read elf files without symbole table

crmulliner / adbi

Android Dynamic Binary Instrumentation Toolkit

http://www.mulliner.org/android

1.25k stars 418 forks source link

read elf files without symbole table #13

Open Flo354 opened 9 years ago

Flo354 commented 9 years ago

Hi,

I made some modifications to your tool. Bellow, the changelist

The tool is now able to parse elf files without symbol table.
The printf of libbase are now redirected into android logs (tag "LIBHOOK")
New makefile to reduce the number of commands

The fork is available here : https://github.com/Flo354/adbi

jduck commented 8 years ago

Please send a clean PR!

jduck commented 8 years ago

BTW, what is the motivation for doing this anyway? I totally get the idea to log to Android's logging system, but why parse elf files without symbol tables?? Why not use the Android.mk build method via the NDK's "ndk-build" command??

jduck commented 8 years ago

Honestly I see multiple PR here:

converting the README into proper markdown
implementing a different log() mechanism using __android_log_print NOTE: PR 2 should not interfere with the existing method and so should be guarded by some ifdef or similar

The rest of the changes are questionable and therefore need more explanation before they can be considered for inclusion.

Flo354 commented 8 years ago

Hi,

1 year after :p I had totally forgotten that pull request.

To answer your question about the parsing of elf files without symbol tables, it's quite simple. I had to audit an application one year ago and I could not use adbi since the application stripped the symbol table to make the reverse engineering more difficult. So I made this modification at first, and then the log mechanism after.

I will do the modifications as soon as possible, since I have my finals soon.