Help/Support arm64 Hacking Questions

May 24, 2017

since I have to accept that 64 bit hacking is the future, I need to learn arm64. But first I have a few questions:

1. Every time you want to breakpoint, do you have to add the ASLR bias to the offset?

2. Do watchpoints work on arm64?

3. Do you have to wait for LLDB to process a 64 bit binary?

4. What is the 64 bit equivalent to r7?

@ZahirSher @Goggwell

Updated May 24, 2017 by Guest

0xygen · May 24, 2017

1. Every time you want to breakpoint, do you have to add the ASLR bias to the offset?
No clue sorry Dont do lldb hacking

2. Do watchpoints work on arm64?
They should, @cz1993 does em.

3. Do you have to wait for LLDB to process a 64 bit binary?
No clue but you will need to thin it (arm64 binary only) ? So it should process it logically?

4. What is the 64 bit equivalent to r7?
I use w23, x23

Updated May 24, 2017 by ZahirSher

cz1993 · May 25, 2017

1 hour ago, ZahirSher said:

1. Every time you want to breakpoint, do you have to add the ASLR bias to the offset?
No clue sorry Dont do lldb hacking

2. Do watchpoints work on arm64?
They should, @cz1993 does em.

3. Do you have to wait for LLDB to process a 64 bit binary?
No clue but you will need to thin it (arm64 binary only) ? So it should process it logically?

4. What is the 64 bit equivalent to r7?
I use w23, x23

@ZahirSher

1. Every time you want to breakpoint, do you have to add the ASLR bias to the offset?

yes like a armv7

2. Do watchpoints work on arm64?

yes. most of times works

3. Do you have to wait for LLDB to process a 64 bit binary?

what mean wait lldb? but i know not need to thin the arm64 binary. i tried. works too but if armv7 install the hack will not works because we hack the arm64 binary.

4. What is the 64 bit equivalent to r7?

this better read the register. sometimes is x13,w13,w15,w15.

all my hack i use your mod menu @shmoo . but sometimes got some issue with 2-byte hex. if you have some new version let me know thx!!

Updated May 25, 2017 by cz1993

Joka · May 25, 2017

1 minute ago, cz1993 said:

@ZahirSher

1. Every time you want to breakpoint, do you have to add the ASLR bias to the offset?

yes like a armv7

2. Do watchpoints work on arm64?

yes. most of times works

3. Do you have to wait for LLDB to process a 64 bit binary?

what mean wait lldb? but i know not need to thin the arm64 binary. i tried. works too but if armv7 install the hack will not works because we hack the arm64 binary.

4. What is the 64 bit equivalent to r7?

this better read the register. sometimes is x13,w13,w15,w15.

all my hack i use your mod menu @shmoo . but sometimes got some issue with 2-byte offset. if you have some new version let me know thx!!

How tf...

FinnLord · May 25, 2017

14 minutes ago, Joka said:

How tf...

You're just dumb...

Joka · May 25, 2017

Just now, FinnLord said:

You're just dumb...

Okay mate.

0xygen · May 25, 2017

9 minutes ago, FinnLord said:

You're just dumb...

Joka · May 25, 2017

1 hour ago, ZahirSher said:

1. Every time you want to breakpoint, do you have to add the ASLR bias to the offset?
No clue sorry Dont do lldb hacking

2. Do watchpoints work on arm64?
They should, @cz1993 does em.

3. Do you have to wait for LLDB to process a 64 bit binary?
No clue but you will need to thin it (arm64 binary only) ? So it should process it logically?

4. What is the 64 bit equivalent to r7?
I use w23, x23

Like you know what you're on about

CorruptedHxR · May 25, 2017

1. Every time you want to breakpoint, do you have to add the ASLR bias to the offset?

Yes you do, like armv7

2. Do watchpoints work on arm64?

I've tried yes but sometimes they don't, I don't rely too much on them.

3. Do you have to wait for LLDB to process a 64 bit binary?

For me, yes it has to. It takes long atleast for me though.

4. What is the 64 bit equivalent to r7?

These work for me: x13, w13, w15, w15

Bossx2 · May 25, 2017

1 hour ago, CorruptedHxR said:

1. Every time you want to breakpoint, do you have to add the ASLR bias to the offset?

Yes you do, like armv7

2. Do watchpoints work on arm64?

I've tried yes but sometimes they don't, I don't rely too much on them.

3. Do you have to wait for LLDB to process a 64 bit binary?

For me, yes it has to. It takes long atleast for me though.

4. What is the 64 bit equivalent to r7?

These work for me: x13, w13, w15, w15