Skip to main content

Questions tagged [patching]

Patching is the process of adding or deleting code from an executable file in order to modify its functioning.

36 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5 votes
0 answers
554 views

Patching Jar File (2022)

Currently reversing a .jar program recreationally, and I understand the workflow proposed here: https://www.netspi.com/blog/technical/thick-application-penetration-testing/patching-java-executables-...
triboulet's user avatar
3 votes
0 answers
41 views

How to patch bootstrap in NAND flash?

I read the layout or my NAND flash and saw that in the beginning of flash there is a bootstrap the the CPU load. That flash has ECC I read/write that flash. How can I analyze the bootstrap and change ...
Kokomelom's user avatar
  • 281
3 votes
0 answers
160 views

How to see what has changed in a patched binary?

I am exploring MacOS Deckset app. It has a trial version available on the official website. But there's a cracked version available on torrent trackers. I want to know what was changed by the people ...
Revengo Engineros's user avatar
2 votes
0 answers
46 views

How does Windows Updates determine if the patches are compatible?

I am looking into Microsoft Windows updates, and how they are applied, after extracting the .msu file, we get some .cab files with patches (in PA30 format), and informations on the file attributes, ...
Redouane Red's user avatar
2 votes
0 answers
40 views

Finding a check in Chrome

Chrome doesn't allow switching on extensions which are not from the Chrome store. There is no this limitation in Chromium. So it is only in Chrome. It checks verified_contents.json (in which content ...
oleedd's user avatar
  • 173
2 votes
0 answers
324 views

Automating binary patching in Hopper Disassembler using python

I am curious to know if anyone has done anything similar to what I am looking to achieve... I have a .ipa file (iOS application) that I load into to Hopper Disassembler. I search for a string to ...
user35324's user avatar
2 votes
0 answers
463 views

How to use arm-none-eabi-objcopy to extract texts, translate, and rebuild ELF file

I have this arm elf file: https://www20.zippyshare.com/v/2yLS1H8D/file.html I want to extract the user-interface texts to translate them to my local language. I found the section containing the texts ...
brocard's user avatar
  • 21
2 votes
0 answers
949 views

How to export to *.so file after patching in ghidra

I'm using ghidra to patch an *.so file in the Android APK. While exporting the patched file from ghidra, using the "Export program" option from the "File" menu, it don't have *.so in the supported "...
nkg's user avatar
  • 433
2 votes
0 answers
374 views

IDA does not follow relative jump, executable patching

I created small C program (x86) with this asm code inside main: __asm { jmp label // EB 02 nop // 90 nop // 90 } label: Loaded it in IDA (in static mode, so ...
igntec's user avatar
  • 21
1 vote
0 answers
239 views

How does Play integrity api assures Genuine app binary

I discovered that we can use the Play integrity api instead of safetynet now to assure the integrity off an app that is running. I am wondering if people have a way of bypassing the "Genuine app ...
user45316's user avatar
1 vote
0 answers
154 views

Inject a MessageBox to the PE file

I'd like to patch some Windows PE file to show just simple MessageBox. Taking into account that the PE in question doesn't import the MessageBoxA function if I'm right that all i need to do is to add ...
Daros911's user avatar
  • 115
1 vote
0 answers
438 views

How to patch instruction with a call to a thunk function?

I started to use ghidra to begin doing some crackmes, and I need to change an instruction to a call to a thunk function. However, when I export the program back, I get a segfault. Inspecting it with ...
hl037_'s user avatar
  • 111
1 vote
0 answers
300 views

IDA binary patch "has no file mapping"

I am trying to change one byte (TBZ to TBNZ) inside a ~40mb binary. Ive done this multiple times with other files but this time IDA is giving me a hard time by simply not patching and printing this to ...
Slluxx's user avatar
  • 11
1 vote
0 answers
88 views

Patched Mac application throws "Invalid value of (null) for entitlement" when running it

I have patched a specific application that I downloaded from the app store but when I ran the executable, it gave me a signal kill 9. I also reverted back the change I made, but the same error was ...
Raeein Bagheri's user avatar
1 vote
0 answers
37 views

How to prevent dynamic loader from modifying binary in memory?

I have patched a loadable object (an .so file) from this: xor eax,0x304b7c0 to this: mov eax,0x0 When I try to run my binary with these modifications, the application loads the .so file and then it ...
user34087's user avatar
1 vote
0 answers
150 views

Patching out relative calls to DLL functions

I have googled, watched several videos, read the PE spec, and even read some blogs. I am at a loss on how to patch out a message box. I am working through a CTF whose first task is to disable a nag ...
John S.'s user avatar
  • 23
1 vote
0 answers
40 views

Need help with patching .plt function

I want to patch a .plt function but my friend told me I should use "xref" to find the real caller. I found it and patched it, Will the .plt function execute? The function start with PUSH {R4-...
Mouhamed Iyade's user avatar
1 vote
0 answers
477 views

ARM Cortex-M0 - How to either (non-intrusively) extract firmware or modify downloadable firmware (NuMicro NUC126)

As a hands-on introduction into RE, I've decided to take on a small, simple embedded device. In hindsight, it was probably a mistake. This "project" has consumed me for about 2 weeks. ...
Steve's user avatar
  • 66
1 vote
0 answers
640 views

How to patch C# binary?

I have C# binary. I was able to use dnSpy to decompile it, and analyze. The binary was obfuscated with xenocode obfuscator. I figured out that I can directly manipulate IL instructions if I just find ...
warchantua's user avatar
1 vote
0 answers
135 views

Statically injecting translated NASM assembly into existing ELF binary

I'm trying to statically patching ELF binaries in order to incorporate code that can help provide run-time protection. In an effort to save time writing and debugging assembly, I took the following no-...
alcao758's user avatar
  • 111
1 vote
0 answers
280 views

How to hook eval function in node.js

As the eval() function of JavaScript is an evil, I want to hook or monkey-patch eval() function of JavaScript in node.js. I want to intercept all arguments passed in eval() function. Please guide me ...
sumit_suthar's user avatar
1 vote
0 answers
170 views

How to patch JNI library to call functions on Linux

According to this post it is possible to run functions inside a shared library so long as they do not have a dependency on the JVM It works by patching the .dynamic ELF section to remove ...
Fabian Mendez's user avatar
1 vote
0 answers
294 views

Patching an app that updates frequently

Hello i am working with an app coded in c# which updates very often usually within 2-3 days or sometimes every 12 hours The updates are really needed for the app to work So i was wondering what can i ...
Hashim Roja's user avatar
1 vote
0 answers
76 views

getting %localappdata% in asm

I have an old windows x86 application that no longer works properly since windows 8. This app creates files within its own folders for things like app settings. Unfortunately, Microsoft no longer ...
majidarif's user avatar
  • 235
1 vote
0 answers
163 views

Patch is detected yet hardware access breakpoint isn't hit

I wonder how is that possible. I found debugger detection in TLS Callback function - there is conditional jump after some check. When I step over it with debugger and modify ZF flag to bypass ...
larw's user avatar
  • 95
1 vote
0 answers
84 views

Where to identify and access the main object/closure in a JavaScript web app?

I want to add missing functionality to a web app's front end code JavaScript code. I can find the code in the browser's developer tools by setting breakpoints and stepping through. But in a large ...
hippietrail's user avatar
1 vote
0 answers
541 views

Static binary instrumentation tools for android .so libraries?

I'm trying to statically inject code into an android app. The best way would be to use APKStudio and the like, but there are very harsh restrictions on the device and the app itself, so that apk ...
BinHexCraft's user avatar
0 votes
0 answers
48 views

Patch binary while documenting original at the same time in Ghidra

I'm starting work on a simultaneous documentation and patching project on a single binary. Some of the code to be documented will also be overwritten by the patch, but most of it won't, so I need a ...
inakilbss's user avatar
  • 101
0 votes
0 answers
61 views

Is Stud_PE a legitimate program?

I have a binary that crashes at certain user input, and after using Ghidra and x64Dbg to understand what's happening, I'd like to just fix the problem. I can use Ghidra to NOP the function call that ...
AugieDawg's user avatar
0 votes
0 answers
47 views

X64dbg question

I got a program that I try to patch. Normally you get a message box or something to get at the right point in program. But this program behaves else. It opens, then you can type in your license number ...
silvio's user avatar
  • 1
0 votes
0 answers
84 views

SSL pinning deep problem

I'm working on one Android app for potential malware analysis and I am trying to MITM it. I found out that the verify function never executes (X509 class) when i hook onto my proxy but rather that app ...
TrueStar's user avatar
0 votes
0 answers
231 views

je change to jne and program issue

I am new to forum and new to programming (total noob). I am trying to modify a program using ollydbg and x32dbg and while attached to file I make the changes fine and it does what I expected. My ...
Valshardreg's user avatar
0 votes
0 answers
422 views

tutorial of run-time hacking with Dnspy

Is anybody have good resource or tutorial of run-time hacking or memory hacking with .NET Applications with dnspy.
KingAmir's user avatar
0 votes
0 answers
133 views

Alternative APIs to hook instead of messagebox for message pop ups?

So i am reversing an app that pops up a message at some point, but its not doing this using messagebox i also tried to pause and then run to user code but didn't work, so what are some of the other ...
Mery Ted's user avatar
  • 232
0 votes
0 answers
62 views

Output address path during .exe execution

I have an obfuscated software. I'm a beginner in this area, so I don't find where a patch would be useful for what I want to do. It turns out that I have an idea of how I could find out in which ...
Drarig29's user avatar
  • 101
0 votes
0 answers
2k views

Assemble function of IDA Pro not working properly

I am using the Patch Program option of IDA Pro to edit the assembly of a binary at runtime. When I enter the following instruction: mov rax, [rsp + 0x48] I get an "Invalid operand" error from IDA ...
Neon Flash's user avatar