Microsoft Word - iOSAppReverseEngineering.docx

Binary file /Applications/Activator.app/en.lproj/Localizable.strings matches

grep: /Applications/Activator.app/[email protected]: No such file or

directory

grep: /Applications/Activator.app/[email protected]: No such file or

directory

Binary file /Applications/AdSheet.app/AdSheet matches

Binary file /Applications/Compass.app/Compass matches

......

Despite so many outputs, files shown below with suffix "strings" were very attractive to me:

Binary file /Applications/Preferences.app/English.lproj/General-Simulator.strings

matches

Binary file /Applications/Preferences.app/English.lproj/General~iphone.strings matches

Binary file /Applications/Preferences.app/General-Simulator.plist matches

Binary file /Applications/Preferences.app/General.plist matches

Binary file /Applications/Preferences.app/Preferences matches

Binary file /Applications/Preferences.app/en_GB.lproj/General-Simulator.strings matches

Binary file /Applications/Preferences.app/en_GB.lproj/General~iphone.strings matches

If nothing went wrong, they were localization files for Apps, which should contain the code

name of “Accessibility”. It was very convenient for us to inspect localization files with plutil. So

let’s take a look at "/Applications/Preferences.app/English.lproj/General~iphone.strings" first.

snakeninnys-MacBook:~ snakeninny$ plutil -p ~/General\~iphone.strings

{

"Videos..." => "• Videos..."

"Wallpaper" => "Wallpaper"

"TV_OUT" => "TV Out"

"SOUND_EFFECTS" => "Sound Effects"

"d_MINUTES" => "%@ Minutes"

......

"ACCESSIBILITY" => "Accessibility"

"Multitasking_Gestures" => "Multitasking Gestures"

......

}

From “ACCESSIBILITY” => “Accessibility” we could confirm that “ACCESSIBILITY” was

the code name.

-^ Discover General.plist

With new clues, I re-greped the filesystem with keyword “ACCESSIBILITY”:

FunMaker-4s:~ root# grep -r ACCESSIBILITY /

grep: /Applications/Activator.app/Default-568h@2x~iphone.png: No such file or directory

grep: /Applications/Activator.app/Default.png: No such file or directory

grep: /Applications/Activator.app/Default~iphone.png: No such file or directory

grep: /Applications/Activator.app/LaunchImage- 700 - [email protected]: No such file or directory

grep: /Applications/Activator.app/[email protected]: No such file or

directory

grep: /Applications/Activator.app/[email protected]: No such file or

directory

Binary file /Applications/Preferences.app/Dutch.lproj/General-Simulator.strings matches

Binary file /Applications/Preferences.app/Dutch.lproj/General~iphone.strings matches

Binary file /Applications/Preferences.app/English.lproj/General-Simulator.strings

matches

Binary file /Applications/Preferences.app/English.lproj/General~iphone.strings matches