Skip to content

WeChat 4.1.10 + macOS 26.5.1:内存扫描成功但 0 个候选密钥 #106

@yyaidata

Description

@yyaidata

环境 - macOS: 26.5.1 (25F80) - wx-cli: 0.3.0 (预编译 arm64) - WeChat: 4.1.10 (codesigned with get-task-allow) - SIP: disabled

现象 sudo wx init --force 完整流程正常: - task_for_pid 成功 (kr=0, Got task port) - 扫描到 17 个加密数据库 - 扫描进程内存后: "找到 0 个候选密钥" - 最终: "匹配到 0/0 个密钥"

补充 - macOS 26.5 原始版本 task_for_pid 直接 kr=5 - 升级到 26.5.1 后 task_for_pid 恢复正常 - 但密钥扫描仍为空,怀疑 WeChat 4.1.10 内存中密钥格式有变化

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions