iddoeldor

#include <android/log.h>
#include <jni.h>
#include <binder/Binder.h>
#include <binder/Parcel.h>
#include <binder/IServiceManager.h>
#include <dlfcn.h>
#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>

iddoeldor

from ghidra.program.model.address import Address
from ghidra.program.model.mem import MemoryAccessException
from ghidra.program.flatapi import FlatProgramAPI
from ghidra.util.task import TaskMonitor

import math
import json
from os.path import isfile, join, dirname
import struct as st
import string

iddoeldor

var kModuleName = 'library.so';
var _module = Process.findModuleByName(kModuleName);
var _module_end = _module.base.add(_module.size);
var o = 0xFF537;
Interceptor.attach(base.add(o),{
  onEnter: function (args) {
    console.log(o.toString(16), this.context.x0.readPointer().readCString())

    this.tid = Process.getCurrentThreadId();

iddoeldor

#include <speex/speex.h>
#include <iostream>
#include <fstream>
#include <vector>
#include <iterator>
#include <cassert>

int main(int argc, char const *argv[])
{
    if (argc < 2)

iddoeldor

import sark

for segname in ['.bss', '.data']:
    for line in sark.Segment(name=segname).lines:
        if not line.name:
            continue

        if line.name.startswith('g_'):
            continue

iddoeldor

def strs(f=None, visited=None, level=0, maxlevel=-1):
    if maxlevel >= 0 and level > maxlevel:
        return [], set()
    if not f:
        f = sark.Function()
    if not visited:
        visited = set()
        root = True
    else:
       root = False

iddoeldor

    def _masquerade(self,origin):
        self.__class__ = type(origin.__class__.__name__,(self.__class__,origin.__class__),{})
        self.__dict__ = origin.__dict__

iddoeldor

from pyclibrary import CParser
import re


hook_template = '''
(function() {
	var name = '__NAME__';
	var address = Module.findExportByName(null, name);
	if (address != null) {
		console.log('[!] Hooking: ' + name + ' @ 0x' + address.toString(16));

iddoeldor

"""
Inserts C code directly into Python files, which can then be dynamically linked
in and called via ctypes.
"""
import atexit
import ctypes
import os
import shlex
import sys
import tempfile

iddoeldor

CXX = gcc
COMPFLAGS = -c -Wall -g

state_machine: state_machine.o
    $(CXX) -lrt state_machine.o -o state_machine

state_machine.o: state_machine.c
    $(CXX) $(COMPFLAGS) state_machine.c

clean: