Questions tagged [patching]
Patching is the process of adding or deleting code from an executable file in order to modify its functioning.
34
questions with no upvoted or accepted answers
5
votes
0
answers
440
views
Patching Jar File (2022)
Currently reversing a .jar program recreationally, and I understand the workflow proposed here:
https://www.netspi.com/blog/technical/thick-application-penetration-testing/patching-java-executables-...
- 51
3
votes
0
answers
39
views
How to patch bootstrap in NAND flash?
I read the layout or my NAND flash and saw that in the beginning of flash there is a bootstrap the the CPU load. That flash has ECC
I read/write that flash.
How can I analyze the bootstrap and change ...
- 281
3
votes
0
answers
151
views
How to see what has changed in a patched binary?
I am exploring MacOS Deckset app.
It has a trial version available on the official website.
But there's a cracked version available on torrent trackers.
I want to know what was changed by the people ...
2
votes
0
answers
41
views
How does Windows Updates determine if the patches are compatible?
I am looking into Microsoft Windows updates, and how they are applied, after extracting the .msu file, we get some .cab files with patches (in PA30 format), and informations on the file attributes, ...
- 151
2
votes
0
answers
33
views
Finding a check in Chrome
Chrome doesn't allow switching on extensions which are not from the Chrome store.
There is no this limitation in Chromium. So it is only in Chrome.
It checks verified_contents.json (in which content ...
- 163
2
votes
0
answers
281
views
Automating binary patching in Hopper Disassembler using python
I am curious to know if anyone has done anything similar to what I am looking to achieve...
I have a .ipa file (iOS application) that I load into to Hopper Disassembler.
I search for a string to ...
- 21
2
votes
0
answers
420
views
How to use arm-none-eabi-objcopy to extract texts, translate, and rebuild ELF file
I have this arm elf file: https://www20.zippyshare.com/v/2yLS1H8D/file.html
I want to extract the user-interface texts to translate them to my local language.
I found the section containing the texts ...
- 21
2
votes
0
answers
903
views
How to export to *.so file after patching in ghidra
I'm using ghidra to patch an *.so file in the Android APK.
While exporting the patched file from ghidra, using the "Export program" option from the "File" menu, it don't have *.so in the supported "...
- 433
2
votes
0
answers
356
views
IDA does not follow relative jump, executable patching
I created small C program (x86) with this asm code inside main:
__asm
{
jmp label // EB 02
nop // 90
nop // 90
}
label:
Loaded it in IDA (in static mode, so ...
- 21
1
vote
0
answers
42
views
How does Play integrity api assures Genuine app binary
I discovered that we can use the Play integrity api instead of safetynet now to assure the integrity off an app that is running. I am wondering if people have a way of bypassing the "Genuine app ...
- 11
1
vote
0
answers
83
views
Inject a MessageBox to the PE file
I'd like to patch some Windows PE file to show just simple MessageBox. Taking into account that the PE in question doesn't import the MessageBoxA function if I'm right that all i need to do is to add ...
- 115
1
vote
0
answers
289
views
How to patch instruction with a call to a thunk function?
I started to use ghidra to begin doing some crackmes, and I need to change an instruction to a call to a thunk function. However, when I export the program back, I get a segfault.
Inspecting it with ...
- 111
1
vote
0
answers
216
views
IDA binary patch "has no file mapping"
I am trying to change one byte (TBZ to TBNZ) inside a ~40mb binary. Ive done this multiple times with other files but this time IDA is giving me a hard time by simply not patching and printing this to ...
- 11
1
vote
0
answers
80
views
Patched Mac application throws "Invalid value of (null) for entitlement" when running it
I have patched a specific application that I downloaded from the app store but when I ran the executable, it gave me a signal kill 9. I also reverted back the change I made, but the same error was ...
- 11
1
vote
0
answers
35
views
How to prevent dynamic loader from modifying binary in memory?
I have patched a loadable object (an .so file) from this:
xor eax,0x304b7c0
to this:
mov eax,0x0
When I try to run my binary with these modifications, the application loads the .so file and then it ...
- 11
1
vote
0
answers
122
views
Patching out relative calls to DLL functions
I have googled, watched several videos, read the PE spec, and even read some blogs. I am at a loss on how to patch out a message box. I am working through a CTF whose first task is to disable a nag ...
- 23
1
vote
0
answers
40
views
Need help with patching .plt function
I want to patch a .plt function but my friend told me I should use "xref" to find the real caller.
I found it and patched it, Will the .plt function execute?
The function start with PUSH {R4-...
1
vote
0
answers
363
views
ARM Cortex-M0 - How to either (non-intrusively) extract firmware or modify downloadable firmware (NuMicro NUC126)
As a hands-on introduction into RE, I've decided to take on a small, simple embedded device. In hindsight, it was probably a mistake. This "project" has consumed me for about 2 weeks. ...
- 66
1
vote
0
answers
556
views
How to patch C# binary?
I have C# binary. I was able to use dnSpy to decompile it, and analyze. The binary was obfuscated with xenocode obfuscator.
I figured out that I can directly manipulate IL instructions if I just find ...
- 111
1
vote
0
answers
113
views
Statically injecting translated NASM assembly into existing ELF binary
I'm trying to statically patching ELF binaries in order to incorporate code that can help provide run-time protection.
In an effort to save time writing and debugging assembly, I took the following no-...
- 111
1
vote
0
answers
266
views
How to hook eval function in node.js
As the eval() function of JavaScript is an evil, I want to hook or monkey-patch eval() function of JavaScript in node.js. I want to intercept all arguments passed in eval() function. Please guide me ...
- 111
1
vote
0
answers
163
views
How to patch JNI library to call functions on Linux
According to this post it is possible to run functions inside a shared library so long as they do not have a dependency on the JVM
It works by patching the .dynamic ELF section to remove ...
- 311
1
vote
0
answers
288
views
Patching an app that updates frequently
Hello i am working with an app coded in c# which updates very often usually within 2-3 days or sometimes every 12 hours
The updates are really needed for the app to work
So i was wondering what can i ...
- 11
1
vote
0
answers
75
views
getting %localappdata% in asm
I have an old windows x86 application that no longer works properly since windows 8. This app creates files within its own folders for things like app settings. Unfortunately, Microsoft no longer ...
- 225
1
vote
0
answers
154
views
Patch is detected yet hardware access breakpoint isn't hit
I wonder how is that possible.
I found debugger detection in TLS Callback function - there is conditional jump after some check.
When I step over it with debugger and modify ZF flag to bypass ...
- 95
1
vote
0
answers
84
views
Where to identify and access the main object/closure in a JavaScript web app?
I want to add missing functionality to a web app's front end code JavaScript code.
I can find the code in the browser's developer tools by setting breakpoints and stepping through.
But in a large ...
- 485
1
vote
0
answers
537
views
Static binary instrumentation tools for android .so libraries?
I'm trying to statically inject code into an android app.
The best way would be to use APKStudio and the like, but there are very harsh restrictions on the device and the app itself, so that apk ...
- 19
0
votes
0
answers
36
views
X64dbg question
I got a program that I try to patch. Normally you get a message box or something to get at the right point in program. But this program behaves else. It opens, then you can type in your license number ...
- 1
0
votes
0
answers
78
views
SSL pinning deep problem
I'm working on one Android app for potential malware analysis and I am trying to MITM it. I found out that the verify function never executes (X509 class) when i hook onto my proxy but rather that app ...
- 11
0
votes
0
answers
212
views
je change to jne and program issue
I am new to forum and new to programming (total noob).
I am trying to modify a program using ollydbg and x32dbg and while attached to file I make the changes fine and it does what I expected.
My ...
0
votes
0
answers
383
views
tutorial of run-time hacking with Dnspy
Is anybody have good resource or tutorial of run-time hacking or memory hacking with .NET Applications with dnspy.
- 54
0
votes
0
answers
128
views
Alternative APIs to hook instead of messagebox for message pop ups?
So i am reversing an app that pops up a message at some point, but its not doing this using messagebox
i also tried to pause and then run to user code but didn't work, so what are some of the other ...
- 232
0
votes
0
answers
62
views
Output address path during .exe execution
I have an obfuscated software. I'm a beginner in this area, so I don't find where a patch would be useful for what I want to do.
It turns out that I have an idea of how I could find out in which ...
- 101
0
votes
0
answers
2k
views
Assemble function of IDA Pro not working properly
I am using the Patch Program option of IDA Pro to edit the assembly of a binary at runtime.
When I enter the following instruction:
mov rax, [rsp + 0x48]
I get an "Invalid operand" error from IDA ...
- 765