Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

I confuse "find the correct address and subtract current aslr_offset" #6

Open
segunlee opened this issue Apr 13, 2023 · 0 comments
Open

Comments

@segunlee
Copy link

hi, I'm try to patch web inspect.

but I confuse address.

스크린샷 2023-04-13 오후 3 34 56

I found 0x7ff93a06c974 <+69>: testb %al, %al

and modify main.m like this
patch_mem(remoteTask, aslr_offset+0x7ff93a06c974, sizeof(unsigned short), 0xc084, 0xdb84);

webinspectord's pid is 1917
patch memory at address 0xfff274057974
can't read memory

and I'm trying to
patch_mem(remoteTask, aslr_offset+0x000000000006c974, sizeof(unsigned short), 0xc084, 0xdb84);

webinspectord's pid is 1917
patch memory at address 0x7ff93a057974
Incorrect version of process or ASLR Offset

also
patch_mem(remoteTask, 0x7ff93a06c974, sizeof(unsigned short), 0xc084, 0xdb84);

webinspectord's pid is 1917
patch memory at address 0x7ff93a06c974
Already patched

but not working.

please let me know what i did wrong

thx

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant