LLDB Configuration on IOS 12.4 (Unc0ver Jailbreak)

Hello everyone, now we will talk about piece of IOS Penetration Testing, what is it ? remote lldb configuration for ios application debugging and what we do first ?

1. extract debugserver binary from xcode using hdiutil

mount dmg with hdiutil

debugserver

2. convert binary to arm64 bit using lipo command

convert binary to arm64

3 after convert binary then put binary on your device (iphone) on directory /usr/bin, you can usr scp command or filezilla.

4. sign /usr/bin/debugserver_arm64 with ldid command. use entitlements file in iphone device in directory /use/share/entitlements/debugserver.xml and inject it.

sign binary and inject binary

you can see what is debugserver.xml with cat

debugserver.xml

5. try debugserver

debugserver work

it Work!

after that you can try to remote debug with lldb with application

debugserver_arm64 0.0.0.0:<port> -a <application name / pid>

Thank for reading!