Questions tagged [lldb]
LLDB is the debugger of the LLVM compiler infrastructure project.
33 questions
1
vote
2
answers
156
views
Can't find native library in lldb
・I am analyzing an Android app that was in the CTF.
(https://github.com/TRkizaki/cryptoverse2023/tree/main/reverse_java_not_interesting)
・In this app, the input string is checked by the checkvaild ...
1
vote
0
answers
61
views
I have an application that views an encrypted document and stored it as an (encrypted) pdf
When I load this application with lldb, surprisingly no anti-debugger techniques scuttle it. I've even managed to find an interesting breakpoint to set...
break set -r AES_decrypt -s /usr/lib/...
0
votes
1
answer
105
views
Paused at the right (?) breakpoint, what do I do next?
The output currently looks like this:
2022-09-10 00:09:03.955729-0500 REDACTED[51480:28773370] -openPDFWithPath: /Users/REDACTED/Library/Containers/com.REDACTED/Data/Library/Application Support/...
3
votes
1
answer
313
views
IOS ASLR address calculation with delta offset (ARM64)
I am learning LLDB to debug ios apps, I have a jailbroken iPhone IOS 14.3 and a debugserver.
Screenshot of start connect to remote process:
Sections of my process(image dump sections hidenseek):
...
3
votes
1
answer
447
views
How to use software watchpoints in LLDB?
After trying to use watch command, LLDB said the device had 0 available hardware watchpoints. In GDB you can use
set can-use-hw-watchpoints 0
How do you disable hardware watchpoints in LLDB?
2
votes
1
answer
2k
views
LLDB debugging on android?
I currently don't have a pc. I have two rooted devices Arm64 host device with Debian rootfs and the device to be debugged which contains the lldb-server binary armv7. I am trying to remote debug my ...
0
votes
1
answer
173
views
How to determine the data type of a register
I'm learning reverse engineering and I'm trying to understand what process people use to identify a variable type.
For example, I'm looking at an argument being passed to a function and I'm trying to ...
0
votes
1
answer
559
views
Why the disassembled code in IDA is different from in xcode? And How to solve unk_xxxx in IDA View?
I have built an executable file (the architecture is ARMv7, the base SDK is iOS), which depended on an xxx.a file in xcode; I don't have the source code of thexxx.a.
I want to check some logic in `xx. ...
1
vote
1
answer
1k
views
Set lldb breakpoint relative to ASLR slide
I want to set a breakpoint at an offset within a file.
I can do this fine if I launch the app, check where it is loaded with image list testapp and then add the offset of where in the binary I want ...
1
vote
1
answer
205
views
Kernel debug two physical MacBook pro devices
I've asked the same question at stackoverflow, but i'm gonna copy-paste it here as i might get more relevant answers(?):
I'm trying to kernel debug a physical Macbook pro device.
When my setup ...
2
votes
1
answer
87
views
Difference in binary behaviour (execution/under debugger)
I was trying out a simple heap overflow example (http://highaltitudehacks.com/2020/09/05/arm64-reversing-and-exploitation-part-1-arm-instruction-set-heap-overflow/) but replicated the relevant code in ...
0
votes
1
answer
733
views
Append to environment variable in LLDB
It is relatively easy to set environment variables in LLDB, via
settings set target.env-vars DEBUG=1
However, I can't seem to find a way to append to an environment variable. The following doesn't ...
2
votes
1
answer
282
views
Use dtrace, lldb or gdb to find which file or line of code was responsible for a line of output in stdout or stderr?
I see a string being output to my Terminal, when I ran an executable. I have the source code (in C) of the executable, but it was not written by me. I compiled it with -g flag. Is there any way to ...
4
votes
1
answer
4k
views
gdb list functions names equivalent for lldb
is possible with lldb have a list of functions at runtime like gdb info functions? I had a look at help but didn't find it.
2
votes
1
answer
2k
views
how watchpoint on register works
GDB has an option to set watchpoint on register*, how does it work ? what happens during context switching ? why the only implementation is for mips ?
Is there a way to make it work for lldb also ?
*...