jperezduerto.info
Reverse engineering
Ninguna herramienta coincide.
-
apktoolweb
Decodes and rebuilds Android APK resources so you can read manifests and smali during mobile lab work.
ayuda
Unrecognized option: -h Apktool v2.7.0-dirty - a tool for reengineering Android apk files with smali v2.5.2.git2771eae-debian and baksmali v2.5.2.git2771eae-debian Copyright 2010 Ryszard Wiśniewski <brut.alll@gmail.com> Copyright 2010 Connor Tumbleson <connor.tumbleson@gmail.com> usage: apktool -advance,--advanced prints advance information. -version,--version prints the version then exits usage: apktool if|install-framework [options] <framework.apk> -p,--frame-path <dir> Stores framework files into <dir>. -t,--tag <tag> Tag frameworks using <tag>. usage: apktool d[ecode] [options] <file_apk> -f,--force Force delete destination directory. -o,--output <dir> The name of folder that gets written. Default is apk.out -p,--frame-path <dir> Uses framework files located in <dir>. -r,--no-res Do not decode resources. -s,--no-src Do not decode sources. -t,--frame-tag <tag> Uses framework files tagged by <tag>. usage: apktool b[uild] [options] <app_path> -f,--force-all Skip changes detection and build all files. -o,--output <dir> The name of apk that gets written. Default is dist/name.apk -p,--frame-path <dir> Uses framework files located in <dir>. For additional info, see: https://ibotpeaches.github.io/Apktool/ For smali/baksmali info, see: https://github.com/JesusFreke/smali -
bytecode-viewerweb
GUI for reading Java and Android bytecode with multiple decompilers side by side.
-
clang
LLVM-based C/C++ compiler used when you rebuild targets or instrument code for analysis.
ayuda
OVERVIEW: clang LLVM compiler USAGE: clang [options] file... OPTIONS: -### Print (but do not run) the commands to run for this compilation --analyzer-output <value> Static analyzer report output format (html|plist|plist-multi-file|plist-html|sarif|sarif-html|text). --analyze Run the static analyzer -B <prefix> Search $prefix$file for executables, libraries, and data files. If $prefix is a directory, search $prefix/$file -b <arg> Pass -b <arg> to the linker on AIX -CC Include comments from within macros in preprocessed output -cl-denorms-are-zero OpenCL only. Allow denormals to be flushed to zero. -cl-ext=<value> OpenCL only. Enable or disable OpenCL extensions/optional features. The argument is a comma-separated sequence of one or more extension names, each prefixed by '+' or '-'. -cl-fast-relaxed-math OpenCL only. Sets -cl-finite-math-only and -cl-unsafe-math-optimizations, and defines __FAST_RELAXED_MATH__. -cl-finite-math-only OpenCL only. Allow floating-point optimizations that assume arguments and results are not NaNs or +-Inf. -cl-fp32-correctly-rounded-divide-sqrt OpenCL only. Specify that single precision floating-point divide and sqrt used in the program source are correctly rounded. -cl-kernel-arg-info OpenCL only. Generate kernel argument metadata. -cl-mad-enable OpenCL only. Allow use of less precise MAD computations in the generated binary. -cl-no-signed-zeros OpenCL only. Allow use of less precise no signed zeros computations in the generated binary. -cl-no-stdinc OpenCL only. Disables all standard includes containing non-native compiler types and functions. -cl-opt-disable OpenCL only. This option disables all optimizations. By default optimizations are enabled. -cl-single-precision-constant OpenCL only. Treat double precision floating-point constant as single precision constant. -cl-std=<value> OpenCL language standard to compile for. -cl-strict-aliasing OpenCL only. This option is added for compatibility with OpenCL 1.0. -cl-uniform-work-group-size OpenCL only. Defines that the global work-size be a multiple of the work-group size specified to clEnqueueNDRangeKernel -cl-unsafe-math-optimizations OpenCL only. Allow unsafe floating-point optimizations. Also implies -cl-no-signed-zeros and -cl-mad-enable. -clangir-disable-passes Disable CIR transformations pipeline -clangir-disable-verifier ClangIR: Disable MLIR module verifier --config=<file> Specify configuration file --cuda-compile-host-device Compile CUDA code for both host and device (default). Has no effect on non-CUDA compilations. --cuda-device-only Compile CUDA code for device only --cuda-feature=<value> Manually specify the CUDA feature to use --cuda-host-only Compile CUDA code for host only. Has no effect on non-CUDA compilations. --cuda-include-ptx=<value> Include PTX for the following GPU architecture (e.g. sm_35) or 'all'. May be specified more than once. --cuda-noopt-device-debug Enable device-side debug info generation. Disables ptxas optimizations. --cuda-path-ignore-env Ignore environment variables to detect CUDA installation … (115 more lines — see the tool's home page) -
dex2jarweb
Converts Android DEX to JAR so Java decompilers can read mobile lab samples.
-
edb-debuggerweb
Qt debugger for live binary inspection when GDB alone is the wrong interface.
-
jadxweb
Decompiles Android DEX/APK into readable Java-like source when you are reversing a mobile sample.
ayuda
jadx - dex to java decompiler, version: 1.5.6 usage: jadx [command] [options] <input files> (.apk, .dex, .jar, .class, .smali, .zip, .aar, .arsc, .aab, .xapk, .apkm, .jadx.kts) commands (use '<command> --help' for command options): plugins - manage jadx plugins options: -d, --output-dir - output directory -ds, --output-dir-src - output directory for sources -dr, --output-dir-res - output directory for resources -r, --no-res - do not decode resources -s, --no-src - do not decompile source code -j, --threads-count - processing threads count, default: 2 --single-class - decompile a single class, full name, raw or alias --single-class-output - file or dir for write if decompile a single class --output-format - can be 'java' or 'json', default: java -e, --export-gradle - save as gradle project (set '--export-gradle-type' to 'auto') --export-gradle-type - Gradle project template for export: 'auto' - detect automatically 'android-app' - Android Application (apk) 'android-library' - Android Library (aar) 'simple-java' - simple Java -m, --decompilation-mode - code output mode: 'auto' - trying best options (default) 'restructure' - restore code structure (normal java code) 'simple' - simplified instructions (linear, with goto's) 'fallback' - raw instructions without modifications --show-bad-code - show inconsistent code (incorrectly decompiled) --no-xml-pretty-print - do not prettify XML --no-imports - disable use of imports, always write entire package name --no-debug-info - disable debug info parsing and processing --add-debug-lines - add comments with debug line numbers if available --no-inline-anonymous - disable anonymous classes inline --no-inline-methods - disable methods inline --no-move-inner-classes - disable move inner classes into parent --no-inline-kotlin-lambda - disable inline for Kotlin lambdas --no-finally - don't extract finally block --no-restore-switch-over-string - don't restore switch over string --no-replace-consts - don't replace constant value with matching constant field --escape-unicode - escape non latin characters in strings (with \u) --respect-bytecode-access-modifiers - don't change original access modifiers --mappings-path - deobfuscation mappings file or directory. Allowed formats: Tiny and Tiny v2 (both '.tiny'), Enigma (.mapping) or Enigma directory --mappings-mode - set mode for handling the deobfuscation mapping file: 'read' - just read, user can always save manually (default) 'read-and-autosave-every-change' - read and autosave after every change … (93 more lines — see the tool's home page) -
javasnoop
Hooks local Java apps so you can intercept calls without rebuilding the JAR first.
-
jd-guiweb
GUI decompiler for Java .class/.jar files when you want a clickable tree of recovered source.
-
ollydbgweb
Classic 32-bit Windows user-mode debugger for stepping PE malware samples in a throwaway VM.
ayuda
0074:err:winediag:nodrv_CreateWindow Application tried to create a window, but no driver could be loaded. 0074:err:winediag:nodrv_CreateWindow L"The explorer process failed to start." 0074:err:systray:initialize_systray Could not create tray window 0024:err:winediag:nodrv_CreateWindow Application tried to create a window, but no driver could be loaded. 0024:err:winediag:nodrv_CreateWindow L"Make sure that your display server is running and that its variables are set." -
Reverse-engineering framework for disassembly and binary analysis.
ayuda
Usage: r2 [-ACdfjLMnNqStuvwzX] [-P patch] [-p prj] [-a arch] [-b bits] [-c cmd] [-s addr] [-B baddr] [-m maddr] [-i script] [-e k=v] file|pid|-|--|= -- run radare2 without opening any file - same as 'r2 malloc://512' = read file from stdin (use -i and -c to run cmds) -= perform !=! command to run all commands remotely -0 print \x00 after init and every command -1 redirect stderr to stdout -2 close stderr file descriptor (silent warning messages) -a [arch] set asm.arch -A run 'aaa' command to analyze all referenced code -b [bits] set asm.bits -B [baddr] set base address for PIE binaries -c 'cmd..' execute radare command -C file is host:port (alias for -c+=http://%s/cmd/) -d debug the executable 'file' or running process 'pid' -D [backend] enable debug mode (e cfg.debug=true) -e k=v evaluate config var -f block size = file size -F [binplug] force to use that rbin plugin -h, -hh show help message, -hh for long -H ([var]) display variable -i [file] run rlang program, r2script file or load plugin -I [file] run script file before the file is opened -j use json for -v, -L and maybe others -k [OS/kern] set asm.os (linux, macos, w32, netbsd, ...) -L, -LL list supported IO plugins (-LL list core plugins) -m [addr] map file at given address (loadaddr) -M do not demangle symbol names -n, -nn do not load RBin info (-nn only load bin structures) -N do not load user settings and scripts -NN do not load any script or plugin -q quiet mode (no prompt) and quit after -i -qq quit after running all -c and -i -Q quiet mode (no prompt) and quit faster (quickLeak=true) -p [prj] use project, list if no arg, load if no file -P [file] apply rapatch file and quit -r [rarun2] specify rarun2 profile to load (same as -e dbg.profile=X) -R [rr2rule] specify custom rarun2 directive (uses base64 dbg.profile) -s [addr] initial seek -S start r2 in sandbox mode -t load rabin2 info in thread -u set bin.filter=false to get raw sym/sec/cls names -v, -V show radare2 version (-V show lib versions) -w open file in write mode … (3 more lines — see the tool's home page) -
rizinweb
Reverse engineering framework and CLI toolset (radare fork lineage) for binaries and firmware.
-
rizin-cutterweb
Qt GUI on top of rizin for interactive reverse engineering when the CLI is too slow to explore.
-
rz-ghidraweb
Ghidra decompiler and Sleigh disassembler plugin wired into the rizin toolset.
Cuando hay un propósito escrito para esta ruta, se muestra primero. Si no, ves el resumen del paquete. La ayuda se captura en vivo desde un Kali cuando está disponible.