Jump to content

12 posts in this topic

Recommended Posts

Posted (edited)

iOS version 11.4.1 on iPhone 7 Plus using unc0ver 5.2.0 and lldb from San bigner’s repo

For multiple apps, when I set a watchpoint through lldb, it sets a watchpoint properly and reads the value properly. When I go back to the game and modify the value, the watchpoint doesn’t hit, and when I do “w list”, the value of the watchpoint isn’t changed. Am I doing something wrong?spacer.png

Updated by scratchyentree
Posted

Hello,

Did you bypass/adjust for ASLR on your offset?

Posted
2 hours ago, Rook said:

Hello,

Did you bypass/adjust for ASLR on your offset?

Example

[  0] E63DF4AA-6ED9-30DB-A1F4-2BEDF61449B0 0x0000000102c90000 /var/containers/Bundle/Application/C40578D2-AF06-4CC7-A126-B44D9D39C965/PvZ2.app/PvZ2

0x0000000102c9000

0x2c9000 is ASRL offset

and iGG address is 0x14ED0DBF0

(lldb) w s e -- 0x14ED0DBF0
Watchpoint created: Watchpoint 3: addr = 0x14ed0dbf0 size = 8 state = enabled type = w
    new value: 55837351936

i change value in game, but lldb not hit.

and i try other

0x14ED0DBF0 - 0x2c9000 = 0x14C07DBF0

(lldb) w s e -- 0x14C07DBF0
Watchpoint created: Watchpoint 2: addr = 0x14c07dbf0 size = 8 state = enabled type = w
    new value: (null)

i change value in game, but lldb not hit.

 

what should i do?

thank you

Posted (edited)
2 hours ago, Rook said:

Hello,

Did you bypass/adjust for ASLR on your offset?

From what I understand from most of the tutorials I've read on here, I have to get a watchpoint to hit on the Memory Editor Address before I adjust the ASLR on the IDA address. The picture in the OP where it stopped was where I changed the value in game (in my case I gained another coin), and the watchpoint still didn't hit (So it's not outputting the address to subtract the ASLR from). Maybe I'm wrong, but I'm using iMemEditor (Formerly iGameGuardian) to get the memory address, adding said address to lldb, and my watchpoint isn't updating or hitting even though I verified that the address value is changing through iMemEditor. 

Also, are you telling me to adjust for ASLR on the iMemEditor offset? Because if so, it goes against every tutorial on here I've ever read, and also I took the time to try to subtract the ASLR from the iMemEditor address myself with no success.

Updated by scratchyentree
Posted
24 minutes ago, songyuki97 said:

Example

[  0] E63DF4AA-6ED9-30DB-A1F4-2BEDF61449B0 0x0000000102c90000 /var/containers/Bundle/Application/C40578D2-AF06-4CC7-A126-B44D9D39C965/PvZ2.app/PvZ2

0x0000000102c9000

0x2c9000 is ASRL offset

and iGG address is 0x14ED0DBF0


(lldb) w s e -- 0x14ED0DBF0
Watchpoint created: Watchpoint 3: addr = 0x14ed0dbf0 size = 8 state = enabled type = w
    new value: 55837351936

i change value in game, but lldb not hit.

and i try other

0x14ED0DBF0 - 0x2c9000 = 0x14C07DBF0


(lldb) w s e -- 0x14C07DBF0
Watchpoint created: Watchpoint 2: addr = 0x14c07dbf0 size = 8 state = enabled type = w
    new value: (null)

i change value in game, but lldb not hit.

 

what should i do?

thank you

Seems like I'm not the only one having this issue. I believe it might be something to do with either our iOS version, or the LLDB debian that's become outdated. If you could post your iOS version and the version of LLDB you're using maybe we can get an answer sooner.

Posted (edited)

I’ll see if I can help with this one :)

where are you getting your watchpoint from?.. igg , game player etc.

Don’t worry about the aslr unless you are trying find the real offset in IDA.

 

lldb can be frustrating at times .

 

You could change the value in the lldb .

 

You would need to find out what is @ this address :

w s e -- 0x14ED0DBF0

 After it break/ pause you would need to find The register for the number you’re after 

3524493

x/i 0x14ED0DBF0

will give you this info .

 

0x14ED0DBF0 0x2c9000 = 0x14C07DBF0 this is giving you real address taking away aslr that’s why it’s not breaking/stopping . 
 

 

Go to this address in IDA 0x14C07DBF0

 

Updated by K_K
  • Like 1
Posted
37 minutes ago, scratchyentree said:

Seems like I'm not the only one having this issue. I believe it might be something to do with either our iOS version, or the LLDB debian that's become outdated. If you could post your iOS version and the version of LLDB you're using maybe we can get an answer sooner.

I don't think the cause of the problem is lldb out of date.

because i used xcode attached game and run lldb, watchpoint not hit.

i think ios 11.4.1 cause the problem

Posted
10 minutes ago, K_K said:

I’ll see if I can help with this one :)

where are you getting your watchpoint from?.. igg , game player etc.

Don’t worry about the aslr unless you are trying find the real offset in IDA.

 

lldb can be frustrating at times .

 

You could change the value in the lldb .

 

You would need to find out what is @ this address :


w s e -- 0x14ED0DBF0

 After it break/ pause you would need to find The register for the number you’re after 

3524493

x/i 0x14ED0DBF0

will give you this info .

 

0x14ED0DBF0 0x2c9000 = 0x14C07DBF0 this is giving you real address taking away aslr that’s why it’s not breaking/stopping . 
 

 

Go to this address in IDA 0x14C07DBF0

 

So it’s not breaking or pausing because the vale of the watchpoint address isn’t changing in lldb, even though it is in iGG (I’m using iMemEditor which is the same thing with a different name from the same company).

Posted
17 minutes ago, K_K said:

I’ll see if I can help with this one :)

where are you getting your watchpoint from?.. igg , game player etc.

Don’t worry about the aslr unless you are trying find the real offset in IDA.

 

lldb can be frustrating at times .

 

You could change the value in the lldb .

 

You would need to find out what is @ this address :


w s e -- 0x14ED0DBF0

 After it break/ pause you would need to find The register for the number you’re after 

3524493

x/i 0x14ED0DBF0

will give you this info .

 

0x14ED0DBF0 0x2c9000 = 0x14C07DBF0 this is giving you real address taking away aslr that’s why it’s not breaking/stopping . 
 

 

Go to this address in IDA 0x14C07DBF0

 

iPad-2:~ root# lldb
(lldb) attach 3174
Process 3174 stopped
* thread #1: tid = 0x1f64d, 0x00000001817f7de8 libsystem_kernel.dylib`mach_msg_trap + 8, queue = 'com.apple.main-thread', stop reason = signal SIGSTOP
    frame #0: 0x00000001817f7de8 libsystem_kernel.dylib`mach_msg_trap + 8
libsystem_kernel.dylib`mach_msg_trap:
->  0x1817f7de8 <+8>: ret    

libsystem_kernel.dylib`mach_msg_overwrite_trap:
    0x1817f7dec <+0>: movn   x16, #0x1f
    0x1817f7df0 <+4>: svc    #0x80
    0x1817f7df4 <+8>: ret    

Executable module set to "/var/containers/Bundle/Application/C40578D2-AF06-4CC7-A126-B44D9D39C965/PvZ2.app/PvZ2".
Architecture set to: arm64-apple-ios.
(lldb) w s e -- 0x105D76DF0
Watchpoint created: Watchpoint 1: addr = 0x105d76df0 size = 8 state = enabled type = w
    new value: 55840628736
(lldb) x/i 0x105D76DF0
    0x105d76df0: 0x005c6000   .long  0x005c6000                ; unknown opcode

  i got ithe info.
  then?

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • Run! Goddess v1.0.22 [+4 Jailed Cheats]
      Modded/Hacked App: Run! Goddess By TOP GAMES INC.
      Bundle ID: com.topgamesinc.rg
      iTunes Store Link: https://apps.apple.com/us/app/run-goddess/id6667111749?uo=4



      🤩 Hack Features

      - No Skill Cooldown
      - Slow Enemy
      - Enemy Can't Attack (Enemy Can't Do Damage)
      • 93 replies
    • Run! Goddess v1.0.22 [+4 Cheats]
      Modded/Hacked App: Run! Goddess By TOP GAMES INC.
      Bundle ID: com.topgamesinc.rg
      iTunes Store Link: https://apps.apple.com/us/app/run-goddess/id6667111749?uo=4

       

      🤩 Hack Features

      - No Skill Cooldown
      - Slow Enemy
      - Enemy Can't Attack (Enemy Can't Do Damage)
       
      • 80 replies
    • Alien Survivor: Survival Arena v1.38.1 [ +7 Cheats ] Currency Max
      Modded/Hacked App: Alien Survivor: Survival Arena By IMPONILOX LIMITED
      Bundle ID: world.playme.x
      iTunes Store Link: https://apps.apple.com/us/app/alien-survivor-survival-arena/id1669761844?uo=4
       

      🚀 Hack Features

      - ADS NO [ Rewards Free ]

      - Gems [ Achievements Rewards Only One Get ]

      - Energy [ Just Buy ]

      - HP [ Just Equip & Unequip ]

      - ATK [ Just Equip & Unequip ]

      - DEF [ Just Equip & Unequip ]

      - Skill CD [ First Get Then Use ]


      🍏 For Non-Jailbroken & No Jailbreak required hacks: https://iosgods.com/forum/79-no-jailbreak-section/
      🤖 Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      • 15 replies
    • Alien Survivor: Survival Arena v1.38.1 [ +7 Jailed ] Currency Max
      Modded/Hacked App: Alien Survivor: Survival Arena By IMPONILOX LIMITED
      Bundle ID: world.playme.x
      iTunes Store Link: https://apps.apple.com/us/app/alien-survivor-survival-arena/id1669761844?uo=4


      🚀 Hack Features

      - ADS NO [ Rewards Free ]

      - Gems [ Achievements Rewards Only One Get ]

      - Energy [ Just Buy ]

      - HP [ Just Equip & Unequip ]

      - ATK [ Just Equip & Unequip ]

      - DEF [ Just Equip & Unequip ]

      - Skill CD [ First Get Then Use ]


      🍏 Jailbreak iOS hacks: https://iosgods.com/forum/5-game-cheats-hack-requests/
      🤖 Modded Android APKs: https://iosgods.com/forum/68-android-section/
      • 26 replies
    • Legend of Survivors V1.2.8 [ +17 Jailed ] Currency Max
      Modded/Hacked App: Legend of Survivors By ABI GLOBAL LTD.
      Bundle ID: com.abi.legendofsurvivors
      iTunes Store Link: https://apps.apple.com/us/app/legend-of-survivors/id6489580730?uo=4


      Hack Features:

      - NO ADS

      - Gems 

      - Gold

      - Energy 

      - Material

      - Health Max [ Equip & Upgrade ]

      - Damage [ Equip & Upgrade ]

      - Skill Cooldown

      - EXP + Level [ Patrol Reward ]

      - Patrol Reward [ Claim Unlimited ]

      - Growth Pack Unlock

      - Growth Pack [ Claim Unlimited ]

      - Monthly card Pack Unlock

      - Monthly card Pack [ Claim Unlimited ]


      Jailbreak required hack(s): https://iosgods.com/forum/5-game-cheats-hack-requests/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
      • 48 replies
    • Legend of Survivors V1.2.8 [ +17 Cheats ] Currency Max
      Modded/Hacked App: Legend of Survivors By ABI GLOBAL LTD.
      Bundle ID: com.abi.legendofsurvivors
      iTunes Store Link: https://apps.apple.com/us/app/legend-of-survivors/id6489580730?uo=4


      Hack Features:
      - IAP Free [ Buy Anything - Gems Gold Ads Premium Packs ]

      - NO ADS

      - Gems 

      - Gold

      - Energy 

      - Material

      - Health Max [ Equip & Upgrade ]

      - Damage [ Equip & Upgrade ]

      - Skill Cooldown

      - EXP + Level [ Patrol Reward ]

      - Patrol Reward [ Claim Unlimited ]

      - Growth Pack Unlock

      - Growth Pack [ Claim Unlimited ]

      - Monthly card Pack Unlock

      - Monthly card Pack [ Claim Unlimited ]
      • 132 replies
    • Kitchen Masters v15.0.0 [ +4 Cheats ] Currency Max
      Modded/Hacked App: Kitchen Masters By Bigger Oyun Yazilim ve Pazarlama Anonim Sirketi
      Bundle ID: com.bigger.kitchenmasters
      iTunes Store Link: https://apps.apple.com/ph/app/kitchen-masters/id6474870266?uo=4


      🤩 Hack Features

      - Coins

      - Cash

      - Lives

      - Tile Cost 0
      • 6 replies
    • Kitchen Masters v15.0.0 [ +4 Jailed ] Currency Max
      Modded/Hacked App: Kitchen Masters By Bigger Oyun Yazilim ve Pazarlama Anonim Sirketi
      Bundle ID: com.bigger.kitchenmasters
      iTunes Store Link: https://apps.apple.com/ph/app/kitchen-masters/id6474870266?uo=4
       

      🤩 Hack Features

      - Coins

      - Cash

      - Lives

      - Tile Cost 0
      • 10 replies
    • Score Masters v2.2 [ +7 Jailed ] Always Win
      Modded/Hacked App: Score Masters By SKYLOFT YAZILIM BILISIM VE TICARET ANONIM SIRKETI
      Bundle ID: com.bh.hypergoal
      iTunes Store Link: https://apps.apple.com/us/app/score-masters/id6473402760?uo=4


      🚀 Hack Features

      - Auto ADS Disable

      - Gems [ Mission Rewards ]

      - Coins [ Mission Rewards ]

      - Player Score 20 Max

      - Always Win Player

      - AI Score 0

      - AI Miss
      • 5 replies
    • Score Masters v2.2 [ +7 Cheats ] Always Win
      Modded/Hacked App: Score Masters By SKYLOFT YAZILIM BILISIM VE TICARET ANONIM SIRKETI
      Bundle ID: com.bh.hypergoal
      iTunes Store Link: https://apps.apple.com/us/app/score-masters/id6473402760?uo=4


      🚀 Hack Features

      - Auto ADS Disable

      - Gems [ Mission Rewards ]

      - Coins [ Mission Rewards ]

      - Player Score 20 Max

      - Always Win Player

      - AI Score 0

      - AI Miss
      • 8 replies
    • Adventure Bay - Farm Games v1.42.14 [ +4 Cheats ] Currency Max
      Modded/Hacked App: Adventure Bay - Farm Games By Gamegos Teknoloji A.S.
      Bundle ID: com.gamegos.adventure.bay.paradise.farm
      iTunes Store Link: https://apps.apple.com/us/app/adventure-bay-farm-games/id1578449819?uo=4
       

      🤩 Hack Features

      - Gems
      - Coins
      - Energy
      - Avatar Unlock
      • 19 replies
    • Adventure Bay - Farm Games v1.42.14 [ +4 Jailed ] Currency Max
      Modded/Hacked App: Adventure Bay - Farm Games By Gamegos Teknoloji A.S.
      Bundle ID: com.gamegos.adventure.bay.paradise.farm
      iTunes Store Link: https://apps.apple.com/us/app/adventure-bay-farm-games/id1578449819?uo=4


      🤩 Hack Features

      - Gems
      - Coins
      - Energy
      - Avatar Unlock
      • 25 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines