1.sshiphone StartUSBTUNNL 2.cd /Library/MobileSubstrate/DynamicLibraries/ cd/var/mobile/ 3.(comm+t) 把本地文件拷贝到iOS scp -r -P 2222 /Users/apple/Library/Developer/Xcode/DerivedData/TechnicalInvest-bxigfjgukgfvemgnbaylrfjjzpvc/Build/Products/Debug-iphoneos/TechnicalInvest.temp_caseinsensitive_rename.app/TechnicalInvest.temp_caseinsensitive_rename(工程的执行文件) root@127.0.0.1:/Library/MobileSubstrate/DynamicLibraries/aa.dylib(手机路径) 4.再到ssh cd /var/mobile/ respring 3.cat technicalLog.txt tail -f technicalLog.txt(完毕) sshiphone(手机经过数据线连着电脑)或者ssh root@192.168.1.120(手机没用链接电脑,经过手机的IP地址) -------------------下面是把手机短信数据库拷贝到本地电脑桌面 1.先cd到短信/var/mobile/Library/SMS 2.com+t 2.1scp -r -P 2222 root@127.0.0.1 (把文件从iOS拷贝到本地) scp -r -P 2222 root@127.0.0.1:/var/mobile/Library/SMS/sms.db ~/Desktop/ cp -rf /Users/apple/Desktop/mapkit /Users/apple/Desktop/110(文件夹的拷贝) cp /Users/apple/Desktop/Mac终端命令大全.pdf /Users/apple/Desktop/111(文件的拷贝) class-dump +工程的编译文件.app ===>>查看工程的头文件 class-dump +工程的编译文件.app +">" ~/Desktop/aa.txt =====>>就是把工程的头文件dump到本身电脑的桌面 例如:class-dump /Users/apple/Library/Developer/Xcode/DerivedData/TechnicalInvest-fqexbvhzhksfmzetbiscrhbphiky/Build/Products/Debug-iphoneos/TechnicalInvest.temp_caseinsensitive_rename.app/TechnicalInvest.temp_caseinsensitive_rename > ~/Desktop/aaaaaaaaaaa.txt respring从新加载界面 reboot重启系统 Killall SpringBoard sudo chmod 777 /usr/bin 让某些文件夹或文件具备读写权限 ping命令也属于一个通讯协议利用ping命令能够检查网络是否连接 ping 空格 IP地址 http://www.freebuf.com/articles/terminal/76317.html(极客与黑客连接) iOS 8.4环境,其应用程序数据文件夹在/var/mobile/Containers/Data/ find /var/mobile/Containers/Data -name "QQ.db" find /var/mobile/Containers/Data -name "MM.sqlite"