Unicorn使用笔记(一):安装
Unicorn 是一个模拟执行库,支持多个平台,在逆向工程中动态分析指令流程非常有用。 笔者某些IDA脚本需要依赖unicorn,今天在安装后,发现不能使用。2.1.0和2.1.1在使用mem map直接导致IDA崩溃。 可能与Mac Pro的Apple silicon有关,回头查了以前使用的版本是 2.0.1.post1 。 2.0.1.post1的pip
Browse all posts filed under Reverse Engineering.
Unicorn 是一个模拟执行库,支持多个平台,在逆向工程中动态分析指令流程非常有用。 笔者某些IDA脚本需要依赖unicorn,今天在安装后,发现不能使用。2.1.0和2.1.1在使用mem map直接导致IDA崩溃。 可能与Mac Pro的Apple silicon有关,回头查了以前使用的版本是 2.0.1.post1 。 2.0.1.post1的pip
Q: Build may be slow as Theos isn’t using all available CPU cores on this computer. 参考链接:Parallel Building 步骤: Q: palera1n loader app can't disappear after jailbreak on iPhone X(16
As a reverse engineer, I often use IDA Pro in my daily work. This is not surprising, as IDA Pro is the industry standard (although alternatives such as radare2 and Hopper are becom
章节内容解密 示例数据
frida server : 12.8.19 下载frida server并解压 修改权限并启动frida server Unable to preload: Unable to access process with pid 402 due to system restrictions; try sudo sysctl kernel.yama.ptrace
Imported from the legacy yingjue2020 blog archive.
clang cc1 emit llvm fdump record layouts stdlib=libc++ normal multi inherit simple.cpp 共享虚基类,典型的例子iostream clang 输出内存布局 clang++ cc1 emit llvm fdump record layouts stdlib=libc++ nor
frida server frida tools https://www.frida.re/docs/home/