Using Frida to trigger XPC Activities
A few months ago, I need to conduct dynamic analysis of a Daemon in a jailbroken iOS device, where the daemon is make up of some XPC Activities. Those XPC Activities could be found in the daemon’s configuration file (located at /System/Library/LaunchDaemons, with the .plist file extension) under the LaunchEvents field: # example daemon: audioanalyticsd $ plutil -p "/System/Library/LaunchDaemons/com.apple.audioanalyticsd.plist" # ... "Label" => "com.apple.audioanalyticsd" "LaunchEvents" => { # XPC activities "com....