Jump to content

How to Defeat/Remove ASLR On iOS 9 - Armv7 and ARM64 Devices


mikeyb

29 posts in this topic

Recommended Posts

Updated

Thing You Will Need:

 

. A Cracked App. For This Tut I'm using High Noon 2 Game

. LLDB OR GDB

. A Brain

 

Instructions:

 

. A lot has changed on ios9 so cracking a binary and removing the aslr from it on an older version ios aint going to work on your ios9 device forget it, it wont happen, follow the tut below to defeat it, it's so easy

 

. Get your offsets from igamegaurdian or gamegem ready

. Attach you game to LLDB you should all know how to do this by now.

. When LLDB Connects Type image list

. This will bring up a big list go to the very top like the pic below to find your games aslr

 

9hksq8.jpg

 

. Now as you can see I'm using High Noon 2 game at the top of my list its shows HN2.app/HN2 (0x00000001000dc000)

 

. This is my Aslr - dc000, what   you need  to do is now in LLDB Add your watchpoint (example w s e -- 0x1b5f00210)

 

. when you get a hit and the address from lldb you need to subtract your aslr from it example......LLDB Address  given  0x10023ca45  so now you subtract your Aslr address from it so I will do 10023ca45 − dc000 = 100160a45

and  0x100160a45 is the address I need in ida

 

.Easy As That I Hope It Helps

 

. You will need to reapeat each time you attach the game cause the Aslr changes

 

. Also I use this online hex calculator if you don't have one http://www.miniwebtool.com/hex-calculator/

 

For Gdb Users Like @@shmoo :p

 

.Open your binary in IDA and

 

.select the architecture you are

going to be hacking.

 

.Once it has loaded, go to the very beginning of

the file. You should see something

like this:

HEADER:000XXXXX. this will be your ASLR bias

 

.There are other ways to

get the header offset, like using

otool, but I prefer using IDA.

 

.Start your app and connect to it

with gdb 

 

.Next, type in the command “info

address _mh_execute_header”.

 

.gdb should print an address to

you.

 

.Subtract the value from IDA from

value you got from gdb and this is

your ASLR bias.

 

.From now on,

subtract your ASLR bias from any

offset you get from watchpoints,

breakpoints etc. to get the correct

offset for IDA or add your bias to

an address from IDA before using

it in GDB.

 

 

  • Replies 28
  • Created
  • Last Reply
Posted

not for arm64 devices?

I use a 5s and it works

what version I will test

the gdb from cydia.radare.org (repo)

Posted

I use a 5s and it works

 

the gdb from cydia.radare.org (repo)

tried that on my  iPhone 6 plus wouldn't work for me at all anyway lldb is better :p

Posted

tried that on my  iPhone 6 plus wouldn't work for me at all anyway lldb is better :p

I like gdb because you don't have to wait a million years :p

Archived

This topic is now archived and is closed to further replies.

  • Our picks

    • Jurassic World Alive v3.14.53 - [ Dino Don't Move & More ]
      Modded/Hacked App: Jurassic World Alive By Ludia
      Bundle ID: com.ludia.jw2
      iTunes Store Link: https://apps.apple.com/us/app/jurassic-world-alive/id1231085864


      Hack Features:
      - Dino Don't Move
      - Inf. Battery
      - VIP Enabled

      This hack is an In-Game Mod Menu (iGMM). In order to activate the Mod Menu, tap on the iOSGods button found inside the app. This hack works on the latest x64 or ARM64 iDevices: iPhone 5s, 6, 6 Plus, 6s, 6s Plus, 7, 7 Plus, 8, 8 Plus, X, Xr, Xs, Xs Max, SE, iPod Touch 6G, iPad Air, Air 2, Pro & iPad Mini 2, 3, 4 and later.
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 1,687 replies
    • June’s Journey: Hidden Objects v3.37.2 Jailed Cheats +2
      Modded/Hacked App: June’s Journey: Hidden Objects By wooga gmbh
      Bundle ID: net.wooga.junes-journey-hidden-object-mystery-game
      iTunes Store Link: https://apps.apple.com/us/app/junes-journey-hidden-objects/id1200391796?uo=4


      Hack Features:
      - Infinite Currencies
      - Instant Hint


      iOS Hack Download IPA Link: https://iosgods.com/topic/176104-june%E2%80%99s-journey-hidden-objects-v2946-jailed-cheats-2/
        • Informative
        • Agree
        • Thanks
        • Winner
        • Like
      • 46 replies
    • Frost World v1.0.2 +8 Jailed Cheats [ Damage & Defence ]
      Modded/Hacked App: Frost World By Estoty LLC
      Bundle ID: com.winter.breaker
      App Store Link: https://apps.apple.com/us/app/frost-world/id6738846199?uo=4

       


      🤩 Hack Features

      - Damage Multiplier
      - Defence Multiplier
      - God Mode
      - Unlimited Everything -> Will increase instead of decrease.
      - Tool Damage Multiplier
      - Speed Multiplier
      - Freeze Temperature
      - Free In-App Purchases
        • Like
      • 2 replies
    • Frost World v1.0.2 +8 Cheats [ Damage & Defence ]
      Modded/Hacked App: Frost World By Estoty LLC
      Bundle ID: com.winter.breaker
      App Store Link: https://apps.apple.com/us/app/frost-world/id6738846199?uo=4

       


      🤩 Hack Features

      - Damage Multiplier
      - Defence Multiplier
      - God Mode
      - Unlimited Everything -> Will increase instead of decrease.
      - Tool Damage Multiplier
      - Speed Multiplier
      - Freeze Temperature
      - Free In-App Purchases
        • Like
      • 4 replies
    • Loot Heroes v1.6.9 +10 Jailed Cheats [ Unlimited Currencies ]
      Modded/Hacked App: Loot Heroes: Fantasy RPG Games By BoomBit, Inc.
      Bundle ID: com.bbp.lootheroes
      iTunes Store Link: https://apps.apple.com/us/app/loot-heroes-fantasy-rpg-games/id6642699678?uo=4


      Hack Features:
      - Freeze Currencies
      - God Mode -> Traps still cause damage.
      - One-Hit Kill
      - All Heroes Unlocked
      - All Skins Unlocked
      - No Skill Cooldown
      - No Ads

      VIP
      - Unlimited Currencies -> Earn some.
      - Auto Win
      - Battle Pass Unlocked
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 114 replies
    • Loot Heroes v1.6.9 +10 Cheats [ Unlimited Currencies ]
      Modded/Hacked App: Loot Heroes By BoomBit, Inc.
      Bundle ID: com.bbp.lootheroes
      iTunes Store Link: https://apps.apple.com/us/app/loot-heroes/id6642699678?uo=4


      Hack Features:
      - Freeze Currencies
      - God Mode -> Traps still cause damage.
      - One-Hit Kill
      - All Heroes Unlocked
      - All Skins Unlocked
      - No Skill Cooldown
      - No Ads

      VIP
      - Unlimited Currencies -> Earn some.
      - Auto Win
      - Battle Pass Unlocked
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 256 replies
    • Nightfall: Kingdom Frontier TD v1.0.404 +8 Jailed Cheats [ Currencies ]
      Modded/Hacked App: Nightfall: Kingdom Frontier TD By Fansipan Limited
      Bundle ID: com.fansipan.nightfall.tower.simulation.strategy.td.game
      iTunes Store Link: https://apps.apple.com/us/app/nightfall-kingdom-frontier-td/id6621272416?uo=4


      Hack Features:
      - God Mode
      - Unlimited In-Game Coins -> Will increase instead of decrease.
      - Unlimited Currencies -> Will increase instead of decrease.
      - No Ads
      - Add 1K Currency -> Head over to Settings and toggle the Discord button. [ VIP ]
      - Unlock All Features -> Head over to Settings and toggle the Discord button. [ VIP ]
      - Unlock All / Everything ->  Head over to Settings and toggle the Discord button. [ VIP ]
      - Complete Tutorial -> Head over to Settings and toggle the Discord button. [ VIP ]


      Jailbreak required hack(s): [Mod Menu Hack] Nightfall: Kingdom Frontier TD v1.0.41 +8 Cheats [ Unlimited Currencies ] - Free Jailbroken Cydia Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 95 replies
    • Dawn of Ages: Medieval Games v2.0.5 +5 Jailed Cheats [ Damage & Defence ]
      Modded/Hacked App: Dawn of Ages: total war battle By BoomBit, Inc.
      Bundle ID: com.stratospheregames.dawnofages
      App Store Link: https://apps.apple.com/us/app/dawn-of-ages-total-war-battle/id6477473268?uo=4

       


      🤩 Hack Features

      - Damage Multiplier
      - Defence Multiplier
      - God Mode
      - Dumb Enemy
      - Premium Enabled
        • Agree
        • Like
      • 54 replies
    • Dawn of Ages: Medieval Games v2.0.5 +5 Cheats [ Damage & Defence ]
      Modded/Hacked App: Dawn of Ages: total war battle By BoomBit, Inc.
      Bundle ID: com.stratospheregames.dawnofages
      App Store Link: https://apps.apple.com/us/app/dawn-of-ages-total-war-battle/id6477473268?uo=4

       
       

      🤩 Hack Features

      - Damage Multiplier
      - Defence Multiplier
      - God Mode
      - Dumb Enemy
      - Premium Enabled
        • Thanks
        • Winner
        • Like
      • 32 replies
    • Goblins Wood: Tycoon Idle Sim v2.49.1 +1++ Jailed Cheat [ Unlimited Currencies ]
      Modded/Hacked App: Goblins Wood: Tycoon Idle Sim By ProGamesLab LTD
      Bundle ID: idle.goblins.wood.tycoon
      iTunes Store Link: https://apps.apple.com/us/app/goblins-wood-tycoon-idle-sim/id6446766326?uo=4


      Hack Features:
      - Unlimited Currencies -> Will increase instead of decrease.


      Jailbreak required hack(s): [Mod Menu Hack] Goblins Wood: Tycoon Idle Sim v2.42.0 +1++ Cheat [ Unlimited Currencies ] - Free Jailbroken Cydia Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Agree
        • Thanks
        • Winner
        • Like
      • 26 replies
    • Goblins Wood: Tycoon Idle Sim v2.49.1 +1++ Cheat [ Unlimited Currencies ]
      Modded/Hacked App: Goblins Wood: Tycoon Idle Sim By ProGamesLab LTD
      Bundle ID: idle.goblins.wood.tycoon
      iTunes Store Link: https://apps.apple.com/us/app/goblins-wood-tycoon-idle-sim/id6446766326?uo=4


      Hack Features:
      - Unlimited Currencies -> Will increase instead of decrease.


      Non-Jailbroken & No Jailbreak required hack(s): [IPA Mod Menu] Goblins Wood: Tycoon Idle Sim v2.42.0 +1++ Jailed Cheat [ Unlimited Currencies ] - Free Non-Jailbroken IPA Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Agree
        • Winner
        • Like
      • 33 replies
    • Nightfall: Kingdom Frontier TD v1.0.404 +8 Cheats [ Currencies ]
      Modded/Hacked App: Nightfall: Kingdom Frontier TD By Fansipan Limited
      Bundle ID: com.fansipan.nightfall.tower.simulation.strategy.td.game
      iTunes Store Link: https://apps.apple.com/us/app/nightfall-kingdom-frontier-td/id6621272416?uo=4


      Hack Features:
      - God Mode
      - Unlimited In-Game Coins -> Will increase instead of decrease.
      - Unlimited Currencies -> Will increase instead of decrease.
      - No Ads
      - Add 1K Currency -> Head over to Settings and toggle the Discord button. [ VIP ]
      - Unlock All Features -> Head over to Settings and toggle the Discord button. [ VIP ]
      - Unlock All / Everything ->  Head over to Settings and toggle the Discord button. [ VIP ]
      - Complete Tutorial -> Head over to Settings and toggle the Discord button. [ VIP ]


      Non-Jailbroken & No Jailbreak required hack(s): [IPA Mod Menu] Nightfall: Kingdom Frontier TD v1.0.41 +8 Jailed Cheats [ Unlimited Currencies ] - Free Non-Jailbroken IPA Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 106 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines