0xdevalias

Reverse Engineering on macOS

Some notes, tools, and techniques for reverse engineering macOS binaries.

Table of Contents

• Reverse Engineering Tools
  • Binary Ninja
• Binary Ninja Plugins/Themes

a0rtega

# Installation: Copy hexrays_allthethings.py to the plugins/ directory of IDA, restart IDA
# Usage: Edit->Plugins->"Run Hex-Rays decompiler on all functions" or use Ctrl+9
# Tested in IDA 7.6, Python 3
# https://github.com/a0rtega

import ida_kernwin, ida_idaapi, ida_auto
import tempfile, os

class HexRaysAllTheThingsPlugin(ida_idaapi.plugin_t):
    flags = ida_idaapi.PLUGIN_KEEP

patrick330602

sudo apt install dkms linux-headers-generic
git clone https://github.com/anbox/anbox-modules
cd ./anbox-modules
sudo cp anbox.conf /etc/modules-load.d/
sudo cp 99-anbox.rules /lib/udev/rules.d/
sudo cp -rT ashmem /usr/src/anbox-ashmem-1
sudo cp -rT binder /usr/src/anbox-binder-1
sudo dkms install anbox-ashmem/1
sudo dkms install anbox-binder/1
sudo modprobe ashmem_linux

Razer6

ModelSim Installation on Ubuntu

Installation requirements

The free version of Modelsim is a 32-bit binary and therefore requires certain 32-bit libraries in order to work correctly. For Ubunutu, install the following packages

sudo dpkg --add-architecture i386
sudo apt-get update
sudo apt-get install libc6:i386 libncurses5:i386 libstdc++6:i386 lib32ncurses6 libxft2 libxft2:i386 libxext6 libxext6:i386 

omasanori

class Node
  attr_accessor :symbol, :score, :my_turn, :children, :visited

  def initialize(symbol, score, my_turn, children)
    @symbol = symbol
    @score = score
    @my_turn = my_turn
    @children = children
    @visited = false
  end