weixin-macos

使用frida进行逆向
frida -f /Applications/WeChat.app/Contents/MacOS/WeChat -l script.js

报错：Failed to attach: unable to access process with pid 43649 from the current user account

重启进入recovery模式，然后关闭安全模式

frida-trace -p 进程号 -i "Message" --decorate 比较好用
frida-trace -p 17894 -i "Message" -i "Send" -x 'objc_msgSend_noarg' -x 'objc_msgSend_debug' -x 'objc_msgSend' -x "_HIDisableSuddenTerminationForSendEvent" -x "_HIEnableSuddenTerminationForSendEvent" -x "SendEventToEventTarget" -x "s10RTCUtility10XPCMessageV4dictAA16RTCXPCDictionaryVvg" -x "MTLMessageContextEnd" -x "ictAA16RTCXPCDictionaryVvg" -x "MTLMessageContextBegin" -x "CFMachMessageCheckForAndDestroyUnsentMessag" -x "SLEventCopyAuthenticationMessage" -x "SendTextInputEvent_WithCompletionHandler" --decorate
会有一个http页面，进去之后，会有一些微信的代码，这些代码中能分析出微信是怎么发送消息的