Remote debugger doesn't work

IDA General
1

Hi folks!

I’m facing error when I try to debug a sample with IDA 9.2. Obviously I tried to run ‘mac_server_arm’ with sudo, but unfortunately without positive result. In addition I tried to sign the binary using ‘codesign’ tool, no success as well. Hardware is Macbook Pro M3 MAX. macOS version 15.7.3 Sequoia.

Anybody can help?

Screenshot 2026-02-12 at 22.13.22
Screenshot 2026-02-12 at 22.13.22777×212 27.2 KB

Command line:

➜  dbgsrv sudo ./mac_server_arm 
IDA Mac OS X 64-bit remote debug server(MT) v9.2.31. Hex-Rays (c) 2004-2025
2026-02-12 22:13:07 Listening on :::23946 (my ip 192.168.0.124)...


2026-02-12 22:13:11 [1] Accepting connection from ::ffff:127.0.0.1...
posix_spawn(/Users/fabek/Desktop/dump): Permission denied
posix_spawnp(/Users/fabek/Desktop/dump): Permission denied
2

I believe the “permission denied” error comes from the OS.
Maybe a silly question, but is the target binary executable? Does it actually run?
Can you debug some helloworld executable or another benign binary?

3

Yep, the executable has ‘x’ flag and it runs properly. The executable contains two embedded binaries: x64 Intel and ARM version. I tried to debug other executables without success as well.

I believe it’s some kind of macOS protection to prevent run not signed binaries, however as I mentioned, I tried to sign binary using “codesign”. I’m following this tutorial: https://hex-rays.com/hubfs/freefile/mac_debugger_primer2.pdf

4

Hi,

AFAIK our debug server is signed with proper entitlements, so normally it should work when debugging normal apps. The only known issue I’m aware of is debugging Apple or hardened runtime binaries which requires turning off SIP.
Can we have a confirmation of this issue from another macOS user?

5

Obviously I tried to disable SIP completely, without success. Remote and local debugging don’t work anymore.

6

Could you share what were your debugger target settings ? I saw it few times and it was caused by input path, directory path or application path. I don’t remember exactly. Also, did you codesign just the app binary inside or the whole .app bundle ?