Questions tagged [shared-object]
The shared-object tag has no usage guidance.
33 questions
1
vote
0
answers
400
views
Read value from frida hooked native method Jlong parameter
I am new to using frida for hooking native android code i.e lib.so, so I have load the lib into ghidra and can find the native function. the native function is getting 5 params including jnienv and ...
- 309
0
votes
1
answer
406
views
How learn which functions are called in .so library at Android?
I want to learn how listen certain .so files. I mean what is the way to know which fuctions are called which body of code executed in shared library at Android? I just wanted mofify stock camera on my ...
1
vote
0
answers
53
views
JEB pro is not showing xrefs for native code (arm)
i have this problem when analyzing arm shared object.
when working with IDA pro, it finds all xrefs but in jeb, most of xrefs are missing.
when JEB finfishes, the final analysis lacks most of xrefs. I ...
- 51
2
votes
0
answers
542
views
Cannot load libvulkan.so on Linux chroot running on Android while normal Android apps can load it
Environment
First I will give a quick summary of my environment
Device: Samsung Galaxy M20 (m20lte)
SoC: Exynos 7904 (with Mali-G71 GPU)
OS: Android 10 (Stock ROM with root using Magisk)
Kernel: 4.4....
- 259
2
votes
0
answers
292
views
ghidra assigns local variable to register
im reversing a android native library and im trying to understand how a token is generated the toke n is passed to a callback java method and i traced where the method is getting called from
this is ...
- 191
1
vote
0
answers
38
views
How to prevent dynamic loader from modifying binary in memory?
I have patched a loadable object (an .so file) from this:
xor eax,0x304b7c0
to this:
mov eax,0x0
When I try to run my binary with these modifications, the application loads the .so file and then it ...
- 11
1
vote
0
answers
125
views
how to hide all export functions in a elf so library?
I have this game I want to patch, the game server executable loads a elf so library with functions. I want to add new functions into this library so I patched the game server executable with elfpatch ...
2
votes
1
answer
903
views
Load to Ida binary with all of SO
I have a Linux ARM binary with a lot of shared libraries.
Can I load all of them into one IDA instance so that I can easily navigate between functions? For example: functions that the binary calls and ...
- 281
1
vote
0
answers
126
views
Which encryption returns 192 hash value it means 96 in bytes?
I am reversing an APK and there is a signature that needs to be found.
The function from where the signature is generated is present in the .so file.
I did small debugging. While doing it, the ...
- 11
2
votes
1
answer
298
views
Dynamically linked shared objects
From some time I struggle with the dynamically loaded object into process memory. How it exactly works? I found a lot of materials telling that shared objects shares the same code and has only on ...
2
votes
1
answer
2k
views
How do I execute "File -> Add To Program..." in a Ghidra script?
I'm reversing an old video game with large number of shared libraries, and in order to reference them all correctly (via "thunk" functions?) I think I need to import all of the raw files ...
- 21
2
votes
1
answer
169
views
Load a *.dylib or *.so object into the Javascript V8 runtime?
I was reading this Frida release page and noticed it made the following reference:
Short of writing the whole agent in C, one could go ahead and build a
native library, and load it using Module....
- 183
1
vote
2
answers
8k
views
IDA Freeware 7.0 disassemble ARM .so file
I have a .so file from an android app, and I want to disassemble it with IDA. However I get the error:
The processor type 'arm' is not included in the installed version of IDA.
IDA Version: Freeware ...
- 23
1
vote
3
answers
3k
views
Reverse engineer .so file from android app with radare2
I have a .so file from an android app, and I know how to list all functions in IDA Pro.
How can I do this with radare2?
- 23
1
vote
0
answers
807
views
Some obstacles in reversing a JNI Native library
I deleted my last question (it was not still answered and none's effort was wasted) as I got back and thought to re-read JNI documentation, to find I misinterpreted some bits. Things are now clearer
...
- 11
4
votes
1
answer
8k
views
How to reverse a Cython shared object (.so)
I have a .so file (ELF 64-bit LSB shared object, x86-64, dynamically linked, no section header) with an embedded Cython program.
To run the program inside the .so file there is a single python3 ...
- 141
2
votes
0
answers
93
views
When virtual table is not the first element of structure?
Assuming that source code is compiled for ARMv7 architecure using clang (native shared object library for Android, Itanium ABI) what are the cases when virtual table pointer is not the first element ...
- 121
1
vote
0
answers
581
views
Calling functions of a shared object (.so) extracted from an APK
Decompiling a regular Android application I noticed that its code uses some native functions. So, unpacking the (.apk) file I found the usual "lib" folder and under that a series of folders for ...
- 11
1
vote
1
answer
1k
views
anti-debugger techniques for shared library
I'm adding copyright protection to a demo version of a shared library. I've seem some recommendations to add timing around license violation detection codes -- which would be debugger + patch targets ...
- 13
2
votes
0
answers
962
views
How to export to *.so file after patching in ghidra
I'm using ghidra to patch an *.so file in the Android APK.
While exporting the patched file from ghidra, using the "Export program" option from the "File" menu, it don't have *.so in the supported "...
- 433
4
votes
1
answer
123
views
What does a C++ identifier ending in $_## mean?
In trying to understand a .so from an Android game made with Cocos2d-x, I've come across identifiers like the following (after demangling):
SceneActionMap::updateTalkMode(float)::$_37
SceneActionMap::...
- 73
2
votes
1
answer
5k
views
Inject code into JNI function (Android shared library)
An android app loads a native library (.so) using System.loadLibrary. It then calls a specific function, which takes 3 input variables, and returns a string containing a MD5 hash.
You can see the ...
user22348
1
vote
1
answer
101
views
HighWaterNumberOfObjects/Handles meaning?
I've been looking at some kernel debugging and came to see this:
0: kd> dt nt!_OBJECT_TYPE ffffd0851aad6c90
+0x000 TypeList : _LIST_ENTRY [ 0xffffd085`1aad6c90 - 0xffffd085`1aad6c90 ]
...
- 13
1
vote
1
answer
859
views
JNI_onLoad not presented in .so (Android)
I'm trying to analyze a .so file that is ran on android.
Loading the file into IDA I'm unable to spot the JNI_onLoad.
So I dumped the .so to memory and I'm still unable to spot the JNI_onLoad.
...
- 231
0
votes
1
answer
2k
views
Need help reversing an Android Game
I am trying to find the portion of code in an android game that is responsible for the main logic of the game. (e.g Calculating damage when shooting the zombie) The game is obviously using native code ...
- 175
0
votes
2
answers
778
views
How can I debug android native library with ida demo?
I am trying to debug android native library using ida demo version everything otherthing is working except some one I can't find android_server file for keeping on android device and can't see the ...
- 101
1
vote
3
answers
8k
views
How to dump Android shared library from memory?
I have encrypted Android so library that decrypts itself on load. I want to get its unencrypted code. For me it looks good idea to dump that library from memory when application started.
I used /proc/...
- 395
7
votes
2
answers
1k
views
Attach Shared Object to android process with IDA
I am:
working with an Android game,
using an Android Emulator,
and trying to attach an android .so library to a process.
I have the whole IDA server set up, I can attach to processes when a classes....
- 71
0
votes
1
answer
143
views
how Can I use a linux so file from a program other than the program it was developed for?
I wish to use the codecs that come with realplayer but without needing realplayer. The codecs I want to use are all in .so format, but I don't know how to separate the codecs from the rest of ...
1
vote
0
answers
583
views
Add debugging symbols to objdump -d
I have a shared object (from a Debian package) and its debug library (from the associated debug package). If I disassemble the SO with objdump -d I only see (what I believe to be) the exported symbols....
1
vote
1
answer
5k
views
Breakpoint to debug Android Native Shared Library
I'm trying to solve FLARE-on 2015 challenge #06 (http://www.flare-on.com/files/2015_FLAREOn_Challenges.zip) using a dynamic analysis approach. It's an Android APK that loads a shared library (...
- 109
3
votes
2
answers
4k
views
Finding the library an imported function is from in IDA
I'm fairly new to reversing, and I have even less experience with IDA Pro. I am wondering if there is a way to figure out from where an imported function is imported, i.e. a memory location I can find ...
- 31
0
votes
1
answer
157
views
Finding "free" inside libc.so
I extracted the libc.so.6 from within a vulnerable image used for exploitation purposes. I open up the shared object in IDA and I look at the symbols inside the "Exports" tab. I find "free"; upon ...
user1743