去掉AlipayWallet的ptrace 反调试保护,进行lldb调试(学习demo)

上传者: u011018979 | 上传时间: 2021-03-16 12:11:18 | 文件大小: 154KB | 文件类型: ZIP
1、文章:https://blog.csdn.net/z929118967/article/details/78233844 2、去掉ptrace的思路: 2.1、 当程序运行后,使用 debugserver *:1234 -a BinaryName 附加进程出现 segmentfault 11 时,一般说明程序内部调用了ptrace 。 2.2、为验证是否调用了ptrace 可以 debugserver -x backboard *:1234 /BinaryPath(这里是完整路径),然后下符号断点 b ptrace,c 之后看ptrace第一行代码的位置,然后 p $lr 找到函数返回地址,再根据 image list -o -f 的ASLR偏移,计算出原始地址。最后在 IDA 中找到调用ptrace的代码,分析如何调用的ptrace。 2.3、开始hook ptrace。

文件下载

资源详情

[{"title":"( 20 个子文件 154KB ) 去掉AlipayWallet的ptrace 反调试保护,进行lldb调试(学习demo)","children":[{"title":"KNAlipayWalletTweakDemo-master","children":[{"title":"AlipayWalletTweakF.xcodeproj","children":[{"title":"project.xcworkspace","children":[{"title":"contents.xcworkspacedata <span style='color:#111;'> 163B </span>","children":null,"spread":false},{"title":"xcuserdata","children":[{"title":"mac.xcuserdatad","children":[{"title":"UserInterfaceState.xcuserstate <span style='color:#111;'> 15.64KB </span>","children":null,"spread":false}],"spread":true}],"spread":true},{"title":"xcshareddata","children":[{"title":"IDEWorkspaceChecks.plist <span style='color:#111;'> 238B </span>","children":null,"spread":false}],"spread":true}],"spread":true},{"title":"project.pbxproj <span style='color:#111;'> 14.29KB </span>","children":null,"spread":false},{"title":"xcuserdata","children":[{"title":"mac.xcuserdatad","children":[{"title":"xcschemes","children":[{"title":"xcschememanagement.plist <span style='color:#111;'> 353B </span>","children":null,"spread":false}],"spread":true}],"spread":true}],"spread":true}],"spread":true},{"title":"AlipayWalletTweakF","children":[{"title":"Package","children":[{"title":"Library","children":[{"title":"MobileSubstrate","children":[{"title":"DynamicLibraries","children":[{"title":"AlipayWalletTweakF.plist <span style='color:#111;'> 310B </span>","children":null,"spread":false},{"title":"AlipayWalletTweakF.dylib <span style='color:#111;'> 230.80KB </span>","children":null,"spread":false}],"spread":true}],"spread":true}],"spread":true},{"title":"DEBIAN","children":[{"title":"control <span style='color:#111;'> 287B </span>","children":null,"spread":false}],"spread":true}],"spread":true},{"title":".DS_Store <span style='color:#111;'> 6.00KB </span>","children":null,"spread":false},{"title":"src","children":[{"title":"KNHookClass","children":[{"title":"KNHook.h <span style='color:#111;'> 280B </span>","children":null,"spread":false},{"title":"KNHook.m <span style='color:#111;'> 9.75KB </span>","children":null,"spread":false}],"spread":true}],"spread":true},{"title":"AlipayWalletTweakF.mm <span style='color:#111;'> 7.31KB </span>","children":null,"spread":false},{"title":"AlipayWalletTweakF-Prefix.pch <span style='color:#111;'> 284B </span>","children":null,"spread":false},{"title":"AlipayWalletTweakF.xm <span style='color:#111;'> 5.11KB </span>","children":null,"spread":false}],"spread":true},{"title":"LatestBuild <span style='color:#111;'> 127B </span>","children":null,"spread":false},{"title":".DS_Store <span style='color:#111;'> 6.00KB </span>","children":null,"spread":false},{"title":".gitignore <span style='color:#111;'> 42B </span>","children":null,"spread":false},{"title":"README.md <span style='color:#111;'> 1.19KB </span>","children":null,"spread":false},{"title":"Packages","children":[{"title":"com.weiliu.AlipayWalletTweakF_0.1-1_iphoneos-arm.deb <span style='color:#111;'> 40.68KB </span>","children":null,"spread":false},{"title":"com.weiliu.AlipayWalletTweakF_0.1-1_iphoneos-arm.zip <span style='color:#111;'> 40.87KB </span>","children":null,"spread":false}],"spread":true}],"spread":true}],"spread":true}]

评论信息

免责申明

【只为小站】的资源来自网友分享,仅供学习研究,请务必在下载后24小时内给予删除,不得用于其他任何用途,否则后果自负。基于互联网的特殊性,【只为小站】 无法对用户传输的作品、信息、内容的权属或合法性、合规性、真实性、科学性、完整权、有效性等进行实质审查;无论 【只为小站】 经营者是否已进行审查,用户均应自行承担因其传输的作品、信息、内容而可能或已经产生的侵权或权属纠纷等法律责任。
本站所有资源不代表本站的观点或立场,基于网友分享,根据中国法律《信息网络传播权保护条例》第二十二条之规定,若资源存在侵权或相关问题请联系本站客服人员,zhiweidada#qq.com,请把#换成@,本站将给予最大的支持与配合,做到及时反馈和处理。关于更多版权及免责申明参见 版权及免责申明