Closed thinkycx closed 5 years ago
Your shellcode won't work because Safari is sandboxed, you first need a Sandbox Escape to run shell commands. The reason why you get the crash is that the syscall fails and you're not returning a valid value from your shellcode. If you want to debug using lldb, you need to attach to WebContent, not Safari. WebContent is the Process that runs JavaScript and displays the website. Note that there will be one WebContent process for each open Tab.
Thank you very much. @LinusHenze
Hello, I have some questions about it . When I change the shellcode(such as run a command use execve syscall ) in the stage2, and run make.py, the safari cannot works well.
So, how to change the shellcode to run a command? When I use lldb to attach the safari and debug it , I write
int 3
int the shellcode but the lldb cannot stop at 0xcc. If I use lldb to attach it , where should I set breakpoints to test the shellcode?Wish for you reply. Thank you.
make.py