Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: parse certificates, entitlements, symbol table for Mach-O #73

Closed
wants to merge 19 commits into from

Conversation

latonis
Copy link
Contributor

@latonis latonis commented Jan 13, 2024

Implementing another load command for Mach-O. here soon we'll have the ground work to parse the entire symbol table and info 😸

  • Implemented tests, LC_SYMTAB, LC_DYLD_INFO(_ONLY), and more which is needed to parse symbol tables
  • Implemented certificate parsing for signed binaries

@latonis latonis changed the title feat: implement symtab load command parsing for Mach-O feat: implement symbol table parsing for Mach-O Jan 14, 2024
@latonis
Copy link
Contributor Author

latonis commented Jan 16, 2024

@plusvic / @TommYDeeee , thoughts on adding something like https://www.anomali.com/blog/symhash for the Mach-O module as we now parse symtable strings with this PR? Mac version of ImpHash 😸

@latonis latonis changed the title feat: implement symbol table parsing for Mach-O feat: implement symbol table parsing + other load commands for Mach-O Jan 17, 2024
@latonis
Copy link
Contributor Author

latonis commented Jan 19, 2024

Looks like the tests failed due to a Heroku CDN issue, will push another commit later to get tests to run again

@latonis latonis changed the title feat: implement symbol table parsing + other load commands for Mach-O feat: implement symbol table parsing + certificate parsing for Mach-O Jan 19, 2024
@latonis latonis changed the title feat: implement symbol table parsing + certificate parsing for Mach-O feat: parse certificates, entitlements, symbol table for Mach-O Jan 22, 2024
@plusvic
Copy link
Member

plusvic commented Jan 31, 2024

Before the macho module keeps growing I would like to merge this refactoring: #76

@latonis
Copy link
Contributor Author

latonis commented Jan 31, 2024

Before the macho module keeps growing I would like to merge this refactoring: #76

will hold off on any other progress for the module until #76 is merged 😸

@latonis latonis marked this pull request as draft January 31, 2024 19:17
@latonis
Copy link
Contributor Author

latonis commented Jan 31, 2024

Converting to draft while I refactor everything over to the new parser format

@latonis
Copy link
Contributor Author

latonis commented Feb 3, 2024

Moving the new work to #78 as I did not want to rebase and all that jazz, so re-implementing from fresh branch

@latonis
Copy link
Contributor Author

latonis commented Feb 7, 2024

Only thing left to port is the entitlement present function and then this can be closed as everything was rolled into #78

@latonis
Copy link
Contributor Author

latonis commented Feb 10, 2024

Everything has been refactored and reimplemented in #78. Closing this in favor of that one being reviewed and merged. 😸

@latonis latonis closed this Feb 10, 2024
@latonis latonis deleted the macho-symtab branch February 26, 2024 03:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants