About the reverse of iOS app modified into NOP instructions ...

Source: Internet
Author: User

Reverse a program, found that the program was setuid (0), Setgid (0) thus causing the program to run in root mode (specifically can be searched in iosre), so I would like to take this instruction to nop off.

I looked up some methods on the Internet, such as:

1, xx A0 E1 NOP

I tried the next, in 32 bits, that ARM7 seems to be MOV r0 r0 (two weeks ago tried, remember not very clear.) Well, this also works. But under 64 bits, it becomes garbled, and Ida is all changed.

2, with Hopper and IDA combination to change

In Ida, you can only change the hex directly, and in hopper it is possible to modify the instruction-nop directly, but only another executable file is generated.

So I changed the hopper directly into NOP, and then I generated 32-bit and 64-bit executables, then I used IDA to view the specific hex from these two files, and then I changed the FAT file with Ida to the hexadecimal corresponding to NOP.

Found 32-bit and 64-bit NOP corresponding hexadecimal different, 32-bit under NOP accounted for two bytes, xx BF. 64 bit under NOP takes 4 bytes, 1F D5. Why is this?

Is this a stupid method of mine? Understand the expert guidance under, grateful can't help.

About the reverse of iOS app modified into NOP instructions ...

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.