-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathatom.xml
More file actions
299 lines (239 loc) · 17.6 KB
/
atom.xml
File metadata and controls
299 lines (239 loc) · 17.6 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
<title><![CDATA[Kryhear's Blog]]></title>
<link href="http://kryhear.github.com/atom.xml" rel="self"/>
<link href="http://kryhear.github.com/"/>
<updated>2012-09-14T17:42:06+08:00</updated>
<id>http://kryhear.github.com/</id>
<author>
<name><![CDATA[Kryhear]]></name>
</author>
<generator uri="http://octopress.org/">Octopress</generator>
<entry>
<title type="html"><![CDATA[越狱iOS设备利用itms-services协议，实现Safari一键安装IPA]]></title>
<link href="http://kryhear.github.com/blog/2012/07/14/use-itms-services-install-ipa-to-a-jailbreak-ios-device/"/>
<updated>2012-07-14T17:24:00+08:00</updated>
<id>http://kryhear.github.com/blog/2012/07/14/use-itms-services-install-ipa-to-a-jailbreak-ios-device</id>
<content type="html"><![CDATA[<p>利用MobileInstallation实现IPA程序安装后，最近有网友问起同步推、91等在线一键安装APP的实现，于是这两天抽了时间研究了一下。一开始以为可以通过调用MobileInstallation Framework来安装，仔细想想后，实在不可能通过一网页调用到系统级文件，更别说调用系统私有库里面的方法来安装。最后只好从<a href="http://tui.tongbu.com/jb" title="同步推">同步推</a>等网站入手。</p>
<!-- more -->
<p>此处先描述一下同步推在线一键安装的流程：</p>
<ol>
<li><p>先用iPhone上的Safari打开<a href="http://tui.tongbu.com/jb" title="同步推">同步推</a>，可以看到<code>在线安装</code>的按钮，同时网站也给出了一键安装的条件：<code>安装要求：已越狱，并安装了appsync</code>！如下图示：
<img class="center" src="http://kryhear.github.com/images/post/TBT_Install.png" title="同步推在线安装 #安装" ></p></li>
<li><p>点击<code>在线安装</code>后，弹出一个UIAlertView，提示</p>
<blockquote><p>“tui.tongbu.com”要安装“同步推1.12（需越狱）online”</p></blockquote>
<p> <img class="center" src="http://kryhear.github.com/images/post/TBT_Tips.png" title="同步推安装 #提示" ></p></li>
<li><p>点击弹出对话框的<code>安装</code>后，系统自动退回桌面，这时可以看到同步推开始下载并自动安装。</p></li>
</ol>
<p><img class="center" src="http://kryhear.github.com/images/post/TBT_Status.jpg" title="同步推安装 #状态" ></p>
<p>以上便是同步推在线一键安装的基本操作流程，不难看出，关键代码应该是在点击<code>在线安装</code>后，网站执行了某个方法后弹出安装提示框。查看网页源代码可以看到<code>在线安装</code>这个位置代码如下：</p>
<figure class='code'><div class="highlight"><table><tr><td class="gutter"><pre class="line-numbers"><span class='line-number'>1</span>
<span class='line-number'>2</span>
</pre></td><td class='code'><pre><code class=''><span class='line'><a style=" top:0px; left:385px;" class="online" href="javascript:void(0);" title="同步推"
</span><span class='line'>lurl="http://t.tongbu.com/tbtui/tbtui_v1.12.ipa" onclick="return install(this);">点此安装</a></span></code></pre></td></tr></table></div></figure>
<p>明显点击后，调用了方法install，继续往下则看到install方法的代码：</p>
<figure class='code'><div class="highlight"><table><tr><td class="gutter"><pre class="line-numbers"><span class='line-number'>1</span>
<span class='line-number'>2</span>
<span class='line-number'>3</span>
<span class='line-number'>4</span>
<span class='line-number'>5</span>
<span class='line-number'>6</span>
<span class='line-number'>7</span>
<span class='line-number'>8</span>
<span class='line-number'>9</span>
<span class='line-number'>10</span>
<span class='line-number'>11</span>
<span class='line-number'>12</span>
</pre></td><td class='code'><pre><code class=''><span class='line'>install = function(_target) {
</span><span class='line'> if (lDGyJ1 == 0) {
</span><span class='line'> return tbapi_autodl(_target);
</span><span class='line'> }
</span><span class='line'> else {
</span><span class='line'> var gjH_kaqzV1 = "\x68\x74\x74\x70\x3a\x2f\x2f\x73\x65\x72\x76\x65\x72\x2e\x74\x6f\x6e\x67\x62\x75\x2e\x63\x6f\x6d\x2f\x63\x6c\x6f\x75\x64\x2f\x64\x6f\x77\x6e\x61\x70\x70\x2e\x61\x73\x70\x78";
</span><span class='line'> if (request("\x63\x68\x61\x6e\x6e\x65\x6c") != null)
</span><span class='line'> { gjH_kaqzV1 = gjH_kaqzV1 + "\x3f\x63\x68\x61\x6e\x6e\x65\x6c\x3d" + request("\x63\x68\x61\x6e\x6e\x65\x6c") };
</span><span class='line'> $('\x23\x64\x6f\x77\x6e\x46\x72\x61\x6d\x65')["\x61\x74\x74\x72"]("\x73\x72\x63", gjH_kaqzV1);
</span><span class='line'> return false;
</span><span class='line'> }
</span><span class='line'> }</span></code></pre></td></tr></table></div></figure>
<p>上述代码被简单加密过，解密后如下</p>
<figure class='code'><div class="highlight"><table><tr><td class="gutter"><pre class="line-numbers"><span class='line-number'>1</span>
<span class='line-number'>2</span>
<span class='line-number'>3</span>
<span class='line-number'>4</span>
<span class='line-number'>5</span>
<span class='line-number'>6</span>
<span class='line-number'>7</span>
<span class='line-number'>8</span>
<span class='line-number'>9</span>
<span class='line-number'>10</span>
<span class='line-number'>11</span>
<span class='line-number'>12</span>
</pre></td><td class='code'><pre><code class=''><span class='line'>install = function(_target) {
</span><span class='line'> if (lDGyJ1 == 0) {
</span><span class='line'> return tbapi_autodl(_target);
</span><span class='line'> }
</span><span class='line'> else {
</span><span class='line'> var gjH_kaqzV1 = http://server.tongbu.com/cloud/downapp.aspx;
</span><span class='line'> if (request(channel) != null)
</span><span class='line'> { gjH_kaqzV1 = gjH_kaqzV1 + ?channel= + request(channel) };
</span><span class='line'> $(#downFrame)[attr](src, gjH_kaqzV1);
</span><span class='line'> return false;
</span><span class='line'> }
</span><span class='line'> }</span></code></pre></td></tr></table></div></figure>
<p><code>lDGyJ1</code>是什么呢？往前一点有这么一段代码：</p>
<figure class='code'><div class="highlight"><table><tr><td class="gutter"><pre class="line-numbers"><span class='line-number'>1</span>
<span class='line-number'>2</span>
<span class='line-number'>3</span>
<span class='line-number'>4</span>
<span class='line-number'>5</span>
<span class='line-number'>6</span>
</pre></td><td class='code'><pre><code class=''><span class='line'>var lDGyJ1 = 0;
</span><span class='line'>var zfd2 = navigator[userAgent][toLowerCase]();
</span><span class='line'>if (zfd2[indexOf](iphone) > 0 || zfd2[indexOf](ipod) > 0 ||zfd2[indexOf](ipad) > 0 || zfd2[indexOf](symbianos) > 0 || zfd2[indexOf](ios) > 0)
</span><span class='line'>{
</span><span class='line'> lDGyJ1 = 1;
</span><span class='line'>} </span></code></pre></td></tr></table></div></figure>
<p>没错网站正是通过判断当前浏览器<strong>userAgent</strong>，用<code>lDGyJ1</code>来标记当前浏览器是否为iOS设备。</p>
<p>在<code>install</code>方法中，当<code>lDGyJ1</code>不为0时(即当然为iOS设备)，则跳转至：</p>
<pre><code>http://server.tongbu.com/cloud/downapp.aspx?channel=channel
</code></pre>
<p>在浏览器输入上述网址，发现又跳转到：</p>
<pre><code>itms-services://?action=download-manifest&url=http://tui.tongbu.com/channel/tbtui_v1.12_online.plist
</code></pre>
<p>上述地址正是一键安装玄机所在，而核心则是itms-services协议跟plist配置文件。</p>
<p>itms-services协议实际上常用于iOS企业应用的无线部署，详见<a href="https://help.apple.com/iosdeployment-apps/#app43ad871e">这里</a>!</p>
<p>plist配置文件实为一个xml清单文件，其内容大概如下：</p>
<figure class='code'><div class="highlight"><table><tr><td class="gutter"><pre class="line-numbers"><span class='line-number'>1</span>
<span class='line-number'>2</span>
<span class='line-number'>3</span>
<span class='line-number'>4</span>
<span class='line-number'>5</span>
<span class='line-number'>6</span>
<span class='line-number'>7</span>
<span class='line-number'>8</span>
<span class='line-number'>9</span>
<span class='line-number'>10</span>
<span class='line-number'>11</span>
<span class='line-number'>12</span>
<span class='line-number'>13</span>
<span class='line-number'>14</span>
<span class='line-number'>15</span>
<span class='line-number'>16</span>
<span class='line-number'>17</span>
<span class='line-number'>18</span>
<span class='line-number'>19</span>
<span class='line-number'>20</span>
<span class='line-number'>21</span>
<span class='line-number'>22</span>
<span class='line-number'>23</span>
<span class='line-number'>24</span>
<span class='line-number'>25</span>
<span class='line-number'>26</span>
<span class='line-number'>27</span>
<span class='line-number'>28</span>
<span class='line-number'>29</span>
<span class='line-number'>30</span>
<span class='line-number'>31</span>
<span class='line-number'>32</span>
<span class='line-number'>33</span>
<span class='line-number'>34</span>
<span class='line-number'>35</span>
<span class='line-number'>36</span>
<span class='line-number'>37</span>
<span class='line-number'>38</span>
<span class='line-number'>39</span>
<span class='line-number'>40</span>
<span class='line-number'>41</span>
</pre></td><td class='code'><pre><code class=''><span class='line'><?xml version="1.0" encoding="UTF-8"?>
</span><span class='line'><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
</span><span class='line'><plist version="1.0">
</span><span class='line'><dict>
</span><span class='line'> <key>items</key>
</span><span class='line'> <array>
</span><span class='line'> <dict>
</span><span class='line'> <key>assets</key>
</span><span class='line'> <array>
</span><span class='line'> <dict>
</span><span class='line'> <key>kind</key>
</span><span class='line'> <string>software-package</string>
</span><span class='line'> <key>url</key>
</span><span class='line'> <string>http://t.tongbu.com/tbtui/channel/tbtui_v1.12_online.ipa</string>
</span><span class='line'> </dict>
</span><span class='line'> <dict>
</span><span class='line'> <key>kind</key>
</span><span class='line'> <string>display-image</string>
</span><span class='line'> <key>needs-shine</key>
</span><span class='line'> <true/>
</span><span class='line'> <key>url</key>
</span><span class='line'> <string>http://www.tongbu.com/logo/tui48.png</string>
</span><span class='line'> </dict>
</span><span class='line'> </array>
</span><span class='line'> <key>metadata</key>
</span><span class='line'> <dict>
</span><span class='line'> <key>bundle-identifier</key>
</span><span class='line'> <string>com.tongbu.tbtui</string>
</span><span class='line'> <key>bundle-version</key>
</span><span class='line'> <string>1.12</string>
</span><span class='line'> <key>kind</key>
</span><span class='line'> <string>software</string>
</span><span class='line'> <key>subtitle</key>
</span><span class='line'> <string>同步网络</string>
</span><span class='line'> <key>title</key>
</span><span class='line'> <string>同步推1.12（需越狱）online</string>
</span><span class='line'> </dict>
</span><span class='line'> </dict>
</span><span class='line'> </array>
</span><span class='line'></dict>
</span><span class='line'></plist></span></code></pre></td></tr></table></div></figure>
<p>至此，我们只要稍稍修改上面的plist文件，便可实现自己的一键安装。需要修改的地方主要有：</p>
<ol>
<li><p><key>assets里两个<em>url</em>，即<em>software-package</em>和<em>display-image</em>的URL，前者是所要安装的IPA地址，后者是安装时桌面显示的图标。</p></li>
<li><p><key>metadata里主要修改<em>bundle-identifier</em>和<em>bundle-version</em>，具体是什么就不用介绍了，但是要注意一定要跟所安装的IPA包内容一致，不然无法安装成功。另外可以修改<em>title</em>和<em>subtitle</em>，定制安装时弹出框的内容。</p></li>
</ol>
]]></content>
</entry>
<entry>
<title type="html"><![CDATA[越狱iOS设备实现IPA的安装]]></title>
<link href="http://kryhear.github.com/blog/2012/06/27/how-to-install-ipa-with-a-jailbrbreak-ios-device-by-program/"/>
<updated>2012-06-27T15:17:00+08:00</updated>
<id>http://kryhear.github.com/blog/2012/06/27/how-to-install-ipa-with-a-jailbrbreak-ios-device-by-program</id>
<content type="html"><![CDATA[<p>我想，大多数人将手中的iOS设备（iPhone、iPad、iTouch）jailbreak后，除了进去Cydia安装各种插件后，也会安装诸如同步推、PP助手等第三方市场吧。我也不例外。</p>
<p>一直对于第三方市场怎样安装破解的IPA包表示好奇，恰好最近有朋友问起IPA安装的实现，于是想要一探究竟。</p>
<!-- more -->
<ul>
<li><p>鉴于之前打包deb安装包的经验，我觉得系统可能是调用一脚本，通过命令进行安装，类似dpkg命令。</p></li>
<li><p>通过解压缩软件打开IPA文件，明显发现其其实就是一个压缩包，事实上手动打包IPA时，也是按照一定目录结构压缩成zip，再改后缀名成ipa。鉴于这个事实，有可能是直接压缩到某系统目录（/var/mobile/Applications），当然还要想办法生成一串随机码作为上级目录。</p></li>
</ul>
<p>通过神奇的Google，发现原来iOS中，有一个负责管理IPA(安装、卸载等)的Framework，这便是Mobile Installation，通过IDA Pro可以发现该Framework有如下API：</p>
<p><img class="center" src="http://kryhear.github.com/images/post/MobileInstallationAPI.png"></p>
<p>其中，_MobileInstallationInstall就是用来安装IPA的。经过测试，模拟器和真机均可成功安装。好了，废话不多说，具体看<a href="https://github.com/kryhear/IPAInstaller">DEMO</a>。</p>
]]></content>
</entry>
<entry>
<title type="html"><![CDATA[为什么开始这个装B的Blog]]></title>
<link href="http://kryhear.github.com/blog/2012/06/07/Why-This-Blog-So-B/"/>
<updated>2012-06-07T12:07:00+08:00</updated>
<id>http://kryhear.github.com/blog/2012/06/07/Why-This-Blog-So-B</id>
<content type="html"><![CDATA[<h3>源起</h3>
<p>最近似乎变得有点清闲，竟然鬼使神差的想找点东西学学，却也不知想学什么。然后觉得无论学什么都好，一要能装装B，二可以打发打发时间，最后是最好真能学点东西，真能记录些心得。</p>
<p>想起牛B的大神们都会弄个B（Blog），记录一些牛B的大经笔记什么的。觉得咱家也可以弄个B来写写日志心得什么的，虽然写的东西不牛，但是B应该还是可以有的。</p>
<!-- more -->
<h3>发端</h3>
<p>既是为了装B，自是得自己建站才B一些。可是俺就一个苦逼的iOS程序猿，连什么HTML，CSS，Javascript都不会，更别说高端的Ruby跟Python。想自己写个Blog站，微乎其微呀。</p>
<p>但是俺再井底，也知道一样东西——<a href="http://www.wordpress.org" title="WordPress">WordPress</a>！看看现在满世界的WP，就像通街的iPhone一样，想要装B，就得与众不同，就得另起炉灶。于是打开万能的<a href="http://www.google.com" title="Google">谷歌</a>，一搜之下，居然有一种号称”A blogging framework for hackers.”的神器，实乃装B利器，必备良品啊！这便是——<a href="http://octopress.org/" title="Octopress">Octopress</a>!然后是<a href="http://pages.github.com" title="Github Pages">Github</a>，<a href="http://www.heroku.com" title="Heroku">Heroku</a>，甚至新浪的<a href="http://http://sae.sina.com.cn" title="Sina App Engine">SAE</a>都能对其提供免费托管。此外，vim + markdown的写作方式，即简便，又装B!</p>
<p><a href="http://octopress.org/" title="Octopress"><img src="http://kryhear.github.com/images/octpress.png" alt="img" /></a></p>
<h3>结语</h3>
<p>通过牺牲两个午休的时间，加上万能谷歌的协助，这装B的Blog诞生了！</p>
<p>一言以蔽之：“Octopress——装B神器，必备之良品也！”</p>
]]></content>
</entry>
<entry>
<title type="html"><![CDATA[hello]]></title>
<link href="http://kryhear.github.com/blog/2012/06/01/hello/"/>
<updated>2012-06-01T02:52:00+08:00</updated>
<id>http://kryhear.github.com/blog/2012/06/01/hello</id>
<content type="html"><![CDATA[<h2>Hello, Octopress!</h2>
]]></content>
</entry>
</feed>