安裝Clutch
$ git clone https://github.com/KJCracks/Clutch
$ cd Clutch
直接使用Xcode進行構建
$ xcodebuild -project Clutch.xcodeproj -configuration Release ARCHS="armv7 armv7s arm64" build
生成出來的可執行文件就在Clutch目錄下，將其拷貝到手機上:
scp Clutch/clutch root@<your.device.ip>:/usr/bin/
也可以直接只用Xcode編譯，將Xocde中Products文件夾下的執行文件拷貝出來
開始砸殼
先ssh到越獄手機上，然后列出當前安裝的應用
ssh root@<your.device.ip>
clutch -i
Installed apps:
1: Flashlight <com.bigblueclip.led>
2: 微信 <com.tencent.xin>
3: QQ同步助手 <com.tencent.QQPim>
根據列表中顯示的包名進行砸殼
$ clutch -d com.tencent.xin
# com.tencent.xin contains watchOS 2 compatible application. It's not possible to dump watchOS 2 apps with Clutch 2.0.4 at this moment.
# Zipping WeChat.app
# Swapping architectures..
# ASLR slide: 0xb3000
# ...
# writing new checksum
# DONE: /private/var/mobile/Documents/Dumped/com.tencent.xin-iOS7.0-(Clutch-2.0.4).ipa
# Finished dumping com.tencent.xin in 76.9 seconds
可以看到clutch砸殼后的ipa文件放到了/private/var/mobile/Documents/Dumped/目錄下。
修改成一個簡單的名字，然后拷貝回電腦：
$ mv /private/var/mobile/Documents/Dumped/com.tencent.xin-iOS7.0-\(Clutch-2.0.4\).ipa /private/var/mobile/Documents/Dumped/wechat.ipa
$ scp root@<your.device.ip>:/private/var/mobile/Documents/Dumped/wechat.ipa ~/Desktop
砸殼完畢...
