Jump to content

13 posts in this topic

Recommended Posts

Posted

Hello,

 

I checked an App using IDA and I found an interesting line where I'd like to get the values from. The lineitself is a _strlen command which should hold the value.

 

Now I right clicked the line and did "Copy address to command line" wich gave me "0xC10C4C".

 

Then I did "b s -a 0xC10C4C" on LLDB but it just returned "Breakpoint 1: no locations (pending). WARNING: Unable to resolve breakpoint to any actual locations."

 

And when I resume the app the breakpoint won't "break", the app just continues

 

How can I get the right address to set the breakpoint?

Posted

Now I read somewhere that I would need to do "image list -o -f" to get a list of the objects.

The base address should be the value after [0] which is 0x00000000000e4000 in my case.

 

Then I went to IDA to check the line where it says __text:0002512C which is 0x2512C

 

Now I should add the 2 to get the address:

 

0x2512C + 0x00000000000e4000 = 0x10912C

 

Now when I do "b s -a 0x10912C" it says "Breakpoint 1: address = 0x000000000010912C" so it seems it found the address now.

 

When I open the app and perform an action that should trigger the breakpoint it still does not.

 

What could be the issue here?

Posted (edited)

I just tried it with GDB

 

I had to thin the app to make it work.

 

I used "info shared" to get the string with offset  (offset 0x10000) (Why is the offset different this time?)

 

Then I used this 0x10000 + 0x2512C = 0x3512C

 

Afterwards I used break *0x3512C and the breakpoint registered

 

(gdb) break *0x3512C
Breakpoint 1 at 0x3512C
 
But again the breakpoint doesn't get hit.
 
What could potentially be wrong?
 
EDIT:
 
I just hooked a function that comes after the part where I want to put a breakpoint
 
break funcname
 
and GDB returned Breakpoint 2, 0x35f9e6f8 in funcname ()
 
when I ran the App the breakpoint hit without any issues.
 
Now I think I got the wrong address.
 
GDB returned 0x35f9e6f8 as address for the function
 
When I look it up in IDA it is listed as "__picsymbolstub4:00C6F5CC"
 
so address should be 0xC6F5CC
 
When I do the math
 
0xC6F5CC + 0x10000 = 0xC7F5CC the result is totally different from 0x35f9e6f8
 
So maybe I misinterpret the pointer I got from IDA?
 
Edit 2:
 
Could it be I need to use a different base offset? info shared lists multiple files with offsets.
 
I examined the App.app/App binary in IDA and the function was there along with the pointer I need. How do I know if this function is in the main executable or in a lib?
Updated by maddo7
Posted

I just tried it with GDB

 

I had to thin the app to make it work.

 

I used "info shared" to get the string with offset  (offset 0x10000) (Why is the offset different this time?)

 

Then I used this 0x10000 + 0x2512C = 0x3512C

 

Afterwards I used break *0x3512C and the breakpoint registered

 

(gdb) break *0x3512C

Breakpoint 1 at 0x3512C

 

But again the breakpoint doesn't get hit.

 

What could potentially be wrong?

 

EDIT:

 

I just hooked a function that comes after the part where I want to put a breakpoint

 

break funcname

 

and GDB returned Breakpoint 2, 0x35f9e6f8 in funcname ()

 

when I ran the App the breakpoint hit without any issues.

 

Now I think I got the wrong address.

 

GDB returned 0x35f9e6f8 as address for the function

 

When I look it up in IDA it is listed as "__picsymbolstub4:00C6F5CC"

 

so address should be 0xC6F5CC

 

When I do the math

 

0xC6F5CC + 0x10000 = 0xC7F5CC the result is totally different from 0x35f9e6f8

 

So maybe I misinterpret the pointer I got from IDA?

 

Edit 2:

 

Could it be I need to use a different base offset? info shared lists multiple files with offsets.

 

I examined the App.app/App binary in IDA and the function was there along with the pointer I need. How do I know if this function is in the main executable or in a lib?

Did you remove ASLR?

Posted

No, I'm new to this and followed a tutorial. How would I do this? I used a cracked version of the App to begin with.

You download the game/app from itunes, import it to your phone, crack it, take the binary to ArmConverter , thin and remove ASLR

Posted

You download the game/app from itunes, import it to your phone, crack it, take the binary to ArmConverter , thin and remove ASLR

 

Should I analyze it with IDA after doing all this?

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • Bridge Constructor Studio v1.0.65 +3 Jailed Cheats [ Unlocked ]
      Modded/Hacked App: Bridge Constructor Studio By Headup GmbH
      Bundle ID: com.headupgames.bridgeconstructorstudio
      App Store Link: https://apps.apple.com/us/app/bridge-constructor-studio/id6745402280?uo=4

       
       

      🤩 Hack Features

      - Freeze Bridge
      - No Build Costs
      -- Full Game Unlocked (will show as locked)
      • 0 replies
    • Bridge Constructor Studio v1.0.65 +3 Cheats [ Unlocked ]
      Modded/Hacked App: Bridge Constructor Studio By Headup GmbH
      Bundle ID: com.headupgames.bridgeconstructorstudio
      App Store Link: https://apps.apple.com/us/app/bridge-constructor-studio/id6745402280?uo=4

       
       

      🤩 Hack Features

      - Freeze Bridge
      - No Build Costs
      -- Full Game Unlocked (will show as locked)
      • 0 replies
    • SWAT: Squad Tactics v0.8.6 [+3 Cheats]
      Modded/Hacked App: SWAT: Squad Tactics By MAD PIXEL GAMES LTD
      Bundle ID: hero.shooter.alpha.game
      iTunes Store Link: https://apps.apple.com/us/app/swat-squad-tactics/id6670252311?uo=4


      🤩 Hack Features

      - Unlimited Skipits Ticket
      - Unlimited Currency (Enable before stage and finish stage)
      - Unlimited Blueprints (Enable before stage and finish stage)
      • 5 replies
    • SWAT: Squad Tactics v0.8.6 [+3 Jailed Cheats]
      Modded/Hacked App: SWAT: Squad Tactics By MAD PIXEL GAMES LTD
      Bundle ID: hero.shooter.alpha.game
      iTunes Store Link: https://apps.apple.com/us/app/swat-squad-tactics/id6670252311?uo=4



      🤩 Hack Features

      - Unlimited Skipits Ticket
      - Unlimited Currency (Enable before stage and finish stage)
      - Unlimited Blueprints (Enable before stage and finish stage)
      • 4 replies
    • Pal Go: Tower Defense TD v0.3.91 [+7 Cheats]
      Modded/Hacked App: Pal Go: Tower Defense TD By Playwind Ltd
      Bundle ID: com.playwindgames.freedefender
      iTunes Store Link: https://apps.apple.com/us/app/pal-go-tower-defense-td/id6479316663?uo=4


       

      🚀 Hack Features

      - [VIP] Freeze Currency (Currency will not decrease when used)

      - [VIP] Currency Always Enough (Buy even when you don't have enough currency)

      - [Free] Higher Recruit Energy (Gives 500 Recruit Energy Every Wave)

      - [Free] Always Can Drag Hero

      - [Free] Skip Ads

      - [Free] No Attack Cooldown

      - [Free] Global Speed Multiplier (Enable Inside Battle)

       

      Warning


      Do not use on main account. There is a chance of ban. Not responsible for any bans.

       


      🍏 For Non-Jailbroken & No Jailbreak required hacks: https://iosgods.com/forum/79-no-jailbreak-section/
      🤖 Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      • 57 replies
    • Pal Go: Tower Defense TD v0.3.91 [+7 Jailed Cheats]
      Modded/Hacked App: Pal Go: Tower Defense TD By Playwind Ltd
      Bundle ID: com.playwindgames.freedefender
      iTunes Store Link: https://apps.apple.com/us/app/pal-go-tower-defense-td/id6479316663?uo=4


       

      Hack Features

      - [VIP] Freeze Currency (Currency will not decrease when used)

      - [VIP] Currency Always Enough (Buy even when you don't have enough currency)

      - [Free] Higher Recruit Energy (Gives 500 Recruit Energy Every Wave)

      - [Free] Always Can Drag Hero

      - [Free] Skip Ads

      - [Free] No Attack Cooldown

      - [Free] Global Speed Multiplier (Enable Inside Battle)

       

      Warning


      Do not use on main account. There is a chance of ban. Not responsible for any bans.

       

      Jailbreak required iOS hacks: https://iosgods.com/forum/5-game-cheats-hack-requests/
      Modded Android APKs: https://iosgods.com/forum/68-android-section/
      • 82 replies
    • Stand & Fight: Backpack Battle v0.9.5 Debug Menu [+10 Jailed Cheats]
      Modded/Hacked App: Stand & Fight: Backpack Battle By VERARIUM COM SERVICOS LDA ZFM
      Bundle ID: com.V.StandAndFight
      App Store Link: https://apps.apple.com/us/app/stand-fight-backpack-battle/id6740915182?uo=4



      🤩 Hack Features

      - Debug Menu

       
      • 12 replies
    • Stand & Fight: Backpack Battle v0.9.5 Debug Menu [+10 Cheats]
      Modded/Hacked App: Stand & Fight: Backpack Battle By VERARIUM COM SERVICOS LDA ZFM
      Bundle ID: com.V.StandAndFight
      App Store Link: https://apps.apple.com/us/app/stand-fight-backpack-battle/id6740915182?uo=4



      🤩 Hack Features

      - Debug Menu
      • 11 replies
    • Rupture: Immortal Slasher v0.15.6 [+3 Cheats]
      Modded/Hacked App: Rupture: Immortal Slasher By ALEKSEI KLIMOV
      Bundle ID: com.GOLEM.Immortal
      iTunes Store Link: https://apps.apple.com/us/app/rupture-immortal-slasher/id6738378630?uo=4

       

      🤩 Hack Features

      - God Mode/Never Die
      - Unlimited Currency (Add 50k every time you spend)
      - Always Can Upgrade Equipments

       
      • 12 replies
    • Rupture: Immortal Slasher v0.15.6 [+3 Jailed Cheats]
      Modded/Hacked App: Rupture: Immortal Slasher By ALEKSEI KLIMOV
      Bundle ID: com.GOLEM.Immortal
      iTunes Store Link: https://apps.apple.com/us/app/rupture-immortal-slasher/id6738378630?uo=4

       

      🚀 Hack Features

      - God Mode/Never Die
      - Unlimited Currency (Add 50k every time you spend)
      - Always Can Upgrade Equipments


      🍏 Jailbreak iOS hacks: https://iosgods.com/forum/5-game-cheats-hack-requests/
      🤖 Modded Android APKs: https://iosgods.com/forum/68-android-section/
      • 25 replies
    • Night Valley - Tower Defense v1.0.15 [+2 Jailed Cheats]
      Modded/Hacked App: Night Valley - Tower Defense By Pitaya Group, Inc, The
      Bundle ID: com.pitaya.natv
      App Store Link: https://apps.apple.com/us/app/night-valley-tower-defense/id6467846624?uo=4



      🤩 Hack Features

      - Never Die
      - Add Currency
      • 7 replies
    • Night Valley - Tower Defense v1.0.15 [+2 Cheats]
      Modded/Hacked App: Night Valley - Tower Defense By Pitaya Group, Inc, The
      Bundle ID: com.pitaya.natv
      App Store Link: https://apps.apple.com/us/app/night-valley-tower-defense/id6467846624?uo=4



      🤩 Hack Features

      - Never Die
      - Add Currency
       
      • 5 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines