Skip to main content

Static mach-o binary analysis tool.

Project description

ktool

Static Mach-O binary metadata analysis tool / information dumper

Installation

pip3 install k2l

Usage

usage: ktool [command] <flags> [filename]

ktool dump:
ktool dump --headers --out <directory> [filename] - Dump set of headers for a bin/framework
ktool dump --tbd [filename] - Dump .tbd for a framework

ktool file:
ktool file [filename] - Prints (very) basic info about a file (e.g. "Thin MachO Binary")

ktool info:
usage: ktool info [-h] [--slice SLICE_INDEX] [--vm] [--cmds] [--binding] filename
ktool info [--slice n] [filename] - Print generic info about a MachO File
ktool info [--slice n] --vm [filename] - Print VM -> Slice -> File address mapping for a slice of a MachO File
ktool info [--slice n] --cmds [filename] - Print list of load commands for a file 
ktool info [--slice n] --binding [filename] - Print binding actions for a file

Will document other features soon, more are on the way.


written in python for the sake of platform independence when operating on static binaries and libraries

Special thanks to

IDA for making it possible to write the code without actually understanding full internals
JLevin and *OS Internals Vol 1 for actually understanding the internals and specifics + writing documentation
arandomdev for guidance + code

Project details


Release history Release notifications | RSS feed

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

k2l-0.2.2.tar.gz (18.6 kB view details)

Uploaded Source

Built Distribution

k2l-0.2.2-py3-none-any.whl (21.1 kB view details)

Uploaded Python 3

File details

Details for the file k2l-0.2.2.tar.gz.

File metadata

  • Download URL: k2l-0.2.2.tar.gz
  • Upload date:
  • Size: 18.6 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/3.4.2 importlib_metadata/4.6.1 pkginfo/1.7.1 requests/2.23.0 requests-toolbelt/0.9.1 tqdm/4.61.2 CPython/3.8.10

File hashes

Hashes for k2l-0.2.2.tar.gz
Algorithm Hash digest
SHA256 cbd3ad55e543ce538350a7f35d5215980eccff65a25cfe787bacb53a6975d517
MD5 837bbc60dd531b674940bbfb19cd1c7c
BLAKE2b-256 9880ede82c0442695607ee19ead0ecf53f9c3179eaeb82be56de20cdb079fa6b

See more details on using hashes here.

File details

Details for the file k2l-0.2.2-py3-none-any.whl.

File metadata

  • Download URL: k2l-0.2.2-py3-none-any.whl
  • Upload date:
  • Size: 21.1 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/3.4.2 importlib_metadata/4.6.1 pkginfo/1.7.1 requests/2.23.0 requests-toolbelt/0.9.1 tqdm/4.61.2 CPython/3.8.10

File hashes

Hashes for k2l-0.2.2-py3-none-any.whl
Algorithm Hash digest
SHA256 11e3b13555c78eaadd2a967f60c84c97d1edc7e0a933254b4c216f898535522d
MD5 c23ca071d15b31c33da4d3881460ae11
BLAKE2b-256 80e4d2d6afad85d88c5b8aa8e0089c356cfd9885ac083ceb016d46c8005842cd

See more details on using hashes here.

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page