import UIKit import SystemConfiguration class SecurityMonitorViewController: UIViewController { // MARK: - 安全状态监控 private var securityTimer: Timer? private let checkInterval: TimeInterval = 5.0 // 检测间隔(秒) override func viewDidLoad() { super.viewDidLoad() setupUI() startSecurityMonitoring() } // MARK: - 界面组件 private let statusLabel: UILabel = { let label = UILabel() label.textAlignment = .center label.numberOfLines = 0 label.translatesAutoresizingMaskIntoConstraints = false return label }() private let logTextView: UITextView = { let textView = UITextView() textView.isEditable = false textView.backgroundColor = .systemGray6 textView.translatesAutoresizingMaskIntoConstraints = false return textView }() // MARK: - UI设置 private func setupUI() { view.backgroundColor = .white view.addSubview(statusLabel) view.addSubview(logTextView) NSLayoutConstraint.activate([ statusLabel.topAnchor.constraint(equalTo: view.safeAreaLayoutGuide.topAnchor, constant: 20), statusLabel.leadingAnchor.constraint(equalTo: view.leadingAnchor, constant: 20), statusLabel.trailingAnchor.constraint(equalTo: view.trailingAnchor, constant: -20), logTextView.topAnchor.constraint(equalTo: statusLabel.bottomAnchor, constant: 20), logTextView.leadingAnchor.constraint(equalTo: view.leadingAnchor, constant: 20), logTextView.trailingAnchor.constraint(equalTo: view.trailingAnchor, constant: -20), logTextView.bottomAnchor.constraint(equalTo: view.safeAreaLayoutGuide.bottomAnchor, constant: -20) ]) } // MARK: - 安全监控 private func startSecurityMonitoring() { securityTimer = Timer.scheduledTimer(withTimeInterval: checkInterval, repeats: true) { [weak self] _ in self?.performSecurityChecks() } securityTimer?.fire() // 立即执行首次检测 } private func stopSecurityMonitoring() { securityTimer?.invalidate() securityTimer = nil } // MARK: - 安全检测方法 private func performSecurityChecks() { var securityStatus = "✅ 设备安全状态正常" var logMessages = [String]() // 1. 越狱检测 if isDeviceJailbroken() { securityStatus = "⚠️ 设备可能已越狱!" logMessages.append("检测到越狱迹象 - \(Date())") } // 2. 可疑文件检测 if checkForSuspiciousFiles() { securityStatus = "⚠️ 检测到可疑文件!" logMessages.append("检测到可疑系统文件 - \(Date())") } // 3. 调试器检测 if isDebuggerAttached() { securityStatus = "⚠️ 检测到调试器连接!" logMessages.append("检测到调试器连接 - \(Date())") } // 4. 端口检测 (简化的端口检查) if checkOpenPorts() { securityStatus = "⚠️ 检测到异常开放端口!" logMessages.append("检测到异常开放端口 - \(Date())") } // 更新UI DispatchQueue.main.async { self.statusLabel.text = securityStatus self.statusLabel.textColor = securityStatus.contains("⚠️") ? .red : .systemGreen // 添加日志 logMessages.forEach { message in self.logTextView.text += "\(message)\n" } // 自动滚动到底部 let range = NSRange(location: self.logTextView.text.count - 1, length: 1) self.logTextView.scrollRangeToVisible(range) } } // MARK: - 安全检测方法实现 /// 检测设备是否越狱 private func isDeviceJailbroken() -> Bool { // 检查常见越狱文件路径 let jailbreakPaths = [ "/Applications/Cydia.app", "/Library/MobileSubstrate/MobileSubstrate.dylib", "/bin/bash", "/usr/sbin/sshd", "/etc/apt", "/private/var/lib/apt" ] for path in jailbreakPaths { if FileManager.default.fileExists(atPath: path) { return true } } // 尝试写入系统目录 let stringToWrite = "Jailbreak Test" do { try stringToWrite.write(toFile: "/private/jailbreak.txt", atomically: true, encoding: .utf8) try? FileManager.default.removeItem(atPath: "/private/jailbreak.txt") return true } catch { // 写入失败说明未越狱 } return false } /// 检测可疑文件 private func checkForSuspiciousFiles() -> Bool { let suspiciousPaths = [ "/private/var/mobile/Library/Preferences/.mdm_config", "/private/var/mobile/Library/Caches/com.apple.mdm" ] return suspiciousPaths.contains { FileManager.default.fileExists(atPath: $0) } } /// 检测调试器连接 private func isDebuggerAttached() -> Bool { var info = kinfo_proc() var size = MemoryLayout<kinfo_proc>.size var mib: [Int32] = [CTL_KERN, KERN_PROC, KERN_PROC_PID, getpid()] sysctl(&mib, 4, &info, &size, nil, 0) return (info.kp_proc.p_flag & P_TRACED) != 0 } /// 简化的端口检测 private func checkOpenPorts() -> Bool { let portsToCheck: [Int32] = [22, 23, 5900] // SSH, Telnet, VNC for port in portsToCheck { let sock = socket(AF_INET, SOCK_STREAM, 0) guard sock >= 0 else { continue } var addr = sockaddr_in() addr.sin_family = sa_family_t(AF_INET) addr.sin_port = in_port_t(port).bigEndian addr.sin_addr.s_addr = inet_addr("127.0.0.1") let bindResult = withUnsafePointer(to: &addr) { $0.withMemoryRebound(to: sockaddr.self, capacity: 1) { bind(sock, $0, socklen_t(MemoryLayout<sockaddr_in>.size)) } } close(sock) if bindResult == 0 { return true // 端口已开放 } } return false } // MARK: - 生命周期 override func viewWillDisappear(_ animated: Bool) { super.viewWillDisappear(animated) stopSecurityMonitoring() } deinit { stopSecurityMonitoring() } } // 在AppDelegate中启动监控 @main class AppDelegate: UIResponder, UIApplicationDelegate { func application(_ application: UIApplication, didFinishLaunchingWithOptions launchOptions: [UIApplication.LaunchOptionsKey: Any]?) -> Bool { let window = UIWindow(frame: UIScreen.main.bounds) window.rootViewController = SecurityMonitorViewController() window.makeKeyAndVisible() return true } } 运行结果为Output： error：exit status 1 package main: main.go:1:1: expected 'package', found 'import'