infernusdoleo
-
Posts
30 -
Joined
-
Last visited
infernusdoleo's Achievements
Newbie (1/14)
0
Reputation
-
TuT How to Defeat/Remove ASLR On iOS 9 - Armv7 and ARM64 Devices
infernusdoleo replied to mikeyb's topic in Tutorials
Heads up - Just tried this on an armv7 binary running on an ipod touch 6th gen, iOS 9.0.2, and the first method you list, using the address in the image list output of lldb did NOT work for me. In fact the output of that was exactly the same as the info address _mh_execute_header output in gdb (I attached with GDB, read it, detached, then attached with lldb so I had the same session). I needed to subtract the header offset from BOTH to get the correct position. Not sure if thats a universal issue, but it applied in my situation.