feat: add support for whitelist

Author: NSEcho

main.go

@@ -8,6 +8,7 @@ import (
 	"os"
 	"os/signal"
 	"regexp"
+	"runtime/pprof"
 	"strings"
 	"syscall"
 )
@@ -19,6 +20,10 @@ var rootCmd = &cobra.Command{
 	Use:   "gxpc [spawn_args]",
 	Short: "XPC sniffer",
 	Run: func(cmd *cobra.Command, args []string) {
+		out, _ := os.Create("out.pprof")
+		pprof.StartCPUProfile(out)
+		defer pprof.StopCPUProfile()
+
 		logger := NewLogger()
 
 		list, err := cmd.Flags().GetBool("list")
@@ -196,11 +201,21 @@ var rootCmd = &cobra.Command{
 			return
 		}
 
+		whitelist, err := cmd.Flags().GetStringSlice("whitelist")
+		if err != nil {
+			logger.Errorf("%v", err)
+		}
+
 		script.On("message", func(message string) {
 			msg, _ := frida.ScriptMessageToMessage(message)
 			switch msg.Type {
 			case frida.MessageTypeSend:
-				PrintData(msg.Payload, false, false, blacklistToRegex(blacklist), logger)
+				PrintData(msg.Payload,
+					false,
+					false,
+					listToRegex(whitelist),
+					listToRegex(blacklist),
+					logger)
 			case frida.MessageTypeLog:
 				logger.Infof("SCRIPT: %v", msg)
 			default:
@@ -246,10 +261,10 @@ var rootCmd = &cobra.Command{
 	},
 }
 
-func blacklistToRegex(bl []string) []*regexp.Regexp {
-	rex := make([]*regexp.Regexp, len(bl))
-	for i, b := range bl {
-		replaced := strings.ReplaceAll(b, "*", ".*")
+func listToRegex(ls []string) []*regexp.Regexp {
+	rex := make([]*regexp.Regexp, len(ls))
+	for i, item := range ls {
+		replaced := strings.ReplaceAll(item, "*", ".*")
 		r := regexp.MustCompile(replaced)
 		rex[i] = r
 	}
@@ -263,6 +278,7 @@ func main() {
 	rootCmd.Flags().StringP("file", "f", "", "spawn the file")
 	rootCmd.Flags().StringP("output", "o", "", "save output to this file")
 
+	rootCmd.Flags().StringSliceP("whitelist", "w", []string{}, "whitelist the following wildcard connections")
 	rootCmd.Flags().StringSliceP("blacklist", "b", []string{}, "blacklist the following wildcard connections")
 
 	rootCmd.Flags().BoolP("list", "l", false, "list available devices")

object.go

@@ -8,7 +8,7 @@ import (
 	"strings"
 )
 
-func PrintData(value any, decode, printHex bool, blacklist []*regexp.Regexp, logger *Logger) {
+func PrintData(value any, decode, printHex bool, whitelist, blacklist []*regexp.Regexp, logger *Logger) {
 	val := reflect.ValueOf(value)
 
 	data := make(map[string]any)
@@ -20,30 +20,39 @@ func PrintData(value any, decode, printHex bool, blacklist []*regexp.Regexp, log
 		}
 	}
 	name := data["connName"].(string)
-	if !connectionNameInBlacklist(name, blacklist) {
-		var message string
-		fnName := fmt.Sprintf("Name: %s\n", data["name"])
-		connName := fmt.Sprintf("Connection Name: %s\n", data["connName"])
-		printData(reflect.ValueOf(data["dictionary"]), "", "", &message)
-		total := len(fnName) + len(connName) + len(message) + 100
 
-		builder := strings.Builder{}
-		builder.Grow(total)
+	if len(whitelist) > 0 {
+		if !connInList(name, whitelist) {
+			return
+		}
+	} else {
+		if connInList(name, blacklist) {
+			return
+		}
+	}
 
-		builder.WriteString(fnName)
-		builder.WriteString(connName)
-		builder.WriteString("Data:\n")
-		builder.WriteString(message)
-		builder.WriteString(fmt.Sprintf("\n%s\n", strings.Repeat("=", 80)))
+	var message string
+	fnName := fmt.Sprintf("Name: %s\n", data["name"])
+	connName := fmt.Sprintf("Connection Name: %s\n", data["connName"])
+	printData(reflect.ValueOf(data["dictionary"]), "", "", &message)
+	total := len(fnName) + len(connName) + len(message) + 100
 
-		logger.Scriptf("Name: %s", data["name"])
-		logger.Scriptf("Connection Name: %s", data["connName"])
-		logger.Scriptf("Data:")
-		logger.Scriptf("%s", message)
-		fmt.Println(strings.Repeat("=", 80))
+	builder := strings.Builder{}
+	builder.Grow(total)
 
-		logger.writeToFileScript(builder.String())
-	}
+	builder.WriteString(fnName)
+	builder.WriteString(connName)
+	builder.WriteString("Data:\n")
+	builder.WriteString(message)
+	builder.WriteString(fmt.Sprintf("\n%s\n", strings.Repeat("=", 80)))
+
+	logger.Scriptf("Name: %s", data["name"])
+	logger.Scriptf("Connection Name: %s", data["connName"])
+	logger.Scriptf("Data:")
+	logger.Scriptf("%s", message)
+	fmt.Println(strings.Repeat("=", 80))
+
+	logger.writeToFileScript(builder.String())
 }
 
 func printData(v reflect.Value, key, indent string, message *string) {
@@ -78,8 +87,8 @@ func printData(v reflect.Value, key, indent string, message *string) {
 	}
 }
 
-func connectionNameInBlacklist(connName string, blacklist []*regexp.Regexp) bool {
-	for _, b := range blacklist {
+func connInList(connName string, list []*regexp.Regexp) bool {
+	for _, b := range list {
 		if match := b.MatchString(connName); match {
 			return true
 		}