Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/igio90/Dwarf
Full featured multi arch/os debugger built on top of PyQt5 and frida
https://github.com/igio90/Dwarf
android capstone-engine cracking frida ios keystone-engine linux pyqt5 reverse-engineering unicorn-emulator windows
Last synced: 2 months ago
JSON representation
Full featured multi arch/os debugger built on top of PyQt5 and frida
- Host: GitHub
- URL: https://github.com/igio90/Dwarf
- Owner: iGio90
- License: gpl-3.0
- Created: 2018-12-18T17:50:07.000Z (about 6 years ago)
- Default Branch: master
- Last Pushed: 2024-05-16T07:32:52.000Z (7 months ago)
- Last Synced: 2024-10-15T09:41:07.180Z (2 months ago)
- Topics: android, capstone-engine, cracking, frida, ios, keystone-engine, linux, pyqt5, reverse-engineering, unicorn-emulator, windows
- Language: Python
- Homepage:
- Size: 3.38 MB
- Stars: 1,270
- Watchers: 56
- Forks: 168
- Open Issues: 4
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- awesome-frida - Dwarf - A debugger built on top of PyQt5 and frida (Powered by Frida)
README
# Dwarf
[](https://pypi.python.org/pypi/dwarf_debugger/)
[](https://pypi.python.org/pypi/dwarf_debugger/)
[](https://github.com/iGio90/Dwarf/blob/master/LICENSE)
[](https://GitHub.com/iGio90/Dwarf/issues/)
A debugger for reverse engineers, crackers and security analyst.
Or you can call it damn, why are raspberries so fluffy or yet, duck warriors are rich as fuck. Whatever you like!
Built on top of pyqt5, frida and some terrible code.
### Known Issues
+ JavaTraceView is distorted
+ JavaTraceView shows weakref/handle instead of value
We are working on Dwarf 2.0 release
### Installation
```
pip3 install dwarf-debugger
```
Development
```
pip3 install https://github.com/iGio90/Dwarf/archive/master.zip
```
## Usage
#### Debugging UI (attach wizard)
```
dwarf
```
#### Debugging UI (straightforward)
```
dwarf -t android com.facebook.katana
dwarf -t android 2145
dwarf -t ios 2145
dwarf -t local /usr/bin/cat /etc/shadow
```
#### Debugging UI (own agent)
```
dwarf -t android -s /path/to/agent.js com.facebook.katana
dwarf -t local -s /path/to/agent.js /usr/bin/cat /etc/shadow
```
#### Dwarf typings + injector
```
$ dwarf-creator
project path (/home/igio90/test):
>
project name (test):
>
Session type (local)
[*] L (local)
[*] A (android)
[*] I (iOS)
[*] R (remote)
append i to use dwarf-injector (ai | android inject)
> ai
target package (com.whatsapp)
> com.whatsapp
$ (./intelliJ || ./vsCode).open(/home/igio90/test)
.echo('enjoy scripting with frida and dwarf api autocompletition and in-line doc')
$ ./dwarf if myOs == 'unix' else 'dwarf.bat'
```
#### Dwarf trace
```
dwarf-trace -t android --java java.io.File.$init com.facebook.katana
* Trying to spawn com.facebook.katana
* Dwarf attached to 19337
java.io.File $init
/data - java.io.File
misc
java.io.File $init
/data/misc - java.io.File
user
...
```
```
dwarf-trace -t android --native --native-registers x0,x1,sp open+0x32
dwarf-trace -t android --native --native-registers x0,x1,sp targetModule@0x1234
dwarf-trace -t android --native --native-registers x0,x1,sp 0xdc00d0d0
dwarf-trace -t android --native --native-registers x0,x1,sp popen
```
## DwarfCore (source of core.js)
Core for the Python version of dwarf
https://github.com/iGio90/DwarfCore/tree/core1
