1.sshiphone StartUSBTUNNL 2.cd /Library/MobileSubstrate/DynamicLibraries/ cd/var/mobile/ 3.(comm+t) 把本地文件拷貝到iOS scp -r -P 2222 /Users/apple/Library/Developer/Xcode/DerivedData/TechnicalInvest-bxigfjgukgfvemgnbaylrfjjzpvc/Build/Products/Debug-iphoneos/TechnicalInvest.temp_caseinsensitive_rename.app/TechnicalInvest.temp_caseinsensitive_rename(工程的執行文件) root@127.0.0.1:/Library/MobileSubstrate/DynamicLibraries/aa.dylib(手機路徑) 4.再到ssh cd /var/mobile/ respring 3.cat technicalLog.txt tail -f technicalLog.txt(完畢) sshiphone(手機經過數據線連着電腦)或者ssh root@192.168.1.120(手機沒用鏈接電腦,經過手機的IP地址) -------------------下面是把手機短信數據庫拷貝到本地電腦桌面 1.先cd到短信/var/mobile/Library/SMS 2.com+t 2.1scp -r -P 2222 root@127.0.0.1 (把文件從iOS拷貝到本地) scp -r -P 2222 root@127.0.0.1:/var/mobile/Library/SMS/sms.db ~/Desktop/ cp -rf /Users/apple/Desktop/mapkit /Users/apple/Desktop/110(文件夾的拷貝) cp /Users/apple/Desktop/Mac終端命令大全.pdf /Users/apple/Desktop/111(文件的拷貝) class-dump +工程的編譯文件.app ===>>查看工程的頭文件 class-dump +工程的編譯文件.app +">" ~/Desktop/aa.txt =====>>就是把工程的頭文件dump到本身電腦的桌面 例如:class-dump /Users/apple/Library/Developer/Xcode/DerivedData/TechnicalInvest-fqexbvhzhksfmzetbiscrhbphiky/Build/Products/Debug-iphoneos/TechnicalInvest.temp_caseinsensitive_rename.app/TechnicalInvest.temp_caseinsensitive_rename > ~/Desktop/aaaaaaaaaaa.txt respring從新加載界面 reboot重啓系統 Killall SpringBoard sudo chmod 777 /usr/bin 讓某些文件夾或文件具備讀寫權限 ping命令也屬於一個通訊協議利用ping命令能夠檢查網絡是否連接 ping 空格 IP地址 http://www.freebuf.com/articles/terminal/76317.html(極客與黑客連接) iOS 8.4環境,其應用程序數據文件夾在/var/mobile/Containers/Data/ find /var/mobile/Containers/Data -name "QQ.db" find /var/mobile/Containers/Data -name "MM.sqlite"