{"id":23135996,"url":"https://github.com/shark4ce/ghidra-sandblaster-plugin","last_synced_at":"2025-04-04T08:25:01.559Z","repository":{"id":191180411,"uuid":"677411461","full_name":"shark4ce/Ghidra-SandBlaster-Plugin","owner":"shark4ce","description":" The SandBlaster Plugin is a sophisticated extension for Ghidra that seamlessly integrates the functionalities of the SandBlaster tool into the Ghidra environment.","archived":false,"fork":false,"pushed_at":"2023-09-05T14:47:02.000Z","size":2030,"stargazers_count":2,"open_issues_count":0,"forks_count":1,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-02-09T19:38:56.942Z","etag":null,"topics":["ghidra","ghidra-plugin","ios","macos","malus-security","reverse-engineering","sandblaster","sandbox-profiles","sbpl"],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/shark4ce.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-08-11T14:03:18.000Z","updated_at":"2023-10-09T13:30:15.000Z","dependencies_parsed_at":"2025-02-09T19:29:56.553Z","dependency_job_id":"e7729538-e6a6-4a3d-aae0-357f986e7163","html_url":"https://github.com/shark4ce/Ghidra-SandBlaster-Plugin","commit_stats":null,"previous_names":["shark4ce/ghidra-sandblaster-plugin"],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shark4ce%2FGhidra-SandBlaster-Plugin","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shark4ce%2FGhidra-SandBlaster-Plugin/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shark4ce%2FGhidra-SandBlaster-Plugin/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shark4ce%2FGhidra-SandBlaster-Plugin/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/shark4ce","download_url":"https://codeload.github.com/shark4ce/Ghidra-SandBlaster-Plugin/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247144098,"owners_count":20891062,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ghidra","ghidra-plugin","ios","macos","malus-security","reverse-engineering","sandblaster","sandbox-profiles","sbpl"],"created_at":"2024-12-17T12:18:23.093Z","updated_at":"2025-04-04T08:25:01.535Z","avatar_url":"https://github.com/shark4ce.png","language":"Java","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Ghidra SandBlaster Plugin\n\n[![GitHub Release](https://img.shields.io/github/release/shark4ce/Ghidra-SandBlaster-Plugin.svg)](https://github.com/shark4ce/Ghidra-SandBlaster-Plugin/releases/)\n\n\nThe SandBlasterPlugin for Ghidra is a specialized and sophisticated extension that leverages the functionalities of the [SandBlaster](https://github.com/malus-security/sandblaster.git) tool to facilitate the streamlined analysis and reverse engineering of iOS sandbox profiles. This tool is essential in converting the profiles from their binary format into a human-readable SBPL (Sandbox Profile Language) format, directly within the Ghidra environment. The iOS operating system employs a security feature known as the sandbox, which imposes restrictions on applications, limiting their access to certain parts of the system or user data. These restrictions are delineated in sandbox profiles, typically stored in a binary format. The SandBlaster Plugin simplifies the analysis process by converting these binary profiles into the readable SBPL format, thereby aiding researchers and security analysts in comprehending and assessing the security implications of these profiles.\n\n\n## Prerequisites\n\n- Ghidra\n- Python 2\n- Python 3\n- pip (Python package installer for Python 3)\n- `lief` package for Python 3\n\nThe plugin handles the installation of additional Python 3 required packages, such as `lief`.\n\n## Submodules\n\nThis project includes the [SandBlaster](https://github.com/malus-security/sandblaster.git) submodule, which requires Python 2, Python 3, pip, and the `lief` package for Python 3.\n\n## Installation\n\n1. Download the `.zip` file from [releases](https://github.com/shark4ce/Ghidra-SandBlaster-Plugin/releases/) section of this repository and install it in Ghidra in Ghidra in `File → Install Extensions...`\n\n    `OR`\n   \n1. Clone this repository:\n\n    ```\n    git clone https://github.com/yourusername/ghidra-plugin.git\n    cd ghidra-plugin\n    ```\n\n2. Initialize and update the submodules:\n\n    ```\n    git submodule init\n    git submodule update\n    ```\n\n3. Build the Ghidra plugin:\n\n    ```\n    ./gradlew build\n    ```\n\n    This will generate a `.zip` file in the `dist` directory.\n\n4. Once built, the plugin can be installed in Ghidra in `File → Install Extensions...`\n\n## Usage\n\nProvide detailed instructions on how to use the plugin.\n\n1. Start Ghidra.\n2. Open `File → Configure → Miscellaneous` and enable `SandBlasterPlugin`\n3. Open `Window → SandBlasterPlugin` and the main window of plugin will be displayed\n4. Specify `Python2` and `Python3` bin paths or use `Auto Detect` action\n5. Specify a valid `iOS Version` and the `SandBox Operations File Source` and `SandBox Profiles File Source`\n6. `Start` process\n7. View reversed SandBox profiles in the `Result` tab\n8. Check the logs\n\n## Releases\n\nThe built version of the Ghidra plugin can be found in the [releases](https://github.com/shark4ce/Ghidra-SandBlaster-Plugin/releases/) section of this repository.\n\n## Contributing\n\nIf you are interested in contributing to this project, please read the [CONTRIBUTING.md](CONTRIBUTING.md) file.\n\n## License\n\nThis project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fshark4ce%2Fghidra-sandblaster-plugin","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fshark4ce%2Fghidra-sandblaster-plugin","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fshark4ce%2Fghidra-sandblaster-plugin/lists"}