LLDB debugging third-party app

First create a new project using xcode to connect to the mobile phone to debug it, so that there will be a debugserver program on the mobile phone, as shown in the figure.
LLDB app
It will be as shown in / Developer / usr / bin.

Because he cannot debug other apps at present, because he does not have task_for_pid permission. Copy it to the computer first.
Create a pist file in the same directory. as the picture shows.

entitlements.plist

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/ PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>com.apple.springboard.debugapplications</key> <true/>
    <key>run-unsigned-code</key>
    <true/>
    <key>get-task-allow</key>
    <true/>
    <key>task_for_pid-allow</key>
    <true/>
</dict>
</plist>

Sign it again.
codesign -s - --entitlements entitlements.plist -f debugserver
LLDB app
Upload to your phone / usr / bin. Select a process to debug it as shown.

forwarding port on mac
iproxy 1234 1234
Finally connect. Enter lldb to enter ldb, enter process connect connect: // localhost: 1234
Check the module and load base address at the same time.

View the debug stack.

Reprinted at: https://blog.51cto.com/haidragon/2396785

Intelligent Recommendation

IOS reverse: [1, use XCode debugging third-party applications (redistributive) 2, improve the difficulty of the APP is reversed]

Article catalog Foreword I, process step II, improve the reverse difficulty of App, to filter a large part of the medium and low-level attacker 2.2 jailbreak detection 2.3 counter debugging 2.3.1 PTRA...

Android calls a third-party app

This article guides If you want to call Activity 2 of App 2 in App 1, the process is as follows: 1) The first call to App 2 should declare that Activity1 can be started or the Activity is visible to t...

Android third party app screenshot

It's easy to generate a corresponding image from View, so screenshots in the app can be used this way. After getting the bitmap, it needs to be processed, divided into the following parts / several ca...

Open the third party android APP

android open third-party app needs to be components of the activity of third-party app to open Call the following code to open To add a new task which identifies the stack. Pit: PackageName must be ma...

WebView opens third-party APP

Recently, I encountered a demand when working on a project. Use the in-app WebView to open Taobao and Alipay for authorization. I have not done it before, write it down and record it. 1. First, webvie...