PPTool

Python tool to find the loading addresses of Dart objects in libapp.so through their pool pointer offset.

Support

ARM64, ARM libs
Host runtime support: Debian 11 amd64/x64 (full)

Requierements

Python3

Installation

Download the wheel here: https://github.com/Kirlif/PPTool/releases

pip install --user pptool-2.0-py3-none-any.whl

Usage

from CLI

pptool [-h] [-v] [-c] [-d] [-s] [-j] libapp offset [offset ...]

single-file script (Debian 11 amd64/x64 friendly)

python3 pptool_single.py [-h] [-v] [-c] [-d] [-s] [-j] libapp offset [offset ...]

positional arguments

libapp: path to libapp.so

offset: pool pointer offsets to be searched
sequence of hex strings

options

-c: use default color

-d: don't display assembly/disassembly

-s: create a simple output

-j: full output in JSON format

from Python

>>> from pptool import pptool
>>> ppt = pptool()
>>> ppt.set_libapp(libapp)
>>> ppt.set_offsets(*ppo_seq)
>>> res = ppt.result(tree_color=True, hide_ass_disass=False)
>>> print(res)
>>> spl = ppt.simple()
>>> print(spl)
>>> jsn = ppt.json()
...