Ted2

gdb cantt run arm64 i see.. not neccesary then. solved

Hi, I followed this tut for getting aslr using gdb, since I'm doing breakpoints on arm64.. But when I type the command info address _mh_execute_header It tells me this: (gdb) info address _mh_execute_header warning: Unrecognized osabi 0 in arm_set_osabi_from_host_info Error calling thread_get_state for GP registers for thread 0x3843lxerror on line 251 of "/Volumes/Builds2/BuildRoot/SourceCache/gdb/gdb-1708/src/gdb/macosx/arm-macosx-nat-exec.c" in function "void fetch_inferior_registers(int)": (os/kern) invalid argument (0x4) (gdb) What's wrong?

Tried that, didn't go well. wil try again

You only want 2000 gold nothing else? if yes, pm me

What?

Hi, I wanna find the aslr slide using gdb, but cant find anything on the web how. using lldb, it's just image list. But I can't use lldb & gdb at the same time.. but I have to do breakpoints.. I've read somewhere something about otool? Not sure what to do with that though. Anyone knows easy way?

Your code seems alright to me, can you pm me your project? I wanna see if I can compile it

Sure! Making dinner right now, so after

Hey, sdks installed too?

Yes I got GDB! So the main function i need to hack is the one with Vectors? Wow thanks dude!

Hi, So I found the right function for hacking health, I also hacked it & it worked. Sadly it works for my enemy too This is the part I hacked loc_16955C LDR R0, [R5,#0x40] LDR R1, [R11,#var_s0] SUB R0, R0, R1 STR R0, [R5,#0x40] CMP R0, #0 BGE loc_16957C I changed SUB R0, R0, R1 to a ADD & it worked. So I was thinking that linked function had to do something with branches, I did NOP the BGE loc_169557C Whcih resulted in both, me & enemy has normal health. The loc_169557c function looks like this (if that helps lol): loc_16957C VLDR S0, [R5,#0x4C] VCVT.F64.F32 D2, S0 VNEG.F64 D2, D2 VCVT.F32.F64 S0, D2 VSTR S0, [R5,#0x48] LDR R0, =(unk_C8103C - 0x1695A4) B loc_16959C Anyone could help me out? Thankyou in advance

See tutorials in section how to properly install theos

Do you have headers installed? and do you have a sdk installed?

if not work, pm me i give u mine

These should work fine too: https://github.com/theos/sdks/tree/master/iPhoneOS9.3.sdk

Do 8.1 or 7.1

Var/containers/bundle my bad u can use this too for app package name: http://armconverter.com/appinfo/

Var/containers/bundle my bad

Var/mobile/containers/bundle

Download 'MTerminal' not 'MobileTerminal'

Thanks mate

iPhone 6 or 6s ios 9.3.3 is beast.. I got a 6s, working sick

Ah, like that. Don't know About that man

Those offsets you find with iGG are always diffrent. You'll need to use lldb to get the ida offset & make a modmenu or patcher out of it so you can controll it