https://github.com/blacktop/ios-pocs
iOS POCs and Ideas
https://github.com/blacktop/ios-pocs
clang debugging ios jailbreak lldb security-research
Last synced: 7 months ago
JSON representation
iOS POCs and Ideas
- Host: GitHub
- URL: https://github.com/blacktop/ios-pocs
- Owner: blacktop
- License: mit
- Created: 2018-11-13T00:35:12.000Z (about 7 years ago)
- Default Branch: master
- Last Pushed: 2020-04-16T19:39:23.000Z (over 5 years ago)
- Last Synced: 2025-05-26T20:43:22.915Z (8 months ago)
- Topics: clang, debugging, ios, jailbreak, lldb, security-research
- Language: C
- Size: 24.4 KB
- Stars: 3
- Watchers: 2
- Forks: 2
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# ios-pocs
> iOS POCs and Ideas
## Getting Started
### Install Utils
Install [usbmuxd](https://github.com/libimobiledevice/usbmuxd)
```bash
$ brew install usbmuxd
```
Install [jtool](http://www.newosxbook.com/tools/jtool.html)
```bash
$ brew cask install jtool
```
### SSH via USB
Start proxy
```bash
$ iproxy 2222 22 &
```
SSH
```bash
$ ssh -p 2222 root@localhost
```
### Build in VSCode
#### Command+Shift+B
=OR=
```
$ make all
```
### Debugging
> **NOTE:** when you connected to XCode it installed dev tools on the device
#### In ssh session on iDevice
```bash
iPod-touch:~ root# /Developer/usr/bin/debugserver localhost:6666 --waitfor evil
```
#### In VSCode _(build binary)_
`Command+Shift+B`
#### Now Start Debugging _(remember to set a breakpoint)_
Press `F5` or use GUI (you will need to continue past initial trap)
#### In DEBUG CONSOLE
Let's wake this lil guy up early :smiling_imp:
```lldb
> thread jump --line 16
> continue
```
## Misc
### Get Levin's [iOSBinaries](http://newosxbook.com/tools/iOSBinaries.html)
```bash
$ wget http://newosxbook.com/tools/binpack64-256.tar.gz
$ scp -P 2222 root@localhost:/
$ ssh -p 2222 root@localhost
iPod-touch:~ root# cd /
iPod-touch:~ root# tar -kxvf binpack64-256.tar.gz
```
### Stop iOS Auto-Updating
```bash
iPod-touch:~ root# echo "127.0.0.1 mesu.apple.com" >> /etc/hosts
```