Remote iOS lldb debugging

lldb_ios.md

Remote iOS lldb debugging

http://versprite.com/og/ios-reverse-engineering-part-one-configuring-lldb/

Installing

Find the debug server from the device support disk:

ls -d /Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/DeviceSupport/* | sort | tail -n1
  hdiutil attach /Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/DeviceSupport/8.0\ \(12A365\)/DeveloperDiskImage.dmg

Copy and install the debug server:

cp /Volumes/DeveloperDiskImage/usr/bin/debugserver .

cat > entitlements.plist <<EOF
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/ PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>com.apple.springboard.debugapplications</key> <true/>
    <key>run-unsigned-code</key>
    <true/>
    <key>get-task-allow</key>
    <true/>
    <key>task_for_pid-allow</key>
    <true/>
</dict>
</plist>
EOF

codesign -s - --entitlements entitlements.plist -f debugserver

scp -o port=2222 debugserver root@localhost:~/

Usage

On iPhone:

~/debugserver *:6666 --attach PATH_TO_APP_BIN

On Mac:

lldb
  platform select remote-ios
  process connect connect://192.168.0.8:6666