nyancattw1/redmetaclassanalyzer

Does all kind of cool stuff to make analyzing meta classes easier. Now featuring WRedLogger.py, the previous backend of NetDbg

Explanation of WRedLogger.py:
This is the script that used to drive the NETDBG backend, before the logger was rewritten in Rust. In order to use it, adjust dirName and the port number (420 near the end of script) to your needs.
After that, change the IP address on the info.sin_addr.s_addr line of kern_netdbg.cpp to your external IP, and rebuild the Kext.
NyanCatTW1 *might* be able help you set it up, but there are no guarantees.

redmetaclassanalyzer's Issues

ghidra 10.3.1

this happens on every run on big sur

RedMetaClassAnalyzer.py> Running...
Renaming pointers in __got...
Found __got at 00141000~0014129f
Traceback (most recent call last):
File "/Users/mr/ghidra_scripts/RedMetaClassAnalyzer-main/RedMetaClassAnalyzer.py", line 258, in
symbol = symbolTable.createLabel(addr, name, SourceType.ANALYSIS)
IOAccelTask__gMetaClass
at ghidra.program.model.symbol.SymbolUtilities.validateName(SymbolUtilities.java:239)
at ghidra.program.database.symbol.SymbolManager.validateName(SymbolManager.java:3045)
at ghidra.program.database.symbol.SymbolManager.createCodeSymbol(SymbolManager.java:2847)
at ghidra.program.database.symbol.SymbolManager.createLabel(SymbolManager.java:2820)
at ghidra.program.database.symbol.SymbolManager.createLabel(SymbolManager.java:2811)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:568)
ghidra.util.exception.InvalidInputException: ghidra.util.exception.InvalidInputException: Symbol name contains invalid characters: dyld info library ordinal out of rangefe
IOAccelTask__gMetaClass
RedMetaClassAnalyzer.py> Finished!