GitHub - ccworld1000/CCMachOView: MachOView is a visual Mach-O file browser. It provides a complete solution for exploring and in-place editing Intel and ARM binaries.

ccworld1000 / CCMachOView Public

Notifications You must be signed in to change notification settings
Fork 0
Star 0

MachOView is a visual Mach-O file browser. It provides a complete solution for exploring and in-place editing Intel and ARM binaries.

GPL-2.0 license

0 stars 0 forks Branches Tags Activity

Star

Notifications

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 2 Commits
Base.lproj		Base.lproj
capstone		capstone
en.lproj		en.lproj
mach-o		mach-o
mach		mach
machoview.xcodeproj		machoview.xcodeproj
.gitignore		.gitignore
AppController.h		AppController.h
AppController.mm		AppController.mm
ArchiveLayout.h		ArchiveLayout.h
ArchiveLayout.mm		ArchiveLayout.mm
Attach.h		Attach.h
Attach.mm		Attach.mm
CRTFootPrints.h		CRTFootPrints.h
CRTFootPrints.mm		CRTFootPrints.mm
Common.h		Common.h
DataController.h		DataController.h
DataController.mm		DataController.mm
DataSources.h		DataSources.h
DataSources.mm		DataSources.mm
Document.h		Document.h
Document.mm		Document.mm
DyldInfo.h		DyldInfo.h
DyldInfo.mm		DyldInfo.mm
Exceptions.h		Exceptions.h
Exceptions.mm		Exceptions.mm
FatLayout.h		FatLayout.h
FatLayout.mm		FatLayout.mm
Info.plist		Info.plist
LICENSE		LICENSE
Layout.h		Layout.h
Layout.mm		Layout.mm
LinkEdit.h		LinkEdit.h
LinkEdit.mm		LinkEdit.mm
LoadCommands.h		LoadCommands.h
LoadCommands.mm		LoadCommands.mm
MachOLayout.h		MachOLayout.h
MachOLayout.mm		MachOLayout.mm
ObjC.h		ObjC.h
ObjC.mm		ObjC.mm
PreferenceController.h		PreferenceController.h
PreferenceController.mm		PreferenceController.mm
Prefix.pch		Prefix.pch
README		README
README.orig		README.orig
ReadWrite.h		ReadWrite.h
ReadWrite.mm		ReadWrite.mm
SectionContents.h		SectionContents.h
SectionContents.mm		SectionContents.mm
createdmg		createdmg
greenApple.icns		greenApple.icns
main.mm		main.mm
redApple.icns		redApple.icns
stop.png		stop.png

Repository files navigation

_____ .__ ____________ ____.__
/ \ _____ ____ | |__ \_____ \ \ / /|__| ______ _ __
/ \ / \\__ \ _/ ___\| | \ / | \ Y / | |/ __ \ \/ \/ /
/ Y \/ __ \\ \___| Y \/ | \ / | \ ___/\ /
\____|__ (____ /\___ >___| /\_______ /\___/ |__|\___ >\/\_/
\/ \/ \/ \/ \/ \/

A fork from MachOView to update and fix some bugs, mostly Mountain Lion & iOS 6 related.
Also some small changes to the original behaviour.

Original MachOView by psaghelyi at http://sourceforge.net/projects/machoview/.
Thanks to psaghelyi for his great work :-)

Latest versions use LLVM disassembler and are Lion+ only.
You will need to download the Clang package from http://opensource.apple.com, from Developer Tools.
Unpack it, go to src folder and run configure (you might need to install cmake, from brew or macports).
Now modify the XCode Project settings. Go to Search Paths, and add the path to clang/src/include folder to
the User Header Search Paths.

Try to compile and hopefully it should work. Not sure if this is the best way to achieve it, it works.

Now features the attach option to analyse headers of a running process.
To use this feature you will need to codesign the binary.
Follow this LLDB guide to create the certificate and then codesign MachOView binary.
https://llvm.org/svn/llvm-project/lldb/trunk/docs/code-signing.txt
The necessary entitlements are already added to Info.plist.

Be warned that this allows MachOView to have task_for_pid() privs under current under and control
every process from user running it.
The whole Mach-O parsing code needs to be reviewed and made more robust.

Enjoy,
fG!