il2cpp-toolkit 1.1.0

IL2CPP symbol scanner and Frida bridge patcher for obfuscated Unity games

IL2CPP Toolkit

Scan IL2CPP binaries for obfuscated exports and patch Frida bridge files for reverse engineering Unity games.

Installation

pip install il2cpp-toolkit

Usage

Scan a binary

Extract obfuscated IL2CPP symbols from Unity game binaries:

il2cpp-scan /path/to/libil2cpp.so

After scanning, you'll be prompted to select an output folder. The tool generates:

• SymbolMap.json - Symbol mapping for patching
• Il2CppMethodNames.hpp - BNM header file
• Il2Cpp-Headers.hpp - Dumper header file
• Frida-Map.js - Frida export map

Patch Frida bridge

Patch the Frida IL2CPP bridge with obfuscated symbol names:

il2cpp-patch /path/to/SymbolMap.json

This uses the bundled frida-il2cpp-bridge.js and outputs frida-il2cpp-bridge-patched.js in the same directory.

Optional: Provide a custom bridge file:

il2cpp-patch /path/to/SymbolMap.json --bridge /custom/frida-il2cpp-bridge.js

Features

• ELF and PE support - Works with Android .so and Windows .dll files
• Automatic symbol mapping - Maps obfuscated exports to standard IL2CPP API names
• Bundled Frida bridge - No need to download bridge separately
• Organized output - All files written to user-selected folder
• Multiple output formats - Generates headers for BNM, Dumper, and Frida

Development

To install from source:

git clone https://github.com/laceisyes-debug/symbolpythonaura.git
cd symbolpythonaura
pip install -e .

License

MIT License - see LICENSE file for details

Author

enviouslarp