Jump to content

12 posts in this topic

Recommended Posts

Posted (edited)

iOS version 11.4.1 on iPhone 7 Plus using unc0ver 5.2.0 and lldb from San bigner’s repo

For multiple apps, when I set a watchpoint through lldb, it sets a watchpoint properly and reads the value properly. When I go back to the game and modify the value, the watchpoint doesn’t hit, and when I do “w list”, the value of the watchpoint isn’t changed. Am I doing something wrong?spacer.png

Updated by scratchyentree
Posted

Hello,

Did you bypass/adjust for ASLR on your offset?

Posted
2 hours ago, Rook said:

Hello,

Did you bypass/adjust for ASLR on your offset?

Example

[  0] E63DF4AA-6ED9-30DB-A1F4-2BEDF61449B0 0x0000000102c90000 /var/containers/Bundle/Application/C40578D2-AF06-4CC7-A126-B44D9D39C965/PvZ2.app/PvZ2

0x0000000102c9000

0x2c9000 is ASRL offset

and iGG address is 0x14ED0DBF0

(lldb) w s e -- 0x14ED0DBF0
Watchpoint created: Watchpoint 3: addr = 0x14ed0dbf0 size = 8 state = enabled type = w
    new value: 55837351936

i change value in game, but lldb not hit.

and i try other

0x14ED0DBF0 - 0x2c9000 = 0x14C07DBF0

(lldb) w s e -- 0x14C07DBF0
Watchpoint created: Watchpoint 2: addr = 0x14c07dbf0 size = 8 state = enabled type = w
    new value: (null)

i change value in game, but lldb not hit.

 

what should i do?

thank you

Posted (edited)
2 hours ago, Rook said:

Hello,

Did you bypass/adjust for ASLR on your offset?

From what I understand from most of the tutorials I've read on here, I have to get a watchpoint to hit on the Memory Editor Address before I adjust the ASLR on the IDA address. The picture in the OP where it stopped was where I changed the value in game (in my case I gained another coin), and the watchpoint still didn't hit (So it's not outputting the address to subtract the ASLR from). Maybe I'm wrong, but I'm using iMemEditor (Formerly iGameGuardian) to get the memory address, adding said address to lldb, and my watchpoint isn't updating or hitting even though I verified that the address value is changing through iMemEditor. 

Also, are you telling me to adjust for ASLR on the iMemEditor offset? Because if so, it goes against every tutorial on here I've ever read, and also I took the time to try to subtract the ASLR from the iMemEditor address myself with no success.

Updated by scratchyentree
Posted
24 minutes ago, songyuki97 said:

Example

[  0] E63DF4AA-6ED9-30DB-A1F4-2BEDF61449B0 0x0000000102c90000 /var/containers/Bundle/Application/C40578D2-AF06-4CC7-A126-B44D9D39C965/PvZ2.app/PvZ2

0x0000000102c9000

0x2c9000 is ASRL offset

and iGG address is 0x14ED0DBF0


(lldb) w s e -- 0x14ED0DBF0
Watchpoint created: Watchpoint 3: addr = 0x14ed0dbf0 size = 8 state = enabled type = w
    new value: 55837351936

i change value in game, but lldb not hit.

and i try other

0x14ED0DBF0 - 0x2c9000 = 0x14C07DBF0


(lldb) w s e -- 0x14C07DBF0
Watchpoint created: Watchpoint 2: addr = 0x14c07dbf0 size = 8 state = enabled type = w
    new value: (null)

i change value in game, but lldb not hit.

 

what should i do?

thank you

Seems like I'm not the only one having this issue. I believe it might be something to do with either our iOS version, or the LLDB debian that's become outdated. If you could post your iOS version and the version of LLDB you're using maybe we can get an answer sooner.

Posted (edited)

I’ll see if I can help with this one :)

where are you getting your watchpoint from?.. igg , game player etc.

Don’t worry about the aslr unless you are trying find the real offset in IDA.

 

lldb can be frustrating at times .

 

You could change the value in the lldb .

 

You would need to find out what is @ this address :

w s e -- 0x14ED0DBF0

 After it break/ pause you would need to find The register for the number you’re after 

3524493

x/i 0x14ED0DBF0

will give you this info .

 

0x14ED0DBF0 0x2c9000 = 0x14C07DBF0 this is giving you real address taking away aslr that’s why it’s not breaking/stopping . 
 

 

Go to this address in IDA 0x14C07DBF0

 

Updated by K_K
  • Like 1
Posted
37 minutes ago, scratchyentree said:

Seems like I'm not the only one having this issue. I believe it might be something to do with either our iOS version, or the LLDB debian that's become outdated. If you could post your iOS version and the version of LLDB you're using maybe we can get an answer sooner.

I don't think the cause of the problem is lldb out of date.

because i used xcode attached game and run lldb, watchpoint not hit.

i think ios 11.4.1 cause the problem

Posted
10 minutes ago, K_K said:

I’ll see if I can help with this one :)

where are you getting your watchpoint from?.. igg , game player etc.

Don’t worry about the aslr unless you are trying find the real offset in IDA.

 

lldb can be frustrating at times .

 

You could change the value in the lldb .

 

You would need to find out what is @ this address :


w s e -- 0x14ED0DBF0

 After it break/ pause you would need to find The register for the number you’re after 

3524493

x/i 0x14ED0DBF0

will give you this info .

 

0x14ED0DBF0 0x2c9000 = 0x14C07DBF0 this is giving you real address taking away aslr that’s why it’s not breaking/stopping . 
 

 

Go to this address in IDA 0x14C07DBF0

 

So it’s not breaking or pausing because the vale of the watchpoint address isn’t changing in lldb, even though it is in iGG (I’m using iMemEditor which is the same thing with a different name from the same company).

Posted
17 minutes ago, K_K said:

I’ll see if I can help with this one :)

where are you getting your watchpoint from?.. igg , game player etc.

Don’t worry about the aslr unless you are trying find the real offset in IDA.

 

lldb can be frustrating at times .

 

You could change the value in the lldb .

 

You would need to find out what is @ this address :


w s e -- 0x14ED0DBF0

 After it break/ pause you would need to find The register for the number you’re after 

3524493

x/i 0x14ED0DBF0

will give you this info .

 

0x14ED0DBF0 0x2c9000 = 0x14C07DBF0 this is giving you real address taking away aslr that’s why it’s not breaking/stopping . 
 

 

Go to this address in IDA 0x14C07DBF0

 

iPad-2:~ root# lldb
(lldb) attach 3174
Process 3174 stopped
* thread #1: tid = 0x1f64d, 0x00000001817f7de8 libsystem_kernel.dylib`mach_msg_trap + 8, queue = 'com.apple.main-thread', stop reason = signal SIGSTOP
    frame #0: 0x00000001817f7de8 libsystem_kernel.dylib`mach_msg_trap + 8
libsystem_kernel.dylib`mach_msg_trap:
->  0x1817f7de8 <+8>: ret    

libsystem_kernel.dylib`mach_msg_overwrite_trap:
    0x1817f7dec <+0>: movn   x16, #0x1f
    0x1817f7df0 <+4>: svc    #0x80
    0x1817f7df4 <+8>: ret    

Executable module set to "/var/containers/Bundle/Application/C40578D2-AF06-4CC7-A126-B44D9D39C965/PvZ2.app/PvZ2".
Architecture set to: arm64-apple-ios.
(lldb) w s e -- 0x105D76DF0
Watchpoint created: Watchpoint 1: addr = 0x105d76df0 size = 8 state = enabled type = w
    new value: 55840628736
(lldb) x/i 0x105D76DF0
    0x105d76df0: 0x005c6000   .long  0x005c6000                ; unknown opcode

  i got ithe info.
  then?

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • Magic Defense TD v296 [ +5 Cheats ] Always Win
      Modded/Hacked App: Magic Defense! By OBLIQUE GAMES, Corp.
      Bundle ID: com.ObliqueGames.MagicTowerDefense100
      iTunes Store Link: https://apps.apple.com/us/app/magic-defense/id6475539174?uo=4


      Hack Features:
      - No ADS [ Rewards Free ]

      - Skill Cooldown

      - Damage

      - Never Die

      - Auto Kill Enemy + Freez  [ Always Win ]


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Agree
        • Thanks
        • Winner
        • Like
      • 74 replies
    • Magic Defense TD v296 [ +5 Jailed ] Always Win
      Modded/Hacked App: Magic Defense : TD By OBLIQUE GAMES, Corp.
      Bundle ID: com.ObliqueGames.MagicTowerDefense100
      iTunes Store Link: https://apps.apple.com/us/app/magic-defense-td/id6475539174?uo=4



      Hack Features:

      - No ADS [ Rewards Free ]

      - Skill Cooldown

      - Damage

      - Never Die

      - Auto Kill Enemy + Freez  [ Always Win ]


      Jailbreak required hack(s): https://iosgods.com/forum/5-game-cheats-hack-requests/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Thanks
        • Winner
        • Like
      • 47 replies
    • Heroes vs. Hordes: Survivor v5.1.3 [ +11 Cheats ] Currency Max
      Modded/Hacked App: Heroes vs. Hordes: Survivor By Swift Games GmbH
      Bundle ID: com.swiftgames.roguelikesurvival
      iTunes Store Link: https://apps.apple.com/us/app/heroes-vs-hordes-survivor/id1608898173?uo=4

       
      Hack Features

      - Currency

      - Resource

      - Gold Unlimited [ Bonus Wave ]

      - Ch Unlocked [ Play All Off ]

      - Always Last Wave

      - Talents Cost 0

      - Hero DMG Only

      - HP & DMG [ Just Equip & Unequip ]

      - Enemy Freeze

      - Enemy ATK NO

       
      For Non-Jailbroken & No Jailbreak required hacks: https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
        • Agree
        • Thanks
        • Winner
        • Like
      • 70 replies
    • Heroes vs. Hordes: Survivor v5.1.3 [ +11 Jailed ] Currency Max
      Modded/Hacked App: Heroes vs. Hordes: Survivor By Swift Games GmbH
      Bundle ID: com.swiftgames.roguelikesurvival
      iTunes Store Link: https://apps.apple.com/us/app/heroes-vs-hordes-survivor/id1608898173?uo=4

       

       

      Mod Requirements

      - Non-Jailbroken/Jailed or Jailbroken iPhone or iPad.
      - Sideloadly or alternatives.
      - Computer running Windows/macOS/Linux with iTunes installed.

       

      Hack Features

      - Currency

      - Resource

      - Gold Unlimited [ Bonus Wave ]

      - Ch Unlocked [ Play All Off ]

      - Always Last Wave

      - Talents Cost 0

      - Hero DMG Only

      - HP & DMG [ Just Equip & Unequip ]

      - Enemy Freeze

      - Enemy ATK NO


      Jailbreak required iOS hacks: https://iosgods.com/forum/5-game-cheats-hack-requests/
      Modded Android APKs: https://iosgods.com/forum/68-android-section/

       

      iOS Hack Download IPA Link


      Hidden Content

      Download via the iOSGods App
        • Agree
        • Thanks
        • Winner
        • Like
      • 85 replies
    • Merge & Blast: Dream Island v2.22.1 [ +2 Cheats ] Auto Win
      Modded/Hacked App: Merge & Blast: Dream Island By Dreamo, Inc.
      Bundle ID: com.dreamo.woodyblast
      iTunes Store Link: https://apps.apple.com/us/app/merge-blast-dream-island/id1668748189?uo=4


      🤩 Hack Features

      - Auto Win
      - Coin + Moves [ Disable After Get ]




      🍏 For Non-Jailbroken & No Jailbreak required hacks: https://iosgods.com/forum/79-no-jailbreak-section/
      🤖 Modded Android APKs: https://iosgods.com/forum/68-android-section/
        • Like
      • 13 replies
    • Merge & Blast: Dream Island v2.22.1 [ +2 Jailed ] Auto Win
      Modded/Hacked App: Merge & Blast: Dream Island By Dreamo, Inc.
      Bundle ID: com.dreamo.woodyblast
      iTunes Store Link: https://apps.apple.com/us/app/merge-blast-dream-island/id1668748189?uo=4

       

      🤩 Hack Features

      - Auto Win
      - Coin + Moves [ Disable After Get ]




      🍏 Jailbreak iOS hacks: https://iosgods.com/forum/5-game-cheats-hack-requests/
      🤖 Modded Android APKs: https://iosgods.com/forum/68-android-section/
      • 18 replies
    • Merge Cruise: Mystery Puzzle v0.36.360 [ +2 Cheats ] Currency Max
      Modded/Hacked App: Merge Cruise: Mystery Puzzle By STUDIO PEERPLAY GAMES LTD
      Bundle ID: com.peerplay.megamerge
      iTunes Store Link: https://apps.apple.com/us/app/merge-cruise-mystery-puzzle/id6459056553?uo=4
       

      🤩 Hack Features

      - Cash
      - Energy

        • Agree
        • Haha
        • Thanks
        • Like
      • 13 replies
    • Merge Cruise: Mystery Puzzle v0.36.360 [ +2 Jailed ] Currency Max
      Modded/Hacked App: Merge Cruise: Mystery Puzzle By STUDIO PEERPLAY GAMES LTD
      Bundle ID: com.peerplay.megamerge
      iTunes Store Link: https://apps.apple.com/us/app/merge-cruise-mystery-puzzle/id6459056553?uo=4
       

      🤩 Hack Features

      - Cash
      - Energy

        • Winner
        • Like
      • 17 replies
    • Pop Island v1.0.8 [ +1 Cheats ] Coins Max
      Modded/Hacked App: Pop Island By HISTAR INTERACTIVE PTE. LTD.
      Bundle ID: com.hmbdgames.match
      iTunes Store Link: https://apps.apple.com/us/app/pop-island/id6505047210?uo=4


      🤩 Hack Features

      - Coins [ Win Match Disable After Hack ]


        • Agree
        • Like
      • 13 replies
    • Pop Island v1.0.8 [ +1 Jailed ] Coins Max
      Modded/Hacked App: Pop Island By HISTAR INTERACTIVE PTE. LTD.
      Bundle ID: com.hmbdgames.match
      iTunes Store Link: https://apps.apple.com/us/app/pop-island/id6505047210?uo=4


      🤩 Hack Features

      - Coins [ Win Match Disable After Hack ]


        • Winner
        • Like
      • 12 replies
    • Survivor Kingdoms V3.23 [ +11 Cheats ] Easy Win
      Modded/Hacked App: Survivor Kingdoms By Gamee Joint Stock Company
      Bundle ID: com.gamee.kingdoms.survivor.io
      iTunes Store Link: https://apps.apple.com/us/app/survivor-kingdoms/id6444824577?uo=4


      Hack Features:
      - IAP Free [ Buy Anything ]

      - Health

      - Damage

      - Skill CD Slow

      - Skill CD Fast [ Maybe Game Slow ]

      - Skill Size Big

      - Shooting Speed Fast

      - Movement Speed

      - Auto Revive Unlimited [ Never Die ]

      - Ultimate Power CD

      - Avatar & Frame 


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 41 replies
    • Survivor Kingdoms V3.23 [ +11 Jailed ] Easy Win
      Modded/Hacked App: Survivor Kingdoms By Gamee Joint Stock Company
      Bundle ID: com.gamee.kingdoms.survivor.io
      iTunes Store Link: https://apps.apple.com/us/app/survivor-kingdoms/id6444824577?uo=4

       

      🚀 Hack Features

      - IAP Free [ Buy Anything ]

      - Health

      - Damage

      - Skill CD Slow

      - Skill CD Fast [ Maybe Game Slow ]

      - Skill Size Big

      - Shooting Speed Fast

      - Movement Speed

      - Auto Revive Unlimited [ Never Die ]

      - Ultimate Power CD

      - Avatar & Frame 


      🍏 Jailbreak iOS hacks: https://iosgods.com/forum/5-game-cheats-hack-requests/
      🤖 Modded Android APKs: https://iosgods.com/forum/68-android-section/
        • Informative
        • Agree
        • Winner
        • Like
      • 26 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines