1.Mac终端命令连接到设备上 ssh root@192.168.1.100(你的设备ip)
mac-mini:~ ice$ ssh root@192.168.50.125 root@192.168.50.125's password: Icede-4s:~ root# 2.赋予Keychain数据库可读权限
Icede-4s:~ root# cd /private/var/Keychains/ Icede-4s:/private/var/Keychains root# ls TrustStore.sqlite3 keychain-2.db ocspcache.sqlite3-shm accountStatus.plist keychain-2.db-shm ocspcache.sqlite3-wal caissuercache.sqlite3 keychain-2.db-wal caissuercache.sqlite3-journal ocspcache.sqlite3 Icede-4s:/private/var/Keychains root# chmod +r keychain-2.db
3.下载 Keychain-Dumper
4.上传keychain_dumper可执行文件到ios设备 /bin 目录下 (1)Ctrl+D 退出iOS设备 SSH连接 (2)上传keychain_dumper可执行文件
mac-mini:~ ice$ scp /Users/ice/Downloads/Keychain-Dumper-master/keychain_dumper root@192.168.50.125:/bin/keychain_dumper root@192.168.50.125's password: keychain_dumper 100% 207KB 206.6KB/s 00:005.查看keychain_dumper是否有可执行权限到iOS设备的/bin目录下
Icede-4s:~ root# ls -l /bin/keychain_dumper -rwxr-xr-x 1 root wheel 211584 Apr 13 11:43 /bin/keychain_dumper* 6.没有则为其添加执行权限 Icede-4s:~ root# chmod +x /bin/keychain_dumper 7.解密keychain信息 Icede-4s:~ root# /bin/keychain_dumper