Dwarf – Full Featured Multi Arch/Os Debugger Built On Top Of PyQt5 And Frida

A debugger for reverse engineers, crackers and security analyst. Or you can call it damn, why are raspberries so fluffy or yet, duck warriors are rich as fuck. Whatever you like! Built on top of pyqt5, frida and some terrible code.Checkout the website for features, api and examplesCHANGELOGSomething you can do with Dwarfbreakpointswatchpoints without hardware supportvisual emulation with auto map from target, reporting memory accessesbreaks module loading cycle, java classesset breaks conditions and custom logicsinject code on each breakpointed threadexchange data with your target and display it in UIdigging through memory, disassembly and jvm fields/functionsbacktrace both native and javatakes your whole frida agent in script editor, convert hooks to breakpoints etcmore…all of this can be done through scripting to build custom debugging logicPre requisitesA frida server running anywhere.Android Session:make sure you can use ‘adb’ command in console or Read hereroot on the device/emulator is required!make sure frida is in /system/bin|xbin with a+x permissions or eventually use Dwarf to automatically install latest frida serverSetup and rungit clone https://github.com/iGio90/Dwarfcd Dwarfpip3 install -r requirements.txtpython3 dwarf.pyOptionallyYou can install keystone-engine to enable assembler:Windowsx86: https://github.com/keystone-engine/keystone/releases/download/0.9.1/keystone-0.9.1-python-win32.msix64: https://github.com/keystone-engine/keystone/releases/download/0.9.1/keystone-0.9.1-python-win64.msiOSX / Unixpip3 install keystone-enginedex2jar tools (required for baksmali/decompiling)Guide: https://sourceforge.net/p/dex2jar/wiki/UserGuide/Files: https://github.com/pxb1988/dex2jar/releasesOn Windows add d2j folder to %PATH% and change:’java -Xms512m -Xmx1024m -cp “%CP%" %*’in d2j_invoke.bat to’java -Xms512m -Xmx4096m -cp "%CP%" %*’SettingsYou can change in .dwarf"dwarf_ui_hexedit_bpl": 32 (default: 16) – Bytes per line in hexview"dwarf_ui_hexstyle": "upper", "lower" (default: "upper") – overall hexstyle 0xabcdef or 0xABCDEF (note: click on the "Offset (X)" in hexview to change)"dwarf_ui_font_size": 12 (default: 12) – (note: hexview/disasm use other font wait for settingsdlg or change lib/utils.py get_os_monospace_font())Download Dwarf

Link: http://www.kitploit.com/2019/07/dwarf-full-featured-multi-archos.html