i found a poision website, and it's most perfectly right as your analysis , but the final dylib has its own decryption . It's combine with Kernel exploit, in the dylib . But it's hard to attach the tweak, and dymatic load this is not work, it has two main function startx and startp , and it needs pass right args to work .
i found a poision website, and it's most perfectly right as your analysis , but the final dylib has its own decryption . It's combine with Kernel exploit, in the dylib . But it's hard to attach the tweak, and dymatic load this is not work, it has two main function startx and startp , and it needs pass right args to work .