Skip to main content

Cheat sheet

Basic commands

Command Example Comment
re re

Read the registers

Write to registers


b 0x00000076cb964ed0

b libc.so`sendto

breakpoint set -s libc.so -n send


watchpoint `w s e -s 1 -w read_write -- $x0&0x0000FFFFFFFFFFFF`  hardware breakpoint
image lookup -r -n <symbol>

image lookup -r -n fopen

image lookup -r -n send libc.so

regex lookup function name
memory region <ADDRESS> (lldb) mem reg 0x0000007c23b510f8
[0x0000007c23b47000-0x0000007c23b52000) r-- /data/app/XXX/YYY/base.apk
shows the region of the specified address