tannerjin / anti-fishhook

Anti-Fishhook (make fishhook doesn't work)

AntiFishhook

AntiFishhook is an AntiHook library for fishhook at runtime (make fishhook doesn't work) .
include fishhook and anti-fishhook

How it's work

Note

Run or test in your phone(arm64) instend of simulator
Swift Function name mangling

Usage

antiFishhook

import antiFishhook

FishHookChecker.denyFishHook("$s10Foundation5NSLogyySS_s7CVarArg_pdtF")  // Swift's Foudation.NSLog  
NSLog("Hello AntiFishHook")

FishHookChecker.denyFishHook("printf")                                  // printf
printf("Hello AntiFishHook")

fishhook

typealias MyNSLog = @convention(thin) (_ format: String, _ args: CVarArg...) -> Void

func myNSLog(_ format: String, _ args: CVarArg...) {
    print("Hello fishHook")
}

let selfNSLog: MyNSLog  = myNSLog
let selfNSLogPointer = unsafeBitCast(selfNSLog, to: UnsafeMutableRawPointer.self)
var origNSLogPointer: UnsafeMutableRawPointer?

FishHook.replaceSymbol("$s10Foundation5NSLogyySS_s7CVarArg_pdtF", newMethod: selfNSLogPointer, oldMethod: &origNSLogPointer)

NSLog("Hello World")
// will print Hello fishHook

Suggestion

Use by adding source file to your project instend of pod

anti-fishhook's Issues

iOS 15 中的已经没有 dyld_info，需要改为从 dyld_chained_fixup 中取信息

😁

where is "antiFishhook-swift.h" file??

antifishhok-swift file not found error.

可以指定某个framework做antifishhook吗

能否为某个Swift函数提供anti-fishhook功能？

请问是否有办法为swift代码中的某个函数提供anti-fishhook功能？

例如 HookMe 类中有静态方法和非静态方法：

class HookMe {
  public func log(_ msg: String) {
    print("HookMe log: " + msg)
  }
  
  public static func staticMethod() {
    print("Static method OK.")
  }
}

是否有有办法为这两个函数提供resetSymbol 功能？类似于：

resetSymbol(HookMe.log)
resetSymbol(HookMe.staticMethod)

按照现有的代码，好像是需要知道Swift命名重整（name mangling）后的函数名。但是在代码里无法提前知道命名重整后的函数名。

可否针对常用的几个反调试的C函数写一下Anti-fishhook

如题，反调试经常会用到如 ptrace，dlsym，sysctl，syscall，isatty ，但是黑客经常使用fishhook 来替换这几个方法，可否写一下这几个函数的anti-fishhook写法，谢谢了

这种动态修改内存的影响appstore上架不