使用Keychain-Dumper查看keychain數據

前提條件：ios設備越獄，已安裝ssh工具

1.Mac終端命令連接到設備上 ssh [email protected]（你的設備ip）

mac-mini:~ ice$ ssh [email protected]
[email protected]'s password: 
Icede-4s:~ root#

2.賦予Keychain數據庫可讀權限

Icede-4s:~ root# cd /private/var/Keychains/
Icede-4s:/private/var/Keychains root# ls
TrustStore.sqlite3             keychain-2.db      ocspcache.sqlite3-shm
accountStatus.plist            keychain-2.db-shm  ocspcache.sqlite3-wal
caissuercache.sqlite3          keychain-2.db-wal
caissuercache.sqlite3-journal  ocspcache.sqlite3
Icede-4s:/private/var/Keychains root# chmod +r keychain-2.db

3.下載 Keychain-Dumper

4.上傳keychain_dumper可執行文件到ios設備 /bin 目錄下
（1）Ctrl+D 退出iOS設備 SSH連接
（2）上傳keychain_dumper可執行文件

mac-mini:~ ice$ scp /Users/ice/Downloads/Keychain-Dumper-master/keychain_dumper [email protected]:/bin/keychain_dumper
[email protected]'s password: 
keychain_dumper                               100%  207KB 206.6KB/s   00:00

5.查看keychain_dumper是否有可執行權限到iOS設備的/bin目錄下

Icede-4s:~ root# ls -l /bin/keychain_dumper
-rwxr-xr-x 1 root wheel 211584 Apr 13 11:43 /bin/keychain_dumper*

6.沒有則爲其添加執行權限

Icede-4s:~ root# chmod +x /bin/keychain_dumper

7.解密keychain信息

Icede-4s:~ root# /bin/keychain_dumper