[version] macOS WMPF 7.25800 支持请求(7.25755 偏移已失效:CDPFilter 拦截失败)
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 35/100
- Issue type
- Feature
- Clarity
- Mostly clear
- Activity status
- Active
- Tech stack
- javascript, macos
- Domain
- devtools, reverse-engineering
Research direction
Start with the Darwin version configuration and the patchCDPFilter hook mentioned in the issue, then compare their offsets against the WeChatAppEx 7.25800 binary. The reporter can provide symbols or a memory dump if needed. Done means 7.258 loads with valid hook offsets and patchCDPFilter intercepts successfully on that version.
Written by the indexing model from the issue text.
Description
环境
- macOS 26.5.1 (arm64 / Apple Silicon)
- WeChat 4.1.15(官网当前 DMG 自带 7.25800,重装无法回退 7.25755)
- WeChatAppEx: CFBundleVersion
7.25800,CFBundleShortVersionString2.5.7.25800 - SIP 开启;WeChatAppEx 已按 FAQ 做 Ad-Hoc 重签名,frida attach 正常
- 代码基线:PR #291 (7413d963)
现象
- 直接启动报
[frida] version config not found: 7.258(darwin 侧取Number(CFBundleVersion)= 7.258,无对应配置)。 - 将
frida/config/darwin/addresses.7.25755.json复制为addresses.7.258.json(仅改 Version 字段)做尝试:- Frida 脚本加载成功:
script loaded, WMPF version: 7.258,OnLoadStart hook 正常; patchCDPFilter失败:
- Frida 脚本加载成功:
[frida client] {
type: 'error',
description: 'Error: unable to intercept function at 0x12c92108c; please file a bug',
stack: 'Error: unable to intercept function at 0x12c92108c; please file a bug\n at value (/frida/runtime/core.js:374)\n at patchCDPFilter (/script1.js:68)\n at main (/script1.js:254)\n at <eval> (/script1.js:257)',
fileName: '/frida/runtime/core.js',
lineNumber: 374,
columnNumber: 1
}
0x12c92108c= WeChatAppEx Framework 基址 +CDPFilterHookOffset 0x934908c,即 7.25755 的 CDPFilter 偏移在 7.25800 中已不是可拦截的函数地址。
请求
麻烦适配 darwin 7.258(WMPF 7.25800),CDPFilterHookOffset(及可能的其他偏移)需要基于 7.25800 二进制重新逆向。如需要更多诊断信息(符号、内存 dump 等)我可以配合提供。
- Dominant language
- JavaScript
- Stars
- 2.9k
- Forks
- 640
- Avg merge
- 7d 20h
- Merged PRs (30d)
- 3
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from evi0s/WMPFDebugger
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
evi0s/WMPFDebugger#303 · 1 reaction ·
-
[BUG]Openbug
Difficulty 2/5 1-3 hours Newbie friendliness 35/100
evi0s/WMPFDebugger#302 ·
-
求一个25819的偏移Possibly taken @potacotion claimed this today. Open
Difficulty 5/5 Over a week Newbie friendliness 15/100
evi0s/WMPFDebugger#301 · 1 comment ·
-
[FEATURE REQ]Openenhancement
Difficulty 5/5 Over a week Newbie friendliness 25/100
evi0s/WMPFDebugger#300 · 1 comment ·
-
[FEATURE REQ]持久化Openenhancement
Difficulty 5/5 Over a week Newbie friendliness 25/100
evi0s/WMPFDebugger#299 · 1 comment ·
All issues in evi0s/WMPFDebugger
Similar issues
-
bug 優先: 低
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
Maintainers usually reply within 1 day
-
admission-deferred priority: medium status: ready work-class: scoped
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
melodic-software/claude-code-plugins#10887 · 4 comments ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 66/100
-
Difficulty 1/5 1-3 hours Newbie friendliness 91/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
Maintainers usually reply within 2 days