured out that a jailbroken iphone is necessary for any serious ios app research, and that the alternative is doing it on an M1+ macbook pro. Does anyone have experience or intuition regarding the exploit chain that will eventually trigger a PPL bypass for A12+ devices running on <= ios 16.0.3?

Improve this question
2
  • The linked pdf mentions iOS 12 and 13. I am not a jailbreaking expert, but the first rootless jailbreaks I have encountered were for iOS 15+. Therefore you can assume that for debugging a fully jailbroken phone with root access was used. The changelog of the latest Frida 16.1.4 release mentioned something about using Frida in rootless iOS environments. As Frida is not far away form a debugger, debugging on a rootless device may not be impossible.
    – Robert
    Commented Aug 31, 2023 at 12:03
  • Does anyone have experience debugging native apps like imessage in a post ios 16 rootless environment?
    – rasputin
    Commented Aug 31, 2023 at 20:39

1 Answer 1

Reset to default
0

You can still jailbreak IPhone X, iOS 15.0 - 16.7 and achieve rootful using palerain. https://ios.cfw.guide/archived-palera1n-rootful/

You will then be able to use tools like frida and debugserver to debug IMessage.

Here is a good resource to get started with Frida and looking at IMessage: https://www.youtube.com/watch?v=miSg0Km2V-w

Improve this answer
1
  • I appreciate your answer. I have to add the condition for A12+ devices, however...
    – rasputin
    Commented Sep 27, 2023 at 22:36

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.