Jump to content
  • 0

 Help/Support LLDB watchpoint address value not updating


scratchyentree
 Share

12 posts in this topic

Question

iOS version 11.4.1 on iPhone 7 Plus using unc0ver 5.2.0 and lldb from San bigner’s repo

For multiple apps, when I set a watchpoint through lldb, it sets a watchpoint properly and reads the value properly. When I go back to the game and modify the value, the watchpoint doesn’t hit, and when I do “w list”, the value of the watchpoint isn’t changed. Am I doing something wrong?spacer.png

Edited by scratchyentree
Link to comment
Share on other sites

Recommended Posts

  • 0

Hello,

Did you bypass/adjust for ASLR on your offset?

Throughout life people will make you mad, disrespect you and treat you bad. Let God deal with the things they do, cause hate in your heart will consume you too.
iOSGods Administrator
 Guidelines  Support Donate  FAQ 

Link to comment
Share on other sites

  • 0
2 hours ago, Rook said:

Hello,

Did you bypass/adjust for ASLR on your offset?

Example

[  0] E63DF4AA-6ED9-30DB-A1F4-2BEDF61449B0 0x0000000102c90000 /var/containers/Bundle/Application/C40578D2-AF06-4CC7-A126-B44D9D39C965/PvZ2.app/PvZ2

0x0000000102c9000

0x2c9000 is ASRL offset

and iGG address is 0x14ED0DBF0

(lldb) w s e -- 0x14ED0DBF0
Watchpoint created: Watchpoint 3: addr = 0x14ed0dbf0 size = 8 state = enabled type = w
    new value: 55837351936

i change value in game, but lldb not hit.

and i try other

0x14ED0DBF0 - 0x2c9000 = 0x14C07DBF0

(lldb) w s e -- 0x14C07DBF0
Watchpoint created: Watchpoint 2: addr = 0x14c07dbf0 size = 8 state = enabled type = w
    new value: (null)

i change value in game, but lldb not hit.

 

what should i do?

thank you

Link to comment
Share on other sites

  • 0
2 hours ago, Rook said:

Hello,

Did you bypass/adjust for ASLR on your offset?

From what I understand from most of the tutorials I've read on here, I have to get a watchpoint to hit on the Memory Editor Address before I adjust the ASLR on the IDA address. The picture in the OP where it stopped was where I changed the value in game (in my case I gained another coin), and the watchpoint still didn't hit (So it's not outputting the address to subtract the ASLR from). Maybe I'm wrong, but I'm using iMemEditor (Formerly iGameGuardian) to get the memory address, adding said address to lldb, and my watchpoint isn't updating or hitting even though I verified that the address value is changing through iMemEditor. 

Also, are you telling me to adjust for ASLR on the iMemEditor offset? Because if so, it goes against every tutorial on here I've ever read, and also I took the time to try to subtract the ASLR from the iMemEditor address myself with no success.

Edited by scratchyentree
Link to comment
Share on other sites

  • 0
24 minutes ago, songyuki97 said:

Example

[  0] E63DF4AA-6ED9-30DB-A1F4-2BEDF61449B0 0x0000000102c90000 /var/containers/Bundle/Application/C40578D2-AF06-4CC7-A126-B44D9D39C965/PvZ2.app/PvZ2

0x0000000102c9000

0x2c9000 is ASRL offset

and iGG address is 0x14ED0DBF0

(lldb) w s e -- 0x14ED0DBF0
Watchpoint created: Watchpoint 3: addr = 0x14ed0dbf0 size = 8 state = enabled type = w
    new value: 55837351936

i change value in game, but lldb not hit.

and i try other

0x14ED0DBF0 - 0x2c9000 = 0x14C07DBF0

(lldb) w s e -- 0x14C07DBF0
Watchpoint created: Watchpoint 2: addr = 0x14c07dbf0 size = 8 state = enabled type = w
    new value: (null)

i change value in game, but lldb not hit.

 

what should i do?

thank you

Seems like I'm not the only one having this issue. I believe it might be something to do with either our iOS version, or the LLDB debian that's become outdated. If you could post your iOS version and the version of LLDB you're using maybe we can get an answer sooner.

Link to comment
Share on other sites

  • 0

I’ll see if I can help with this one :)

where are you getting your watchpoint from?.. igg , game player etc.

Don’t worry about the aslr unless you are trying find the real offset in IDA.

 

lldb can be frustrating at times .

 

You could change the value in the lldb .

 

You would need to find out what is @ this address :

w s e -- 0x14ED0DBF0

 After it break/ pause you would need to find The register for the number you’re after 

3524493

x/i 0x14ED0DBF0

will give you this info .

 

0x14ED0DBF0 0x2c9000 = 0x14C07DBF0 this is giving you real address taking away aslr that’s why it’s not breaking/stopping . 
 

 

Go to this address in IDA 0x14C07DBF0

 

Edited by K_K
  • Like 1
Link to comment
Share on other sites

  • 0
37 minutes ago, scratchyentree said:

Seems like I'm not the only one having this issue. I believe it might be something to do with either our iOS version, or the LLDB debian that's become outdated. If you could post your iOS version and the version of LLDB you're using maybe we can get an answer sooner.

I don't think the cause of the problem is lldb out of date.

because i used xcode attached game and run lldb, watchpoint not hit.

i think ios 11.4.1 cause the problem

Link to comment
Share on other sites

  • 0
10 minutes ago, K_K said:

I’ll see if I can help with this one :)

where are you getting your watchpoint from?.. igg , game player etc.

Don’t worry about the aslr unless you are trying find the real offset in IDA.

 

lldb can be frustrating at times .

 

You could change the value in the lldb .

 

You would need to find out what is @ this address :

w s e -- 0x14ED0DBF0

 After it break/ pause you would need to find The register for the number you’re after 

3524493

x/i 0x14ED0DBF0

will give you this info .

 

0x14ED0DBF0 0x2c9000 = 0x14C07DBF0 this is giving you real address taking away aslr that’s why it’s not breaking/stopping . 
 

 

Go to this address in IDA 0x14C07DBF0

 

So it’s not breaking or pausing because the vale of the watchpoint address isn’t changing in lldb, even though it is in iGG (I’m using iMemEditor which is the same thing with a different name from the same company).

Link to comment
Share on other sites

  • 0
17 minutes ago, K_K said:

I’ll see if I can help with this one :)

where are you getting your watchpoint from?.. igg , game player etc.

Don’t worry about the aslr unless you are trying find the real offset in IDA.

 

lldb can be frustrating at times .

 

You could change the value in the lldb .

 

You would need to find out what is @ this address :

w s e -- 0x14ED0DBF0

 After it break/ pause you would need to find The register for the number you’re after 

3524493

x/i 0x14ED0DBF0

will give you this info .

 

0x14ED0DBF0 0x2c9000 = 0x14C07DBF0 this is giving you real address taking away aslr that’s why it’s not breaking/stopping . 
 

 

Go to this address in IDA 0x14C07DBF0

 

iPad-2:~ root# lldb
(lldb) attach 3174
Process 3174 stopped
* thread #1: tid = 0x1f64d, 0x00000001817f7de8 libsystem_kernel.dylib`mach_msg_trap + 8, queue = 'com.apple.main-thread', stop reason = signal SIGSTOP
    frame #0: 0x00000001817f7de8 libsystem_kernel.dylib`mach_msg_trap + 8
libsystem_kernel.dylib`mach_msg_trap:
->  0x1817f7de8 <+8>: ret    

libsystem_kernel.dylib`mach_msg_overwrite_trap:
    0x1817f7dec <+0>: movn   x16, #0x1f
    0x1817f7df0 <+4>: svc    #0x80
    0x1817f7df4 <+8>: ret    

Executable module set to "/var/containers/Bundle/Application/C40578D2-AF06-4CC7-A126-B44D9D39C965/PvZ2.app/PvZ2".
Architecture set to: arm64-apple-ios.
(lldb) w s e -- 0x105D76DF0
Watchpoint created: Watchpoint 1: addr = 0x105d76df0 size = 8 state = enabled type = w
    new value: 55840628736
(lldb) x/i 0x105D76DF0
    0x105d76df0: 0x005c6000   .long  0x005c6000                ; unknown opcode

  i got ithe info.
  then?

Link to comment
Share on other sites

  • 0
14 minutes ago, songyuki97 said:
iPad-2:~ root# lldb
(lldb) attach 3174
Process 3174 stopped
* thread #1: tid = 0x1f64d, 0x00000001817f7de8 libsystem_kernel.dylib`mach_msg_trap + 8, queue = 'com.apple.main-thread', stop reason = signal SIGSTOP
    frame #0: 0x00000001817f7de8 libsystem_kernel.dylib`mach_msg_trap + 8
libsystem_kernel.dylib`mach_msg_trap:
->  0x1817f7de8 <+8>: ret    

libsystem_kernel.dylib`mach_msg_overwrite_trap:
    0x1817f7dec <+0>: movn   x16, #0x1f
    0x1817f7df0 <+4>: svc    #0x80
    0x1817f7df4 <+8>: ret    

Executable module set to "/var/containers/Bundle/Application/C40578D2-AF06-4CC7-A126-B44D9D39C965/PvZ2.app/PvZ2".
Architecture set to: arm64-apple-ios.
(lldb) w s e -- 0x105D76DF0
Watchpoint created: Watchpoint 1: addr = 0x105d76df0 size = 8 state = enabled type = w
    new value: 55840628736
(lldb) x/i 0x105D76DF0
    0x105d76df0: 0x005c6000   .long  0x005c6000                ; unknown opcode

  i got ithe info.
  then?

I misunderstood you. but watchpoint doesnt hit

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Answer this question...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Our picks

    • Arena of Valor Cheats (All Versions) +1
      Modded/Hacked App: Arena of Valor by PROXIMA BETA PTE.LIMITED
      Bundle ID: com.ngame.allstar.eu
      iTunes Store Link: https://apps.apple.com/us/app/arena-of-valor/id1150318642?uo=4&at=1010lce4


      Hack Features:
      - Map Hacks


      iOS Hack Download Link: https://iosgods.com/topic/130943-arm64-arena-of-valor-cheats-all-versions-1/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 540 replies
    • Archero Cheats v3.7.1 +5 [ God Mode & More ]
      Modded/Hacked App: Archero by HABBY PTE. LTD.
      Bundle ID: com.habby.archero
      iTunes Store Link: https://apps.apple.com/us/app/archero/id1453651052?uo=4&at=1010lce4



      Hack Features:
      - Multiply Defense to
      - Multiply Damage to
      - God Mode
      - OHK (Must use with God Mode)
      - Freeze Enemies

      NOTE: If you want to use god mode and ohk turn off multiply damage and defense first. I added multiply damage and defense there to avoid ban


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/100710-archero-v210-enemies-dont-attack-x30-attack/


      Hack Download Link: https://iosgods.com/topic/96783-arm64-archero-cheats-v220-5/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 14,623 replies
    • Slime Hunter : Wild Impact Cheats v5.8.2 +14
      Modded/Hacked App: Slime Hunter : Wild Impact By GAMEVIL Inc.
      Bundle ID: com.abiss.roem
      iTunes Store Link: https://apps.apple.com/us/app/slime-hunter-wild-impact/id1447753767?uo=4


      Hack Features:
      - Damage Multiplier
      - Never Die
      - No Skill Cooldown
      - No Skill Cost
      - Unlimited Currency [Spend to Gain]
      - Free Crafting
      - Unlimited Items [Spend to Gain]
      - Instant Fever
      - Unlimited Fever Count
      - XP Multiplier
      - Custom Equipment XP
      - Always Catch Pet
      - No Requirement for Class Change
      - Auto Level XP Multiplier
       

      THIS CHEAT DOES NOT INCLUDED JAILBREAK BYPASS. FOR JB BYPASS CONTACT LAXUS

      DO NOT BUY VIP FOR JUST THIS CHEAT


      iOS Hack Download Link: https://iosgods.com/topic/138212-slime-hunter-wild-impact-v431-14-cheats/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 867 replies
    • Puzzle & Dragons (English) v19.8.0 Jailed Cheats +2
      Modded/Hacked App: Puzzle & Dragons (English) By GungHo Online Entertainment, INC.
      Bundle ID: jp.gungho.padEN
      iTunes Store Link: https://apps.apple.com/us/app/puzzle-dragons-english/id563474464?uo=4


      Hack Features:
      - God Mode
      - One Hit Kill


      Jailbreak required hack(s): https://iosgods.com/topic/133984-puzzle-dragons-japan-english-cheats-all-versions-3/


      iOS Hack Download Link: https://iosgods.com/topic/135066-puzzle-dragons-english-v1931-jailed-cheats-2/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 155 replies
    • Left to Survive v4.10.2 Jailed Cheats +3
      Modded/Hacked App: Left to Survive: Shooter PVP By My.com B.V.
      Bundle ID: com.glu.zbs
      iTunes Store Link: https://apps.apple.com/us/app/left-to-survive-shooter-pvp/id1090501422?uo=4


      Hack Features:
      - Infinite Ammo
      - No Reload
      - No Spread


      Jailbreak required hack(s): https://iosgods.com/topic/71233-arm64-left-to-survive-pvp-shooter-cheats-all-versions-3/


      Hack Download Link: https://iosgods.com/topic/71998-arm64-left-to-survive-v470-jailed-cheats-3/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 757 replies
    • [ARM64] Armed Heist: TPS Shooting Game Cheats v2.4.17 +6
      Modded/Hacked App: Armed Heist By SOZAP
      Bundle ID: com.sozap.badmen
      iTunes Store Link: https://itunes.apple.com/us/app/armed-heist/id1163705851?mt=8&uo=4&at=1010lce4



      Hack Features:
      - God Mode
      - Dumb AI (No Shoot, No Take Cover) - Not Affect Shotgun AI ¯\_(ツ)_/¯
      - Better Aim
      - No Spread
      - No Reload
      - Instant Max Ammo (Pickup)



      Hack Download Link: https://iosgods.com/topic/75497-arm64-armed-heist-cheats-v117-10/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 1,283 replies
    • [ARM64] Sniper 3D: Gun Shooting Games v3.42.0 Jailed Cheats +5
      Modded/Hacked App: Sniper 3D Assassin: FPS Battle By Fun Games For Free
      Bundle ID: com.fungames.sniper3d
      iTunes Store Link: https://itunes.apple.com/us/app/sniper-3d-assassin-fps-battle/id930574573?mt=8&uo=4&at=1010lce4



      Hack Features:
      - Infinite Coins
      - Infinite Gems
      - Infinite Energy
      - Infinite Ammo / No Reload
      - No Spread


      Jailbreak required hack(s):  https://iosgods.com/topic/74123-arm64-sniper-3d-fps-battle-shoot-to-kill-2018-v2180-jailed-cheats-5/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 1,847 replies
    • Tanks A Lot - 3v3 Brawls Cheats v3.600 +6
      Modded/Hacked App: Tanks A Lot - 3v3 Brawls by BoomBit, Inc.
      Bundle ID: com.boombitgames.TanksALot
      iTunes Store Link: https://apps.apple.com/us/app/tanks-a-lot-3v3-brawls/id1344713773?uo=4&at=1010lce4


      Hack Features:
      - God Mode
      - Infinite Ammo
      - No Reload
      - Speed Hacks
      - Disable Enemy Shield
      - No Skill Cooldown


      Hack Download Link: https://iosgods.com/topic/76001-arm64-tanks-a-lot-3v3-brawls-cheats-v190-6/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 1,697 replies
    • PC Creator Building Simulator Cheats (All Versions) +1
      Modded/Hacked App: PC Creator(Building Simulator) by MYKOLA NADTOKA
      Bundle ID: com.ultra.pccreator
      iTunes Store Link: https://apps.apple.com/us/app/pc-creator-building-simulator/id1502838909?uo=4&at=1010lce4


      Hack Features:
      - Infinite Cash
      - Infinite Gem


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/126604-arm64-pc-creatorbuilding-simulator-v17-jailed-cheats-2/


      iOS Hack Download Link: https://iosgods.com/topic/126602-arm64-pc-creatorbuilding-simulator-cheats-all-versions-2/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 348 replies
    • [ARM64] The Seven Deadly Sins Cheats v1.3.8 +5
      Modded/Hacked App: The Seven Deadly Sins by Netmarble Corporation
      Bundle ID: com.netmarble.nanagb
      iTunes Store Link: https://apps.apple.com/us/app/the-seven-deadly-sins/id1475440231?uo=4&at=1010lce4


      Hack Features:
      - God Mode
      - OHK
      - Infinite MP


      iOS Hack Download Link: https://iosgods.com/topic/131686-arm64-the-seven-deadly-sins-cheats-v117-3/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 1,295 replies
    • Kim Kardashian: Hollywood Cheats v12.8.0 +8
      Modded/Hacked App: Kim Kardashian: Hollywood by Glu Games Inc
      Bundle ID: com.glu.stardomkim
      iTunes Store Link: https://apps.apple.com/us/app/kim-kardashian-hollywood/id860822992?uo=4&at=1010lce4


      Hack Features:
      - Anti Cheat Removed
      - Freeze Stars
      - Daily Giftbox Gives 500 Stars
      - All Items are FREE
      - Unlock All Dyes
      - Extra Events Bonus
      - PREMIUM

      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/129446-arm64-kim-kardashian-hollywood-v1100-jailed-cheats-2/

      iOS Hack Download Link: https://iosgods.com/topic/129445-arm64-kim-kardashian-hollywood-cheats-v110-2/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 630 replies
    • Yu-Gi-Oh! Duel Links v6.3.0 - [ Always Best Tactics & More ]
      Modded/Hacked App: Yu-Gi-Oh! Duel Links By KONAMI
      Bundle ID: jp.konami.yugiohmobile
      iTunes Store Link: https://itunes.apple.com/us/app/yu-gi-oh-duel-links/id1068378177?mt=8&uo=4&at=1010lce4


      Mod Requirements:
      - Non-Jailbroken/Jailed or Jailbroken iPhone/iPad/iPod Touch.
      - Cydia Impactor.
      - A Computer Running Windows/Mac/Linux.


      Hack Features:
      -- Always The Best Tactics
      - Shows
      -- Enemies Hand Card Show
      - Show Monster And Status
      -- Enemies Deck Card Shows
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 1,067 replies
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best possible user experience without cookies. You can accept or decline our non-essential cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines