|
|
|---|---|
|
|
|
|
|
|
|
|
修改没有用 我已经看到了 大佬之间的互相伤害
最后于 2019-8-14 14:01
被上海刘一刀编辑
，原因：
|
|
|
|
|
|
看大佬撕逼
|
|
|
完了，暴露了葫芦娃上海第一豪的身份 
|
|
|
|
|
|
嗯，一般也没怎么用。iOS大多还是用ptrace |
|
|
Zz 有一套反反调试的代码, 基于hookzz, xia0LLDB 直接集成是不是更省事些?
当然 这从研究的角度来说 还是自己撸一遍原理来的透彻些, 给xiao0 点个赞
|
|
|
这里并没有重复造轮子，原因在于LLDB中的代码限制很大，不可能集成一个hookzz这样的框架。虽然hookzz已经算轻量级hook框架了，但在这里也显得太重了，而且也没必要。这里并不需要一个通用的hook框架。后面我对于SVC指令hook的思路也仅仅是判断寄存器简单操作，不然还会涉及污染寄存器等考虑因素。所以基于以上原因，我就自己实现了一遍，应该算最轻的一种hook方案。 
最后于 2019-8-15 10:34
被xia0编辑
，原因：
|
|
|
原来如此， 感谢大佬指点。 |
|
|
|
|
|
设备和系统版本是多少 |
|
|
|
|
|
iOS12之前有问题（文章也提到了）最新的已经修复了，请用最新的debugme试下 |
|
|
(lldb) debugme [*] start patch ptrace funtion to bypass antiDebug [+] success ptrace funtion to bypass antiDebug [*] start patch svc ins to bypass antiDebug [-] failed to get text segment:["error: warning: got name from symbols: header\nerror: Can't run the expression locally: Interpreter doesn't handle one of the expression's opcodes\n"] [x] happy debugging~ kill antiDebug by xia0@2019 |
|
|
[*] start patch ptrace funtion to bypass antiDebug [+] success ptrace funtion to bypass antiDebug [*] start patch svc ins to bypass antiDebug [-] failed to get text segment:["error: use of undeclared identifier '_dyld_get_image_header'\nerror: use of undeclared identifier '_dyld_get_image_vmaddr_slide'\n"] [x] happy debugging~ kill antiDebug by xia0@2019 |
|
|
[*] start patch ptrace funtion to bypass antiDebug [+] success ptrace funtion to bypass antiDebug [*] start patch svc ins to bypass antiDebug Error [IRForTarget]: Rewriting an Objective-C constant string requires CFStringCreateWithBytes [-] failed to get text segment:['error: The expression could not be prepared to run in the target\n'] [x] happy debugging~ kill antiDebug by xia0@2019 |
|
|
会出现各种不一样的问题，都是同一个app |
|
|
Traceback (most recent call last): File "<input>", line 1, in <module> File "/usr/local/Cellar/python@2/2.7.15_1/Frameworks/Python.framework/Versions/2.7/lib/python2.7/copy.py", line 52, in <module> import weakref File "/usr/local/Cellar/python@2/2.7.15_1/Frameworks/Python.framework/Versions/2.7/lib/python2.7/weakref.py", line 14, in <module> from _weakref import ( ImportError: cannot import name _remove_dead_weakref Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined Traceback (most recent call last): File "<input>", line 1, in <module> NameError: name 'sys' is not defined |
|
|
是不是因为这些错误，导致出了一些问题？ |
|
|
什么app我这边测试一下，我看日志的话ptrace这种反调试已经成功patch了，svc指令patch好像出问题了 |
|
|
|
|
|
|
