[IOS Reverse] CrackerXI+ shell smashing

[IOS Reverse] CrackerXI+ shell smashing

I talked about three ways to smash shells before, and here I introduce the fourth one.

cydia add source

Add the source address http://cydia.iphonecake.com in cydia

Search CrackerXI+ installation

CrackerXI+ settings CrackerXI+ Hook enable

Restart CrackerXI+

Select the app in the applist to shell it

This path generates a shelled app

/var/mobile/Documents/CrackerXI 

Just extract the file and unzip it

If you encounter encoding problems,
you can rename it first and

then exit it through scp.

 ✘  ~  scp root@192.168.0.103:/var/mobile/Documents/CrackerXI/1.ipa ./
root@192.168.0.103's password:
1.ipa                                         100%   62MB  15.8MB/s   00:03
 ~  unzip 1.ipa