Jump to content
Ted2

Tutorial IDA + LLDB Tutorial [Noob Friendly]

90 posts in this topic

Recommended Posts

1 hour ago, Ted2 said:

Watchpoints don't work on gdb. Gdb is connects within seconds, lldb not.  Lldb supports arm64, which gdb doesn't

i was wondering how you could hack sub_x games on android , there is gdb for android but i am not sure if it can ..

Share this post


Link to post
Share on other sites

For the life of me i can get a debug connection between PC or Mac and the device.

PC-

ifunbox- cant find the port for usb tunnel or for the ssh terminal

Putty- connects but can nothing with it

MAC-

ifunbox- Doesn't have any tools with it

Cyberduck connects but have the whole Wine Bottle/ Parallel issue

 

This is the main bit i'm having issues with am unable to do anything further until i can get a connect and lldb working with eathother.

GDB on the device never continues. Just sits there saying continue... i go to app the which freezes ,then the whole iPad and have to rebooted and never continues. 

Share this post


Link to post
Share on other sites
6 minutes ago, BigDaddy284 said:

For the life of me i can get a debug connection between PC or Mac and the device.

PC-

ifunbox- cant find the port for usb tunnel or for the ssh terminal

Putty- connects but can nothing with it

MAC-

ifunbox- Doesn't have any tools with it

Cyberduck connects but have the whole Wine Bottle/ Parallel issue

 

This is the main bit i'm having issues with am unable to do anything further until i can get a connect and lldb working with eathother.

GDB on the device never continues. Just sits there saying continue... i go to app the which freezes ,then the whole iPad and have to rebooted and never continues. 

Will make a tutorial on how to do on windows soon (create a port). On mac, you just need terminal. I linked a mac tutorial, in the requirements. Have a look at that :)

Share this post


Link to post
Share on other sites
8 minutes ago, Ted2 said:

Will make a tutorial on how to do on windows soon (create a port). On mac, you just need terminal. I linked a mac tutorial, in the requirements. Have a look at that :)

Yeah but Mac one no good to me really as then i have issue with parallels and wine bottle, even more of a headache.

Have been trying on my boys PC all afternoon but just cant get it going. 

Gonna grab myself a windows laptop this week so if you could make a tutorial on SSH connection, setup Debug on device and PC (as it says it cant find the command), then how that all connects to lldb. If we could get all that in one place would be great.

Sometime these links to other tutorial lead us on a goose chase which ends up installing 15 different apps which weren't even mention on tutorial i started on or actually needed at all.

 

Dont get me wrong this is an awesome guide for noobs like me, i'm just stuck at this one point. And it's the same point that made me stop after 2 weeks of trying last month but i want to get it working so i can learn and start building hacked apps.

Edited by BigDaddy284

Share this post


Link to post
Share on other sites
Just now, BigDaddy284 said:

Yeah but Mac one no good to me really as then i have issue with parallels and wine bottle, even more of a headache.

Have been trying on my boys PC all afternoon but just cant get it going. 

Gonna grab myself a windows laptop this week so if you could make a tutorial on SSH connection, setup Debug on device and PC (as it says it cant find the command), then how that all connects to lldb. If we could get all that in one place would be great.

Sometime these links to other tutorial lead us on a goose chase which ends up installing 15 different apps which weren't even mention on tutorial i started on or actually needed at all.

 

Dont get me wrong this is an awesome guide for noobs like me, i'm just stuck at this one point. And it's the same point that made me stop after 2 weeks of trying the month but i want to get it working so i can learn and start building hacked apps.

I'm gonna make the tutorial right now.

Share this post


Link to post
Share on other sites

Great tutorial, thanks a lot... this is good one.. i hope you will make good one too for advanced also you are doing this REALLY GOOD, so i hope you will make for Arm64 too... hope that advanced one is coming soon...

RESPECT+++

just change this in tutorial to be perfect...

"Alright, so we want to know the ida offsets of the gameplayer addresses we have."

its not offset, its address..

offset in Ida is at bottom..

thanks man... ❤❤❤

PID= Process ID :)

this need to be edited also,,,

" The first offset, is the ida hex offset & the second is the hacked offset" this

" The first offset, is the ida hex offset & the second is the hacked HEX" to this

@Ted2

Edited by Goran

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Similar Content

    • By Kyle2100
      This will be an updated version of my other tutorial to help better understand the process and help with any errors. 
       
      Items that will be needed:
      PC/Mac
      ios device running 10.x+
      Nonce Setter 
      ios 11.3.1 shsh blob 
      ios 11.3.1 ipsw 
      ios 11.4.1 ipsw 
      FutureRestore 
      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      What is a Nonce setter? 
      Lets you set your boot-nonce so you can restore with saved blobs.
      iOS 10 nonce setter: https://mega.nz/#!EzwABYwA!_RAT-rlQrhTUrXIXBLrSqhNAlV35Nsr7pv1Ma6Au5yI
       
      iOS 11 Nonce Setter: 
      Download IPA file (Official website
      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      Setting The Nonce
      How to set Nonce in iOS 11.1.2

      Step 1: Connect your device to your computer.

      Step 2: Download and unzip Cydia Impactor, select Impactctor.exe, then you need to drop and drag Nonce. ipa to Cydia Impactor.

      Step 3: Enter your Apple ID and passcode wait till this the installation is complete.

      Step 4: Then there should be a Nonce app on your iPhone. Go to Settings app -> General -> Profile -> find your Apple ID and click Trust.  

      Step 5: Continue your operation till the Root Status turns into YES.

      Step 6: Back to your PC, open the SHSH 2 blobs you have saved with Notepad or other third-party software.

      Step 7: Search generator then you’ll find its value between <string> value </string>. Copy the value. 

      Step 8: Back to your iOS device, launch NonceSet1112 app, paste the value in SET/CHANGE NONCE under boot-nonce, the click Save/Restore Now. 
      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      Set Nonce with terminal
      Make sure you have:
      MTerminal from Cydia Valid shsh2 blob(s) for iOS 10.2 (or whatever firmware you want to be able to restore to. Computer (or filza, but only gonna have instructions for a computer. You'd pretty much just do everything I say to do on the computer, but in filza) Instructions:
      1) Move shsh2 blob(s) to computer
      2) On Windows, open your blob, or a blob if you have multiple, with notepad. On Mac, change the extension from "shsh2" to "plist" (make sure you change it back to shsh2 on Mac when you're done!)
      3) Scroll to the bottom and look for the word generator, to the right should be a code that as far as I know always starts with 0x, this is your nonce generator for that blob. On Windows you can also click ctrl + f and search "generator" and it will take you to it automatically (not sure how to do this on Mac if it's even possible).
      4) in MTerminal sign into root by typing "su" then click enter and type in your password (default is "alpine", so if you haven't changed it this is what your password is)
      5) type "nvram com.apple.System.boot-nonce=your generator" without the quotations
      6) type "nvram -p" without the quotations
      If all went well you should something similar to this when you run "nvram -p"
      backlight-level <your backlight level> com.apple.System.boot-nonce <your generator> boot-args auto-boot true com.apple.System.tz0-size <your tz0 size? Not exactly sure what this is> <your username>:/var/mobile root#
      If you see something like this
      <your username>:/var/mobile root# nvram -p oblit-begins OblitType: ObliterateDataPartition. No reason given. obliteration handle_message: Obliteration Complete backlight-level <your backlight level> com.apple.System.boot-nonce <your generator> boot-args auto-boot true com.apple.System.tz0-size <your tz0 size? Not exactly sure what this is> <your username>:/var/mobile root#
      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      What is a IPSW?
      IPSW''' is a file format used in iTunes to install iOS firmware.  All Apple Inc.Apple devices share the same IPSW file format for iOS firmware, allowing users to Flashing technology flash their devices through iTunes on OS X and Windows.
      Where can I download the ipsw?
      ipsw.me 
      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      What is FutureRestore??
      futurerestore is a hacked up idevicerestore wrapper, which allows manually specifying SEP and Baseband for restoring
       
      Where can I download FutureRestore?
      https://github.com/encounter/futurerestore/releases
      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
       
      ok, now that you know what everything is and have downloaded it all lets begin.
       
      1. Open CMD/Terminal and cd to the future restore folder (I named mine futurerestore_windows)
      example:
      cd desktop/futurerestore_windows
      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      2. Open the future restore folder and drag the futurerestore.exe into the cmd
      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      3. Next type this command
      -t (drag blob) -i (drag 11.4.1 ipsw) - -latest-baseband (drag 11.3.1 ipsw) 
      On devices with no sim (iPad/iPod) where it says latest baseband type:
      - -no-baseband 
      when I say drag “item” that means drag the file from the desktop into the cmd/terminal and every time you do that hit space before entering anything else
      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      4. Hit enter and the process will begin 
       
      CONGRATULATIONS YOU ARE ON IOS 11.3.1

       
      if if you have any issues or errors send me a message and I can help you resolve it 
    • By EsssKay
      So i was playing and my energy went to -21474353 something around that number BUT I FOUND A FIX FOR IT
      If your energy is stuck and you cant "fast travel" anywhere go to travel and it will ask you do you want to buy "enough" energy for 25 coins.. Proceed and buy that and it will reset your energy and also gives you 25 coins cause ofd the coin hack
      I found this out myself so if anyojne needs help let me know 
      DISCLAIMER: IM NOT 100% SURE IT IF WORKS IF YOUR ENERGY IS AT +100K +2BILLION as that has not happened to me 
      Hope this helps
      ~EsssKay
    • By SadNess1706
      Requirements:
      NewTerm
      GameGem 1.5
       
      Tutorial (Step by Step)

      Hidden Content
      React or reply to this topic to see the hidden content. More info
  • Recently Browsing   0 members

    No registered users viewing this page.


    • Administrator |
    • Global Moderator  |
    • Moderator  |
    • ViP Plus |
    • ViP |
    • Cheater  |
    • Modder  |
    • Novice Cheater |
    • Rookie Modder |
    • Contributor |
    • Senior Member |
    • Member |
×

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.