Jump to content

GDB Error: Segmentation fault: 11


Go to solution Solved by Rook,

20 posts in this topic

Recommended Posts

@@DiDA

i got address "0x31b68e78" of ptrace follow your way.and i load binary to IDA,then i try to search for it.but there isnt the address which i found.any ideas ?

 

 

 

"Breakpoint 1 at 0x31b68e78

Pending breakpoint 1 - "ptrace" resolved

warning: Unrecognized osabi 0 in arm_set_osabi_from_host_info"

@@DiDA

i got address "0x31b68e78" of ptrace follow your way.and i load binary to IDA,then i try to search for it.but there isnt the address which i found.any ideas ?

 

 

 

"Breakpoint 1 at 0x31b68e78

Pending breakpoint 1 - "ptrace" resolved

warning: Unrecognized osabi 0 in arm_set_osabi_from_host_info"

Search for ptrace/syscall/sysctl and xref it to see how many there are.

 

If the app has sysctl, look for the one with memset, getpid near it and if you see a MOVS R1, #0x1F, NOP it.

Search for ptrace/syscall/sysctl and xref it to see how many there are.

 

If the app has sysctl, look for the one with memset, getpid near it and if you see a MOVS R1, #0x1F, NOP it.

i`ve found this,but without "MOVS R1, #0x1F",

and is it must me the same as "MOVS R1, #0x1F"

 
 
ADD             R7, SP, #0xC
STMFD           SP!, {R8,R10}
SUB             SP, SP, #0x20C
BIC             SP, SP, #7
MOV             R5, R1
MOV             R1, #0x1EC------->is this correct one??
MOV             R6, R0
STR             R1, [sP,#0x220+var_28]
MOV             R0, R5  ; void *
MOV             R1, #0  ; int
MOV             R4, R2
BL              _memset
MOV             R0, #1
MOV             R1, #0xE
STR             R0, [sP,#0x220+var_24]
MOV             R8, #0
STR             R1, [sP,#0x220+var_20]
MOV             R1, #4  ; u_int
STR             R0, [sP,#0x220+var_1C]
ADD             R0, SP, #0x220+var_24 ; int *
STR             R6, [sP,#0x220+var_18]
ADD             R6, SP, #0x220+var_218
ADD             R3, SP, #0x220+var_28 ; size_t *
STR             R8, [sP,#0x220+var_220] ; void *
MOV             R2, R6  ; void *
STR             R8, [sP,#0x220+var_21C] ; size_t
BL              _sysctl
CMP             R0, #0
BLT             loc_19531E4
Updated by zzmutu

i found MOVS            R1, #0x1F      app crashed when i changed to whatever values or nop it .any ideas ?

__text:00F36D08                 PUSH            {R4-R7,LR}
__text:00F36D0A                 ADD             R7, SP, #0xC
__text:00F36D0C                 PUSH.W          {R8,R10}
__text:00F36D10                 SUB.W           SP, SP, #0x20C
__text:00F36D14                 MOV             R5, R0
__text:00F36D16                 MOV             R0, #(___stack_chk_guard_ptr - 0xF36D24)
__text:00F36D1E                 MOV             R10, R1
__text:00F36D20                 ADD             R0, PC ; ___stack_chk_guard_ptr
__text:00F36D22                 MOVS            R4, #0
__text:00F36D24                 MOVS            R1, #0x1F     nop or changed to any values different 
__text:00F36D26                 MOVS            R2, #0
__text:00F36D28                 LDR.W           R8, [R0] ; ___stack_chk_guard
__text:00F36D2C                 MOVS            R3, #0
__text:00F36D2E                 LDR.W           R0, [R8]
__text:00F36D32                 STR             R0, [sP,#0x220+var_18]
__text:00F36D34                 MOVS            R0, #0x1A ; int
__text:00F36D36                 STR             R4, [sP,#0x220+var_220]
__text:00F36D38                 BLX             _syscall
__text:00F36D3C                 ADD             R6, SP, #0x220+var_204
__text:00F36D3E                 MOV.W           R0, #0x1EC
__text:00F36D42                 STR             R0, [sP,#0x220+var_218]
__text:00F36D44                 MOVS            R1, #0  ; int
__text:00F36D46                 MOV             R0, R6  ; void *
__text:00F36D48                 MOV.W           R2, #0x1EC ; size_t
__text:00F36D4C                 BLX             _memset
__text:00F36D50                 MOVS            R0, #1
__text:00F36D52                 MOVS            R1, #0xE
__text:00F36D54                 STR             R0, [sP,#0x220+var_214]
__text:00F36D56                 STR             R1, [sP,#0x220+var_210]
__text:00F36D58                 STR             R0, [sP,#0x220+var_20C]
__text:00F36D5A                 BLX             _getpid
__text:00F36D5E                 STR             R0, [sP,#0x220+var_208]
__text:00F36D60                 ADD             R0, SP, #0x220+var_214 ; int *
__text:00F36D62                 ADD             R3, SP, #0x220+var_218 ; size_t *
__text:00F36D64                 MOVS            R1, #4  ; u_int
__text:00F36D66                 MOV             R2, R6  ; void *
__text:00F36D68                 STR             R4, [sP,#0x220+var_220] ; void *
__text:00F36D6A                 STR             R4, [sP,#0x220+var_21C] ; size_t
__text:00F36D6C                 BLX             _sysctl
__text:00F36D70                 CMP             R0, #0

 

 

On 11/23/2014 at 1:13 AM, DiDA said:

World At Arms has Anti-Debugging Protection (ptrace)

 

You need to disable ptrace in order to debug the process. Disable ptrace by doing this:

 

Open Terminal and type in:


gdb /User/Containers/Bundle/Application/xxxxxx-xxxx-xxx-xxx-xxxxxx/MCT.app/MCT

Then:


break ptrace

Then:


run

Terminal will show you the Offset. Go to the offset in IDA and NOP ptrace and then attach MCT again normally.

 

More info: http://www.coredump.gr/articles/ios-anti-debugging-protections-part-1/

 

Tutorial by shmoo: https://iosgods.com/topic/26721-breaking-securityhow-to-disable-syscall-anti-debugging-protection/

is it same command for LLDB??? and is there some option in ida pro to remove that permanet....?

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Unfortunately, your content contains terms that we do not allow. Please edit your content to remove the highlighted words below. For more information, please read our Posting Guidelines.
Reply to this topic... Posting Guidelines

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Our picks

    • Immortal Rising Cheats v2.4.9 +4
      Modded/Hacked App: Immortal Rising By MOBIRIX
      Bundle ID: com.badbeans.DarkIdle
      iTunes Store Link: https://apps.apple.com/us/app/immortal-rising/id1588863558?uo=4


      Hack Features:
      - God Mode
      - One Hit Kill
      - PREMIUM
      - Freeze Currencies*

      *Abuse = Ban


      iOS Hack Download Link: https://iosgods.com/topic/178921-immortal-rising-cheats-v222-4/
      • 163 replies
    • Travel Town - Merge Adventure Cheats v2.12.852 +1
      Modded/Hacked App: Travel Town By Magmatic Games Ltd
      Bundle ID: io.randomco.travel
      iTunes Store Link: https://apps.apple.com/us/app/travel-town/id1521236603?uo=4


      Hack Features:
      - Infinite Currencies


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/148953-travel-town-v231-jailed-cheats-1/

      iOS Hack Download Link: https://iosgods.com/topic/148951-travel-town-cheats-all-versions-1/
      • 120 replies
    • BitLife - Life Simulator Cheats v3.17.1 +2
      Modded/Hacked App: BitLife - Life Simulator by Candywriter, LLC
      Bundle ID: com.wtfapps.apollo16
      iTunes Store Link: https://apps.apple.com/us/app/bitlife-life-simulator/id1374403536?uo=4&at=1010lce4


      Hack Features:
      - Infinite Cash
      - Free Bitizen Purchase (Press Cancle) - Work for All Versions


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/84167-arm64-bitlife-life-simulator-v1412-jailed-cheats-2/


      Hack Download Link: https://iosgods.com/topic/84223-arm64-bitlife-life-simulator-cheats-all-versions-2/
        • Informative
      • 3,344 replies
    • Otherworld Three Kingdoms Cheats v1.0.22 +4
      Modded/Hacked App: Otherworld Three Kingdoms By SuperPlanet corp.
      Bundle ID: com.superplanet.samworld
      iTunes Store Link: https://apps.apple.com/us/app/otherworld-three-kingdoms/id6496345383?uo=4


      Hack Features:
      - Multiply Attack
      - Multiply Defense
      - Instant Skills


      iOS Hack Download Link: https://iosgods.com/topic/183743-otherworld-three-kingdoms-cheats-v103-3/
      • 98 replies
    • Delusion: Tactical Idle RPG Cheats v2.3.1 +3
      Modded/Hacked App: Delusion: Tactical Idle RPG By SuperPlanet corp.
      Bundle ID: com.superplanet.delusion
      iTunes Store Link: https://apps.apple.com/us/app/delusion-tactical-idle-rpg/id6496342351?uo=4


      Hack Features:
      - Multiply Attack
      - God Mode
      - Freeze Currencies

      NOTE: Do not abuse or buy ViP just for this cheats


      iOS Hack Download Link: https://iosgods.com/topic/183614-delusion-tactical-idle-rpg-cheats-v1027-3/
      • 58 replies
    • The Seven Deadly Sins: Idle Cheats v1.8.1 +4
      Modded/Hacked App: The Seven Deadly Sins: Idle By Netmarble Corporation
      Bundle ID: com.netmarble.nanarise
      iTunes Store Link: https://apps.apple.com/us/app/the-seven-deadly-sins-idle/id6469305531?uo=4


      Hack Features:
      - Multiply Attack
      - Multiply Defense
      - Modify Range


      iOS Hack Download Link: https://iosgods.com/topic/185131-the-seven-deadly-sins-idle-cheats-v101-3/
      • 86 replies
    • Hill Climb Racing 2 v1.64.2 Cheats +3
      Modded/Hacked App: Hill Climb Racing 2 By Fingersoft
      Bundle ID: com.fingersoft.hillclimbracing2
      iTunes Store Link: https://apps.apple.com/us/app/hill-climb-racing-2/id1146465836?uo=4


      Hack Features:
      - Freeze Coins
      - Freeze Gems
      - Freeze Scraps


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/108295-hill-climb-racing-2-v1611-jailed-cheats-2/


      iOS Hack Download Link: https://iosgods.com/topic/108298-hill-climb-racing-2-v1612-cheats-3/
      • 2,153 replies
    • Monster Super League By Four Thirty Three v3.8.7 - [ x Player Damage & More ]
      Modded/Hacked App: Monster Super League By Four Thirty Three
      Bundle ID: com.ftt.msleague
      iTunes Store Link: https://itunes.apple.com/us/app/monster-super-league/id1092463295


      Mod Requirements:
      - Jailbroken iPhone/iPad/iPod Touch.
      - iFile / Filza / iFunBox / iTools or any other file managers for iOS.
      - Cydia Substrate (from Cydia).
      - PreferenceLoader (from Cydia).


      Hack Features:
      - x Player Damage - x1 - 100
      - x Player Defense - x1 - 100
      - Inf.Skills

      All features are unlinked and only for you player, you!
      • 1,262 replies
    • MARVEL Puzzle Quest: Hero RPG v317.0.696394 +2 Jailed Cheats [ One-Hit Kill ]
      Modded/Hacked App: MARVEL Puzzle Quest: Hero RPG By D3PA
      Bundle ID: com.d3p.yorkMPQ
      iTunes Store Link: https://apps.apple.com/us/app/marvel-puzzle-quest-hero-rpg/id618349779


      Hack Features:
      - God Mode -> Linked. Wait until it's the enemies turn then enable this feature.
      - One-Hit Kill -> Linked. Wait until it's your turn then enable this feature.


      Jailbreak required hack(s): [Mod Menu Hack] MARVEL Puzzle Quest: Hero RPG v264.0.617994 +2 Cheats [ One-Hit Kill ] - Free Jailbroken Cydia Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
      • 91 replies
    • MARVEL Puzzle Quest: Hero RPG v317.0.696394 +2 Cheats [ One-Hit Kill ]
      Modded/Hacked App: MARVEL Puzzle Quest: Hero RPG By D3PA
      Bundle ID: com.d3p.yorkMPQ
      iTunes Store Link: https://apps.apple.com/us/app/marvel-puzzle-quest-hero-rpg/id618349779


      Hack Features:
      - God Mode -> Linked. Wait until it's the enemies turn then enable this feature. This feature will auto update itself once a new version of the app is released!
      - One-Hit Kill -> Linked. Wait until it's your turn then enable this feature. This feature will auto update itself once a new version of the app is released!


      Non-Jailbroken & No Jailbreak required hack(s): [Non-Jailbroken Hack] MARVEL Puzzle Quest: Hero RPG v264.0.617994 +1 Jailed Cheat [ One-Hit Kill ] - Free Non-Jailbroken IPA Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
      • 52 replies
    • MeChat v4.29.1 +1 Jailed Cheat [ Unlimited Gems ]
      Modded/Hacked App: MeChat By PlayMe Studio
      Bundle ID: world.playme.mechat
      iTunes Store Link: https://apps.apple.com/us/app/mechat/id1536157979
       

      Hack Features:
      - Unlimited Gems -> Will increase instead of decrease.
      - Unlimited Gems -> Earn some then uninstall this hack. DO NOT SPEND ANY GEMS WHILST THIS FEATURE IS ENABLED! [ VIP ]


      Free Jailbreak required hack(s): [Mod Menu Hack] [Free] MeChat - Love Secrets v3.3.2 +1 Cheat [ Unlimited Gems ] - Free Jailbroken Cydia Cheats - iOSGods
      ViP Jailbreak required hack(s): [Mod Menu Hack] MeChat - Love Secrets v3.3.2 +1 Cheat [ Unlimited Gems ] - ViP Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs
      • 707 replies
    • Good Pizza, Great Pizza v5.20.0 +2 Jailed Cheats [ Unlimited Currencies ]
      Modded/Hacked App: Good Pizza, Great Pizza By TAPBLAZE, LLC
      Bundle ID: com.tapblaze.pizzabusiness
      iTunes Store Link: https://apps.apple.com/us/app/good-pizza-great-pizza/id911121200?uo=4


      Hack Features:
      - Unlimited Cash
      - Unlimited Diamonds


      Jailbreak required hack(s): [Mod Menu Hack] Good Pizza, Great Pizza v5.5.6 +2 Cheats [ Unlimited Currencies ] - Free Jailbroken Cydia Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
      • 211 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines