Static mach-o binary analysis tool.
Project description
ktool
Static Mach-O binary metadata analysis tool / information dumper
Installation
pip3 install k2l
Usage
usage: ktool [command] <flags> [filename]
ktool dump:
ktool dump --headers --out <directory> [filename] - Dump set of headers for a bin/framework
ktool dump --tbd [filename] - Dump .tbd for a framework
ktool file:
ktool file [filename] - Prints (very) basic info about a file (e.g. "Thin MachO Binary")
ktool info:
usage: ktool info [-h] [--slice SLICE_INDEX] [--vm] [--cmds] [--binding] filename
ktool info [--slice n] [filename] - Print generic info about a MachO File
ktool info [--slice n] --vm [filename] - Print VM -> Slice -> File address mapping for a slice of a MachO File
ktool info [--slice n] --cmds [filename] - Print list of load commands for a file
ktool info [--slice n] --binding [filename] - Print binding actions for a file
Will document other features soon, more are on the way.
written in python for the sake of platform independence when operating on static binaries and libraries
Special thanks to
IDA for making it possible to write the code without actually understanding full internals
JLevin and *OS Internals Vol 1 for actually understanding the internals and specifics + writing documentation
arandomdev for guidance + code
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
k2l-0.2.2.tar.gz
(18.6 kB
view details)
Built Distribution
k2l-0.2.2-py3-none-any.whl
(21.1 kB
view details)
File details
Details for the file k2l-0.2.2.tar.gz
.
File metadata
- Download URL: k2l-0.2.2.tar.gz
- Upload date:
- Size: 18.6 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/3.4.2 importlib_metadata/4.6.1 pkginfo/1.7.1 requests/2.23.0 requests-toolbelt/0.9.1 tqdm/4.61.2 CPython/3.8.10
File hashes
Algorithm | Hash digest | |
---|---|---|
SHA256 | cbd3ad55e543ce538350a7f35d5215980eccff65a25cfe787bacb53a6975d517 |
|
MD5 | 837bbc60dd531b674940bbfb19cd1c7c |
|
BLAKE2b-256 | 9880ede82c0442695607ee19ead0ecf53f9c3179eaeb82be56de20cdb079fa6b |
File details
Details for the file k2l-0.2.2-py3-none-any.whl
.
File metadata
- Download URL: k2l-0.2.2-py3-none-any.whl
- Upload date:
- Size: 21.1 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/3.4.2 importlib_metadata/4.6.1 pkginfo/1.7.1 requests/2.23.0 requests-toolbelt/0.9.1 tqdm/4.61.2 CPython/3.8.10
File hashes
Algorithm | Hash digest | |
---|---|---|
SHA256 | 11e3b13555c78eaadd2a967f60c84c97d1edc7e0a933254b4c216f898535522d |
|
MD5 | c23ca071d15b31c33da4d3881460ae11 |
|
BLAKE2b-256 | 80e4d2d6afad85d88c5b8aa8e0089c356cfd9885ac083ceb016d46c8005842cd |