Issue on Sierra

[hdzidic]

Hi!

Getting this error when running the dump.sh command:

+ DYLD_INSERT_LIBRARIES=dump.dylib
+ /Applications/Spotify.app/Contents/MacOS/Spotify
dyld: could not load inserted library 'dump.dylib' because image not found

./dump.sh: line 3:  1242 Abort trap: 6           DYLD_INSERT_LIBRARIES=dump.dylib "$@"

Any ideas?

[larryqiann]

Looks like you have to build the dylib first, but it's giving me an error. I'm on High Sierra btw.

Larrys-MacBook-Pro:dump chendragon$ gcc -shared dump.c -o dump.dylib Undefined symbols for architecture x86_64: "_pcap_write_header", referenced from: _patch_shn in dump-c1760b.o "_pcap_write_packet_header", referenced from: _my_shn_encrypt in dump-c1760b.o _my_shn_decrypt in dump-c1760b.o "_shn_decrypt", referenced from: _my_shn_decrypt in dump-c1760b.o "_shn_encrypt", referenced from: _my_shn_encrypt in dump-c1760b.o ld: symbol(s) not found for architecture x86_64 clang: error: linker command failed with exit code 1 (use -v to see invocation)

[goodwordalchemy]

+1 for both of the comments above.

[Crypt-iQ]

@goodwordalchemy did you get this working?

This is what I get
gcc -shared dump.c -o dump.dylib Undefined symbols for architecture x86_64: "_pcap_write_header", referenced from: _patch_shn in dump-5720e5.o "_pcap_write_packet_header", referenced from: _my_shn_encrypt in dump-5720e5.o _my_shn_decrypt in dump-5720e5.o "_shn_decrypt", referenced from: _my_shn_decrypt in dump-5720e5.o "_shn_encrypt", referenced from: _my_shn_encrypt in dump-5720e5.o ld: symbol(s) not found for architecture x86_64 clang: error: linker command failed with exit code 1 (use -v to see invocation)

[goodwordalchemy]

@Crypt-iQ I didn't get it working. I did find this though: https://github.com/mologie/macos-disable-library-validation. I didn't use it, because I don't want to screw up my computer, but at least it gives a hint as to why this tool doesn't work for me on a mac.

[jannschu]

I removed the code signature from the Spotify binary using codesign --remove-signature /Applications/Spotify.app/Contents/MacOS/Spotify. You should backup the binary in beforehand. I also signed dump.dylib, but I am not sure if this is necessary.

[louis-genestier]

if someone want to use this tool you need to run this to compile the lib
gcc -Wall -Wextra -Wmissing-declarations -ldl -dynamiclib -o dump.dylib dump.c shn.c pcap.c