Class: Rex::MachParsey::Mach

Inherits:
MachBase show all
Defined in:
lib/rex/machparsey/mach.rb

Constant Summary

Constants inherited from MachBase

Rex::MachParsey::MachBase::CPU_SUBTYPE_BIG_ENDIAN, Rex::MachParsey::MachBase::CPU_SUBTYPE_LITTLE_ENDIAN, Rex::MachParsey::MachBase::CPU_TYPE_ARM, Rex::MachParsey::MachBase::CPU_TYPE_I386, Rex::MachParsey::MachBase::CPU_TYPE_POWERPC, Rex::MachParsey::MachBase::CPU_TYPE_POWERPC64, Rex::MachParsey::MachBase::CPU_TYPE_X86_64, Rex::MachParsey::MachBase::LC_DYSYMTAB, Rex::MachParsey::MachBase::LC_FVMFILE, Rex::MachParsey::MachBase::LC_IDENT, Rex::MachParsey::MachBase::LC_IDFVMLIB, Rex::MachParsey::MachBase::LC_ID_DYLIB, Rex::MachParsey::MachBase::LC_ID_DYLINKER, Rex::MachParsey::MachBase::LC_LOADFVMLIB, Rex::MachParsey::MachBase::LC_LOAD_DYLIB, Rex::MachParsey::MachBase::LC_LOAD_DYLINKER, Rex::MachParsey::MachBase::LC_PREBOUND_DYLIB, Rex::MachParsey::MachBase::LC_PREPAGE, Rex::MachParsey::MachBase::LC_SEGMENT, Rex::MachParsey::MachBase::LC_SEGMENT_64, Rex::MachParsey::MachBase::LC_SYMSEG, Rex::MachParsey::MachBase::LC_SYMTAB, Rex::MachParsey::MachBase::LC_THREAD, Rex::MachParsey::MachBase::LC_UNIXTHREAD, Rex::MachParsey::MachBase::LOAD_COMMAND_LSB, Rex::MachParsey::MachBase::LOAD_COMMAND_MSB, Rex::MachParsey::MachBase::LOAD_COMMAND_SIZE, Rex::MachParsey::MachBase::MACH_HEADER_64_LSB, Rex::MachParsey::MachBase::MACH_HEADER_64_MSB, Rex::MachParsey::MachBase::MACH_HEADER_LSB, Rex::MachParsey::MachBase::MACH_HEADER_MSB, Rex::MachParsey::MachBase::MACH_HEADER_SIZE, Rex::MachParsey::MachBase::MACH_HEADER_SIZE_64, Rex::MachParsey::MachBase::MH_CIGAM, Rex::MachParsey::MachBase::MH_CIGAM_64, Rex::MachParsey::MachBase::MH_MAGIC, Rex::MachParsey::MachBase::MH_MAGIC_64, Rex::MachParsey::MachBase::SEGMENT_COMMAND_64_LSB, Rex::MachParsey::MachBase::SEGMENT_COMMAND_64_MSB, Rex::MachParsey::MachBase::SEGMENT_COMMAND_LSB, Rex::MachParsey::MachBase::SEGMENT_COMMAND_MSB, Rex::MachParsey::MachBase::SEGMENT_COMMAND_SIZE, Rex::MachParsey::MachBase::SEGMENT_COMMAND_SIZE_64

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(isource, offset = 0, fat = false) ⇒ Mach

Returns a new instance of Mach.



14
15
16
17
18
19
20
21
22
23
 
# File 'lib/rex/machparsey/mach.rb', line 14

def initialize(isource, offset = 0, fat = false)
	_parse_mach_header(isource, offset)
	if fat == true
		self.fat_offset = offset
	else
		self.fat_offset = 0
	end

	self.isource = isource
end

Instance Attribute Details

#arch ⇒ Object

Returns the value of attribute arch.



12
13
14
 
# File 'lib/rex/machparsey/mach.rb', line 12

def arch
  @arch
end

#bits ⇒ Object

Returns the value of attribute bits.



12
13
14
 
# File 'lib/rex/machparsey/mach.rb', line 12

def bits
  @bits
end

#endian ⇒ Object

Returns the value of attribute endian.



12
13
14
 
# File 'lib/rex/machparsey/mach.rb', line 12

def endian
  @endian
end

#fat_offset ⇒ Object

Returns the value of attribute fat_offset.



12
13
14
 
# File 'lib/rex/machparsey/mach.rb', line 12

def fat_offset
  @fat_offset
end

#isource ⇒ Object

Returns the value of attribute isource.



12
13
14
 
# File 'lib/rex/machparsey/mach.rb', line 12

def isource
  @isource
end

#mach_header ⇒ Object

Returns the value of attribute mach_header.



12
13
14
 
# File 'lib/rex/machparsey/mach.rb', line 12

def mach_header
  @mach_header
end

#segments ⇒ Object

Returns the value of attribute segments.



12
13
14
 
# File 'lib/rex/machparsey/mach.rb', line 12

def segments
  @segments
end

Class Method Details

.new_from_file(filename, disk_backed = false) ⇒ Object 



61
62
63
64
65
66
67
68
69
70
71
72
 
# File 'lib/rex/machparsey/mach.rb', line 61

def self.new_from_file(filename, disk_backed = false)

	file = ::File.open(filename, "rb")

	if disk_backed
		return self.new(ImageSource::Disk.new(file))
	else
		obj = new_from_string(file.read)
		file.close
		return obj
	end
end

.new_from_string(data) ⇒ Object 



74
75
76
 
# File 'lib/rex/machparsey/mach.rb', line 74

def self.new_from_string(data)
	return self.new(ImageSource::Memory.new(data))
end

Instance Method Details

#_parse_mach_header(isource, offset) ⇒ Object 



25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
 
# File 'lib/rex/machparsey/mach.rb', line 25

def _parse_mach_header(isource, offset)
	self.mach_header = MachHeader.new(isource.read(offset, MACH_HEADER_SIZE_64))
	bits = mach_header.bits
	endian = mach_header.endian
	ncmds = mach_header.ncmds

	if bits == BITS_32
		offset += MACH_HEADER_SIZE
	else
		offset += MACH_HEADER_SIZE_64
	end


	segments = []
	ncmds.times do
		load_command = LoadCommand.new(isource.read(offset, LOAD_COMMAND_SIZE), endian)

		case load_command.cmd
			when LC_SEGMENT
				segments << Segment.new(isource.read(offset, SEGMENT_COMMAND_SIZE), bits, endian)
			when LC_SEGMENT_64
				segments << Segment.new(isource.read(offset, SEGMENT_COMMAND_SIZE_64), bits, endian)
		end

		offset += load_command.cmdsize
	end

	self.mach_header = mach_header
	self.segments = segments	
	self.isource = isource
	self.bits = bits
	self.endian = endian

	return segments
end

#close ⇒ Object 



98
99
100
 
# File 'lib/rex/machparsey/mach.rb', line 98

def close
	isource.close
end

#index(*args) ⇒ Object 



94
95
96
 
# File 'lib/rex/machparsey/mach.rb', line 94

def index(*args)
	isource.index(*args)
end

#ptr_32? ⇒ Boolean

Returns:

  • (Boolean) 


82
83
84
 
# File 'lib/rex/machparsey/mach.rb', line 82

def ptr_32?
	ptr_64? == false
end

#ptr_64? ⇒ Boolean

Returns:

  • (Boolean) 


78
79
80
 
# File 'lib/rex/machparsey/mach.rb', line 78

def ptr_64?
	mach_header.bits == BITS_64		
end

#ptr_s(vaddr) ⇒ Object 



86
87
88
 
# File 'lib/rex/machparsey/mach.rb', line 86

def ptr_s(vaddr)
	(ptr_32?) ? ("0x%.8x" % vaddr) : ("0x%.16x" % vaddr)
end

#read(offset, len) ⇒ Object 



90
91
92
 
# File 'lib/rex/machparsey/mach.rb', line 90

def read(offset, len)
	isource.read(fat_offset + offset, len)
end