Jump to content

[TUTORIAL] How To use GikDbg - LLDB for Windows!


10 posts in this topic

Recommended Posts

Updated

What is GikDbg?
GikDbg is a mobile platform assembly-level debugger, which is an application debugging tool for security researchers.It is based on: OllyDbg (32-bit assembler level analysing debugger for Microsoft? Windows); GDB (GDB, the GNU Project debugger); LLVM (collection of modular and reusable compiler and tool-chain technologies).
 

What features can GikDbg support?

  • ELF / Mach-O executable file static analysis;
  • Android / iOS App dynamic debugging;
  • Android / iOS remote console;
  • ARM assembler;
  • ARM disassembler;
  • Device file uploading and downloading;
  • Built-in GDB and LLDB;
  • Support for memory breakpoint, software breakpoint, conditional breakpoint;
  • Support for multi-threaded debugging;
  • Support for assembly code level file patching.

Download GikDbg

In this tutorial we will describe how to use the debugger gikdbg iOS App, App calculator explain our system as an example to explain the operation and Step by step, as well as some notes here.

 

Step 0. Front Description

 

Mobile client: iPhone 5, iOS 7.0.4, gikir_iserver v1.1.build140520.1;
PC side: ParallelDesktop virtual machine, Windows 8.0, gikdbg v1.1.build140520.1; 

 

Step 1. Connect the device.

Click on the icon for the phone side gikir_iserver run the service program, PC-side execution iDebug / Device / Login (USB) menu, get the following output shows a successful connection:
app-connect-300x9.jpg

If the situation can not connect appears in this step, please check them one by one:

1) Is there a process before lldb.exe left hand to kill and then restart gikdbg connection;
2) whether the 6080 port gikir_iserver used was left before gikir_iserver_root or / bin / sh process takes manually kill or restart the device and then restart gikir_iserver;
3) Are there other programs that use the Apple USB drive services and gikdbg conflicts, such procedures manual to kill and then restart gikdbg connection.

After the connection is successful, we can choose a different debug mode by iDebug / Option / Debugger, their characteristics are as follows:

GDB mode - debugging process equipment on 32 main thread or when debugging is recommended to use the specified function, the process of debugging symbols provided by gikdbg;
LLDB mode - recommended depth debugging process, this model is loaded for a long time, LLDB can analyze the information it needs some symbols, symbolic debugging process by gikdbg and lldb;
LLDB FAST mode - when the confirmatory debugging recommended, this mode load time is short, the process of debugging symbols provided by gikdbg. This mode is increased relative to the GDB mode debugging 32 64 equipment and multi-threaded code debugging features.

 

Step 2. Select the App Process
In iDebug / File / Attach menu pop-up window in the process list to find the calculator process:
app-proclist-300x193.jpg
Double-click or click Attach complete step process of selection;

 

Step 3. determine the patch operation
If this is the first time to debug the App, the confirmation dialog box will pop up as follows:
app-patch-300x173.jpg

Patch App for initial commissioning of conduct are:
1) Delete MH_PIE logo to process each time you load the base is fixed;
2) Record the UUID value of App;
3) If it is FAT formatted App disabled lowest and the highest schema version;
4) If it is then decrypt the encrypted App App;
5) into debugging aids dynamic library gikir_iserver_injecter.dylib;

You can patch above the list of processes and the console menu program list, right-of unpatch removed App restored to its original state before the patch.
If you choose to cancel will not be able to debug App, if you choose determines the implementation of the operation and return the entire patch App folder to the $ (GIKDBG) / iosapp / encrypted directory, decrypted App executable file back to $ (GIKDBG) / iosapp / decrypted directory. At this point can be decrypted executable statically analyzed by ida or gikdbg.
After the patch properly executed will be prompted to restart the App:
app-patch-ok-300x215.jpg
 
After the restart App repeat Step2 enter Step4.

 

Step 4. Mount App Process
app-attaching-300x170.jpg

This step GDB and LLDB FAST mode will be faster, LLDB mode will wait about 2-10 minutes, according to the size and complexity of the App;
If a long time (5 minutes) to wait for the main window yet into the CPU, you can manually cancel the wait.

 

Step 5. The main window into the Cpu

 

All goes as follows CPU will enter the main interface:
app-cpumain-300x190.jpg

 

Step 6. Select the main module
Execution iDebug / View / Module get the following window:
app-modlist-300x147.jpg
Select the main module and then double jump to the main module CPU window.

 

Step 7. Check the main module information
In the main module CPU to perform the disassembly listing window Right View object and View mach-o can be static data analysis:
app-maininfo-300x212.jpg

 

Step 8. breakpoint debugging
F2 function found under the rear break and we are interested in running, hit the breakpoint interface:
app-hitbkpt-300x170.jpg
This time you can debug function that we are interested in, and have the following precautions:
GDB mode - likely F7 F8 will always remain in the breakpoint address, this is the GDB Bug, you can cancel the breakpoint and then F7 F8 resolved;
LLDB mode --F8 can not single step through the function call, this is LLDB the Bug, can be resolved through F4 to the specified address.

 

Step 9. Check objc message call chain
If we want to see the news of the call chain App can be realized by $ detectobjc command:
app-detectobjc-300x189.jpg
This feature is not available in LLDB FAST mode. If you want to customize the output, Hook can be injected into the process of debugging functions in a dynamic library gikir_iserver_injecter.dylib:
int filter_objc_message (const char * cls, const char * sel);
cls is the class name, sel is the message name, return 0 printout, return a representation ignored;

Posted

Wow u r good tut writer .. Good job

He just translated this from Chinese to English via Google Translate and just slammed it on the forum. I did some cleaning up and improved it. -_-

Posted (edited)

Is this working on 8.4?

 

edit: connects fine, but cant decrypt the binary most likely on 64 bit devices.

Updated by _Ekin_
Posted

not sure what to do the server on the device keeps crashing as soon as I open it is it because I'm on ios 9.3.3

 

I'm having the same issues, the server crashes on 9.0, is there a solution for this?

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • Merge & Blast: Dream Island v2.29.0 [ +2 Cheats ] Auto Win
      Modded/Hacked App: Merge & Blast: Dream Island By Dreamo, Inc.
      Bundle ID: com.dreamo.woodyblast
      iTunes Store Link: https://apps.apple.com/us/app/merge-blast-dream-island/id1668748189?uo=4


      🤩 Hack Features

      - Auto Win
      - Coin + Moves [ Disable After Get ]




      🍏 For Non-Jailbroken & No Jailbreak required hacks: https://iosgods.com/forum/79-no-jailbreak-section/
      🤖 Modded Android APKs: https://iosgods.com/forum/68-android-section/
        • Like
      • 20 replies
    • Merge & Blast: Dream Island v2.29.0 [ +2 Jailed ] Auto Win
      Modded/Hacked App: Merge & Blast: Dream Island By Dreamo, Inc.
      Bundle ID: com.dreamo.woodyblast
      iTunes Store Link: https://apps.apple.com/us/app/merge-blast-dream-island/id1668748189?uo=4

       

      🤩 Hack Features

      - Auto Win
      - Coin + Moves [ Disable After Get ]




      🍏 Jailbreak iOS hacks: https://iosgods.com/forum/5-game-cheats-hack-requests/
      🤖 Modded Android APKs: https://iosgods.com/forum/68-android-section/
        • Thanks
        • Winner
        • Like
      • 28 replies
    • Squishmallows Match v1.1.2 [ +2 Cheats ] Auto Win
      Modded/Hacked App: Squishmallows Match By East Side Games Inc
      Bundle ID: com.eastsidegames.squishmallows
      App Store Link: https://apps.apple.com/ph/app/squishmallows-match/id6450057167?uo=4

       

      🤩 Hack Features

      - Auto Win
      - Lives [ 0 Play Unlimited ]

        • Like
      • 16 replies
    • Squishmallows Match v1.1.2 [ +2 Jailed ] Auto Win
      Modded/Hacked App: Squishmallows Match By East Side Games Inc
      Bundle ID: com.eastsidegames.squishmallows
      App Store Link: https://apps.apple.com/ph/app/squishmallows-match/id6450057167?uo=4
       

      🤩 Hack Features

      - Auto Win
      - Lives [ 0 Play Unlimited ]

        • Like
      • 20 replies
    • Meow Tower - Nonogram Puzzle v3.3.501 [ +3 Cheats ] Currency Max
      Modded/Hacked App: Meow Tower - Nonogram Puzzle By HyperBeard Inc.
      Bundle ID: com.grapetree.meowtower
      iTunes Store Link: https://apps.apple.com/us/app/meow-tower-nonogram-puzzle/id1579122980?uo=4


      🚀 Hack Features

      - ADS NO
      - Gold CANS
      - Pencil Max 
      - Hints Max
        • Thanks
        • Like
      • 10 replies
    • Meow Tower - Nonogram Puzzle v3.3.501 [ +3 Jailed ] Currency Max
      Modded/Hacked App: Meow Tower - Nonogram Puzzle By HyperBeard Inc.
      Bundle ID: com.grapetree.meowtower
      iTunes Store Link: https://apps.apple.com/us/app/meow-tower-nonogram-puzzle/id1579122980?uo=4
       

      🚀 Hack Features

      - ADS NO
      - Gold CANS
      - Pencil Max 
      - Hints Max 
        • Winner
        • Like
      • 17 replies
    • Cryptogram Word Brain Puzzle v2.11.2 [ +4 Cheats ] Auto Win
      Modded/Hacked App: Cryptogram: Word Brain Puzzle By Joyteractive Limited
      Bundle ID: com.puzzle.cryptogram
      iTunes Store Link: https://apps.apple.com/us/app/cryptogram-word-brain-puzzle/id1644099880?uo=4


      Mod Requirements:
      - Jailbroken iPhone/iPad/iPod Touch.
      - iGameGod / Filza / iMazing or any other file managers for iOS.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak.
      - PreferenceLoader (from Cydia, Sileo or Zebra).


      Hack Features:
      - Lives
      - Hint Max 
      - Auto Win [ Put Any Word ]
      - No ADS


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/


      iOS Hack Download Link:

      Hidden Content

      Download Hack
        • Agree
        • Like
      • 15 replies
    • Cryptogram Word Brain Puzzle v2.11.2 [ +4 Jailed ] Auto Win
      Modded/Hacked App: Cryptogram: Word Brain Puzzle By Joyteractive Limited
      Bundle ID: com.puzzle.cryptogram
      iTunes Store Link: https://apps.apple.com/us/app/cryptogram-word-brain-puzzle/id1644099880?uo=4

       

       

      Mod Requirements

      - Non-Jailbroken/Jailed or Jailbroken iPhone or iPad.
      - Sideloadly or alternatives.
      - Computer running Windows/macOS/Linux with iTunes installed.

       

      Hack Features

      - Lives
      - Hint Max 
      - Auto Win [ Put Any Word ]
      - No ADS


      Jailbreak required iOS hacks: https://iosgods.com/forum/5-game-cheats-hack-requests/
      Modded Android APKs: https://iosgods.com/forum/68-android-section/

       

      iOS Hack Download IPA Link


      Hidden Content

      Download via the iOSGods App
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 16 replies
    • Dragons: Rise of Berk v1.101.8 +5 Cheats
      Modded/Hacked App: Dragons: Rise of Berk By Jam City, Inc.
      Bundle ID: com.ludia.dragons
      iTunes Store Link: https://apps.apple.com/us/app/dragons-rise-of-berk/id667461862?uo=4


      Hack Features:
      - Free Shopping (shows original cost but able to purchase regardless)
      - Free Skipping
      - Free Odin's Market Shopping
      - Odin's Market Packs Never Reduce
      - Currency Hack [Spend to Gain - reverts to zero on next launch]
      - Enable Rider's Club


      Non-Jailbroken & No Jailbreak required hack(s):  https://iosgods.com/topic/79228-dragons-rise-of-berk-v1794-4-cheats-for-jailed-idevices/


      iOS Hack Download Link: https://iosgods.com/topic/139612-dragons-rise-of-berk-v1794-6-cheats/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 705 replies
    • Dragon City - Breed & Battle! Cheats v25.11.6 +4
      Modded/Hacked App: Dragon City - Breed & Battle! By Socialpoint
      Bundle ID: es.socialpoint.dragoncity
      iTunes Store Link: https://apps.apple.com/us/app/dragon-city-breed-battle/id561941526?uo=4


      Hack Features:
      - One Hit Kill
      - God Mode 
      - Auto-Battle Unlocked

      This hack is using the new iOSGods Auto Updater. The hack will automatically update itself to the current app version you have installed on your iDevice.
      Note:
      Everything is linked with enemies, please use it carefully

      This hack works on the latest x64 or ARM64 & ARM64e iDevices: iPhone 5s, 6, 6 Plus, 6s, 6s Plus, 7, 7 Plus, 8, 8 Plus, X, Xr, Xs, Xs Max, 11, 11 Pro, 11 Pro Max, 12, 12 Pro, 12 Pro Max, 12 Mini, 13, 13 Pro, 13 Pro Max, 13 Mini, 14, 14 Plus, 14 Pro, 14 Pro Max, SE, iPod Touch 6G, 7G, iPad Air, Air 2, iPad Pro & iPad Mini 2, 3, 4, 5, 6 and later.


      iOS Hack Download Link: https://iosgods.com/topic/129371-dragon-city-mobile-cheats-auto-updating-3-god-mode-one-hit-kill/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 2,210 replies
    • PewDiePie's Tuber Simulator Cheats v2.61.0 +3
      Modded/Hacked App: PewDiePie's Tuber Simulator By Outerminds Inc.
      Bundle ID: com.outerminds.tubular
      iTunes Store Link: https://apps.apple.com/us/app/pewdiepies-tuber-simulator/id1093190533?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Infinite Subscriber
      - Infinite Views
      - Infinite Bux

      NOTE: Please complete tutorial first before enabling the hacks otherwise it won't work

      NOTe 2: Please make a youtube video to get some views first (without hack) then before enable infinite views

       

      Non-Jailbroken Hack: https://iosgods.com/topic/86411-pewdiepies-tuber-simulator-v2450-jailed-cheats-3/

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/86366-pewdiepies-tuber-simulator-cheats-v2460-3/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 1,160 replies
    • Dopamine Hit Cheats v3.6.0 +5
      Modded/Hacked App: Dopamine Hit By Mobigames INC.
      Bundle ID: com.mobigames.fakeroem
      App Store Link: https://apps.apple.com/us/app/dopamine-hit/id6736514242?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - God Mode
      - Multiply Attack
      - No Skills Cooldown
      - Freeze Currencies
      - PREMIUM

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/196879-dopamine-hit-cheats-v2120-5/
        • Agree
        • Thanks
        • Winner
        • Like
      • 52 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines