wuaia443 发表于 2025-3-26 22:07:01

越狱开发工具JBDev1.0发布 支持iOS12-16

越狱开发工具JBDev1.0发布 支持iOS12-16                                                                                 
https://raw.githubusercontent.com/lich4/JBDev/main/screenshots/launch_debug_sysapp.pnghttps://raw.githubusercontent.com/lich4/JBDev/main/screenshots/launch_debug_tweak.png简介
JBDev用于Xcode越狱开发及巨魔开发,提供和普通App一样的开发体验,使用Xcode进行编译——安装——调试,已测试环境:
[*]Xcode12-15
[*]iOS12-16
[*]arm64/arm64e
[*]Checkra1n/Unc0ver/Taurine/Palera1n/Dopamine
[*]有根/无根/隐根

下载:
https://pan.quark.cn/s/38c19ecf0a0b
https://pan.xunlei.com/s/VOMHjc7Zlm67SjcMj5ddtJ48A1?pwd=s3ve#
主要功能

[*]支持越狱(有根/无根/隐根)App开发&源码级调试
[*]支持巨魔App开发&源码级调试
[*]支持Xcode调试任意进程
注意事项
[*]JBDev只能用于越狱设备上调试
[*]使用JBDev越狱开发时,打包功能依赖于Theos
[*]使用JBDev巨魔开发时,确保已安装TrollStore
常见项目类型调试方式一览
项目类型Xcode调试调试类型
越狱AppJBDev启动调试/附加调试/等待调试
越狱Tweak/ToolJBDev附加调试/等待调试
巨魔AppJBDev启动调试/附加调试/等待调试
非越狱AppMonkeyDev启动调试/附加调试/等待调试
注:
[*]启动调试,使用Xcode启动App并使其等待调试器附加
[*]附加调试,进程已启动情况下附加调试,lldb使用方式debugserver --attach=,Xcode同理
[*]等待调试,等待进程启动并自动附加调试,lldb使用方式debugserver -waitfor=,Xcode同理
JBDev核心
JBDev核心文件
[*]jbdev.plist,控制JBDev在iOS端行为配置文件,开发阶段需随App一起打包,字段如下
[*]

[*]type: 指定JBDev以何种方式打包安装,可指定app/jailbreak/trollstore
[*]jbdev.build.sh,控制JBDev打包的脚本
JBDev核心设置(环境变量)
[*]THEOS,用于JBDev定位Theos以便打包
[*]JBDEV_PACKAGE,应用于App类型Target,用于控制最终打包&安装&调试
JBDev开发越狱项目
详细实例见JBDevJBTest建立项目
以下配置不依赖于iOSOpenDev/MonkeyDev使用Xcode建立等同于theos/application的项目
[*]File - New - Target - iOS - App
[*]此为主Target,用于JBDev交互打包/安装/调试
使用Xcode建立等同于theos/tweak的项目
[*]File - New - Target - macOS - Library
[*]Build Settings - Base SDK设置为iOS,同时部署Device设置为iOS设备
使用Xcode建立等同于theos/tool的项目
[*]File - New - Target - macOS - CommandLineTool
[*]Build Settings - Base SDK设置为iOS,同时部署Device设置为iOS设备
配置文件
[*]所有需要ldid签名的Target在自身目录下添加plist文件
[*]将jbdev.build.sh放在.xcodeproj同级目录
[*]将jbdev.plist放在.xcodeproj同级目录,设置type为jailbreak
配置Build Settings
[*]所有Target调整Installation Directory
[*]Project新增CODE_SIGNING_ALLOWED,设置为NO
[*]Project新增THEOS,设置为theos路径
[*]主Target新增JBDEV_PACKAGE,设置为YES(此变量控制是否打包)
配置Build Phase
[*]所有Target添加Run Script最后执行,设置为bash jbdev.build.sh
[*]主Target将其他项目设置为依赖项
无根/隐根配置
Theos支持为有根/无根/隐根提供layout扩展
[*]layout_root目录,存放有根与无根/隐根文件diff
[*]layout_rootless目录,存放无根与有根/隐根文件diff
[*]layout_roothide目录,存放隐根与有根/无根文件diff
常用diff文件如下
[*]layout*/DEBIAN/control,
[*]

[*]有根Architecture为iphoneos-arm
[*]

[*]无根Architecture为iphoneos-arm64
[*]

[*]隐根Architecture为iphoneos-arm64e
[*]layout*/DEBIAN/{preinst,postinst,extrainst_,prerm,postrm}
[*]layout*/Library/LaunchDaemons/*.plist
注意事项
[*]layout/DEBIAN/control的Architecture和Xcode Build Settings的Architecture没有关系,有根包的实际arch可以为armv7/arm64/arm64e,无根包/隐根包的实际arch可以为arm64/arm64e
[*]必须在layout/DEBIAN的postinst或extrainst_中执行uicache否则因系统App未注册而安装失败
有根/无根/隐根编译切换
此方式每次可编译有根/无根/隐根中的一种,操作方式如下通用
[*]Tweak设置Runpath Search Paths Header Search Paths Framework Search Paths
[*]Tweak链接libsubstrate.tbd
有根
[*]所有Target的Build Settings的THEOS_PACKAGE_SCHEME删除
无根
[*]所有Target的Build Settings的THEOS_PACKAGE_SCHEME设置为rootless
[*]Preprocessor Macros中设置THEOS_PACKAGE_SCHEME_ROOTLESS
隐根
[*]所有Target的Build Settings的THEOS_PACKAGE_SCHEME设置为roothide
[*]Preprocessor Macros中设置THEOS_PACKAGE_SCHEME_ROOTHIDE
[*]Tweak链接libroothide.tbd
单独启动调试Tweak
详细实例见JBDevTweakTest。由于JBDev可以调试任意App,因此可以源码级调试注入App的Tweak。原理如下:
[*]建立一个和目标App的BundleID相同的空App(FakeApp)
[*]Xcode执行打包安装调试,JBDev跳过安装
[*]目标App启动,开始调试Tweak
使用Xcode建立FakeApp
[*]File - New - Target - iOS - App
配置文件
[*]将jbdev.build.sh放在.xcodeproj同级目录
[*]将jbdev.plist放在.xcodeproj同级目录,设置type为jailbreak
配置Build Settings
[*]所有Target新增CODE_SIGNING_ALLOWED,设置为NO
[*]FakeApp新增JBDEV_PACKAGE,设置为YES(此变量控制是否打包)
[*]FakeApp新增JBDEV_NO_COPY,防止安装FakeApp本身
配置Build Phase
[*]所有Target添加Run Script最后执行,设置为bash jbdev.build.sh
[*]FakeApp将Tweak设置为依赖项
注意
[*]SpringBoard不属于App类型,不可调试
[*]由于Xcode不支持非源码下断点,因此不支持调试logos语法的Tweak,如果谁有黑科技可以实现强制下断点请在issue里提交
JBDev开发巨魔项目
详细实例见JBDevTSTest。前置条件:iOS系统需要能越狱且能使用巨魔使用Xcode建立普通iOS-App的项目
[*]File - New - Target - iOS - App
配置文件
[*]在自身Target目录下添加需要签名的plist文件
[*]将jbdev.build.sh放在.xcodeproj同级目录
[*]将jbdev.plist放在.xcodeproj同级目录,设置type为trollstore
配置Build Settings
[*]Target新增CODE_SIGNING_ALLOWED,设置为NO
[*]Target新增JBDEV_PACKAGE,设置为YES(此变量控制是否打包)
配置Build Phase
[*]所有Target添加Run Script最后执行,设置为bash jbdev.build.sh
注意事项
[*]巨魔App开发,由于纯巨魔环境与越狱环境有较大差异,因此后续需要在纯巨魔环境进一步测试
JBDev编译
cd JBDevmake clean; make packagemake clean; make package THEOS_PACKAGE_SCHEME=rootlessmake clean; make package THEOS_PACKAGE_SCHEME=roothide

问题排查
在使用JBDev遇到问题时,可以
[*]查看系统日志(前缀JBDev)
[*]查看文件日志/tmp/jbdev.log
其他注意事项
[*]对于iOS>=15,首次连接Mac必须使用XCode>=13,否则会因生成的符号缓存有误导致lldb初始化时间巨长,若已生成错误的符号缓存可以在此目录手动删除~/Library/Developer/Xcode/iOS DeviceSupport/[设备]
A system application with the given bundle identifier is already installed on the device and cannot be replaced.


[*]原因:安装成功但获取App信息失败(如extrainst_未执行uicache)
[*]解决:直接dpkg卸载报错,需要先手动安装deb,再卸载deb;或者手动删App目录再uicache
[*]注意:uicache根据越狱工具不同参数不同
Failed to start remote service "com.apple.debugserver" on device.


[*]解决:插拔usb重试
Introduction
JBDev is a powerful tool for Jailbreak/TrollStore development with Xcode, suppling the same experience as common app development: compile - install - debug app with Xcode, tested on
[*]Xcode12-15
[*]iOS12-16
[*]arm64/arm64e
[*]Checkra1n/Unc0ver/Taurine/Palera1n/Dopamine
[*]rootful/rootless/roothide
Features

[*]Jailbreak(rootful/rootless/roothide) development with sourcecode-level debugging with Xcode
[*]TrollStore development with sourcecode-level debugging with Xcode
[*]Debug any process with Xcode
Notice
[*]JBDev is used on jailbreak devices
[*]For Jailbreak development, JBDev use Theos to package
[*]For TrollStore development, make sure TrollStore is installed
Jailbreak development demo
See JBDevJBTest for detailsSet up a project
Set up a project identical to theos/application
[*]File - New - Target - iOS - App
[*]This is the main target
Set up a project identical to theos/tweak
[*]File - New - Target - macOS - Library
[*]Build Settings - set Base SDK to iOS,and set the deployment target to your iOS device
Set up a project identical to theos/tool
[*]File - New - Target - macOS - CommandLineTool
[*]Build Settings - set Base SDK to iOS,and set the deployment target to your iOS device
Prepare files
[*]Add entitlement plist files to the target sourcecode directory for each target
[*]Put jbdev.build.sh to the same directory level of .xcodeproj
[*]Putjbdev.plist to the same directory level of .xcodeproj, and set type to jailbreak
Configure Build Settings
[*]Set Installation Directory for all targets
[*]Add CODE_SIGNING_ALLOWED to project and set to NO
[*]Add THEOS to project according to the path of your theos
[*]Add JBDEV_PACKAGE to the main target and set to YES
Configure Build Phase
[*]Add Run Script to all target as the last phase,and set content to bash jbdev.build.sh
[*]Add all other targets to the main target as dependency
rootless/roothide configuration
JBDev support rootful/rootless/roothide well as follows
[*]layout_root directory,stores the diffs from rootful to rootless/roothide
[*]layout_rootless directory,stores the diffs from rootless to rootful/roothide
[*]layout_roothide directory,stores the diffs from roothide to rootful/rootless
Commonly used diffs
[*]layout*/DEBIAN/control,
[*]

[*]Architecture is iphoneos-arm for rootful
[*]

[*]Architecture is iphoneos-arm64 for rootless
[*]

[*]Architecture is iphoneos-arm64e for roothide
[*]layout*/DEBIAN/{preinst,postinst,extrainst_,prerm,postrm}
[*]layout*/Library/LaunchDaemons/*.plist
Switch between rootful/rootless/roothide
general
[*]For tweak target, set Runpath Search Paths Header Search Paths Framework Search Paths
[*]For tweak target, link libsubstrate.tbd for tweak target
rootful
[*]For all targets, remove THEOS_PACKAGE_SCHEME from Build Settings
rootless
[*]For all targets, set THEOS_PACKAGE_SCHEME in Build Settings to rootless
[*]Set THEOS_PACKAGE_SCHEME_ROOTLESS in Preprocessor Macros
roothide
[*]For all targets, set THEOS_PACKAGE_SCHEME in Build Settings to roothide
[*]Set Preprocessor Macros in THEOS_PACKAGE_SCHEME_ROOTHIDE
[*]For tweak target, link libroothide.tbd
TrollStore development demo
See JBDevTSTest for detailsSet up an iOS App project
[*]File - New - Target - iOS - App
Prepare files
[*]Add entitlement plist files to the target sourcecode directory for each target
[*]Put jbdev.build.sh to the same directory level of .xcodeproj
[*]Putjbdev.plist to the same directory level of .xcodeproj, and set type to trollstore
Configure Build Settings
[*]Add CODE_SIGNING_ALLOWED to project and set to NO
[*]Add JBDEV_PACKAGE to the target and set to YES
Configure Build Phase
[*]Add Run Script to the target as the last phase,and set content to bash jbdev.build.sh
Notice
[*]Due to the huge difference between Jailbreak and pure TrollStore environment, Further testing on pure TrollStore is required
Compile JBDev
cd JBDevmake clean; make packagemake clean; make package THEOS_PACKAGE_SCHEME=rootlessmake clean; make package THEOS_PACKAGE_SCHEME=roothide















页: [1]
查看完整版本: 越狱开发工具JBDev1.0发布 支持iOS12-16