class JavaInspector(QWidget):
""" Java Class/Methods Lists
"""
def __init__(self, parent=None):
super(JavaInspector, self).__init__(parent)
self._app_window = parent
self._app_window.dwarf.onEnumerateJavaMethodsComplete.connect(
self._on_method_enumeration_complete)
self._app_window.dwarf.onEnumerateJavaClassesStart.connect(
self._on_class_enumeration_start)
self._app_window.dwarf.onEnumerateJavaClassesMatch.connect(
self._on_class_enumeration_match)
self._app_window.dwarf.onEnumerateJavaClassesComplete.connect(
self._on_class_enumeration_complete)
self._java_classes = DwarfListView(self)
self._javaclass_model = QStandardItemModel(0, 1)
self._javaclass_model.setHeaderData(0, Qt.Horizontal, 'Class')
self._java_classes.setModel(self._javaclass_model)
self._java_classes.selectionModel().selectionChanged.connect(
self._class_clicked)
self._java_classes.header().setSectionResizeMode(
0, QHeaderView.ResizeToContents)
self._java_classes.setContextMenuPolicy(Qt.CustomContextMenu)
self._java_classes.customContextMenuRequested.connect(
self._on_class_contextmenu)
self._java_classes.doubleClicked.connect(self._class_dblclicked)
self._java_methods = DwarfListView(self)
self._javamethod_model = QStandardItemModel(0, 1)
self._javamethod_model.setHeaderData(0, Qt.Horizontal, 'Method')
self._java_methods.setModel(self._javamethod_model)
self._java_methods.header().setSectionResizeMode(
0, QHeaderView.ResizeToContents)
self._java_methods.setContextMenuPolicy(Qt.CustomContextMenu)
self._java_methods.customContextMenuRequested.connect(
self._on_method_contextmenu)
self._java_methods.doubleClicked.connect(self._method_dblclicked)
h_box = QHBoxLayout()
h_box.setContentsMargins(0, 0, 0, 0)
h_box.addWidget(self._java_classes)
h_box.addWidget(self._java_methods)
self.setLayout(h_box)
# ************************************************************************
# **************************** Functions *********************************
# ************************************************************************
def update_classes(self):
""" Refresh Classeslist
"""
self._app_window.dwarf.dwarf_api('enumerateJavaClasses')
def update_methods(self, class_name):
""" Refresh Methodslist
"""
if class_name:
self._app_window.dwarf.dwarf_api('enumerateJavaMethods',
class_name)
# ************************************************************************
# **************************** Handlers **********************************
# ************************************************************************
def _class_clicked(self):
index = self._java_classes.selectionModel().currentIndex().row()
_class = self._javaclass_model.item(index, 0)
if _class is None:
return
self._app_window.dwarf.dwarf_api('enumerateJavaMethods', _class.text())
def _on_class_enumeration_start(self):
self._java_classes.clear()
def _on_class_enumeration_match(self, java_class):
_class_name = QStandardItem()
_class_name.setText(java_class)
self._javaclass_model.appendRow(_class_name)
def _on_class_enumeration_complete(self):
self._java_classes.sortByColumn(0, 0)
def _on_method_enumeration_complete(self, data):
self._java_methods.clear()
_class, methods = data
for method in methods:
_method_name = QStandardItem()
_method_name.setText(method)
self._javamethod_model.appendRow(_method_name)
def _class_dblclicked(self):
""" Class DoubleClicked
"""
index = self._java_classes.selectionModel().currentIndex().row()
if index:
class_item = self._javaclass_model.item(index, 0)
if class_item:
class_name = class_item.text()
if class_name:
self._breakpoint_class(class_name)
def _method_dblclicked(self):
""" Function DoubleClicked
"""
class_index = self._java_classes.selectionModel().currentIndex().row()
method_index = self._java_methods.selectionModel().currentIndex().row()
if class_index and method_index:
class_item = self._javaclass_model.item(class_index, 0)
method_item = self._javamethod_model.item(method_index, 0)
if class_item and method_item:
class_name = class_item.text()
method_name = method_item.text()
if class_name and method_name:
self._app_window.dwarf.breakpoint_java(class_name + '.' +
method_name)
def _breakpoint_class(self, class_name):
if class_name:
self._app_window.dwarf.breakpoint_java(class_name)
def _breakpoint_class_functions(self, class_name):
if class_name:
self._app_window.dwarf.dwarf_api('breakpointAllJavaMethods',
class_name)
def _on_class_contextmenu(self, pos):
""" Modules ContextMenu
"""
index = self._java_classes.indexAt(pos).row()
glbl_pt = self._java_classes.mapToGlobal(pos)
context_menu = QMenu(self)
if index != -1:
context_menu.addAction(
'Breakpoint constructor', lambda: self._breakpoint_class(
self._javaclass_model.item(index, 0).text()))
context_menu.addAction(
'Breakpoint all methods',
lambda: self._breakpoint_class_functions(
self._javaclass_model.item(index, 0).text()))
context_menu.addSeparator()
if self._java_classes.search_enabled:
context_menu.addSeparator()
context_menu.addAction('Search',
self._java_classes._on_cm_search)
context_menu.addAction('Refresh', self.update_classes)
context_menu.exec_(glbl_pt)
def _breakpoint_method(self, method_name):
class_index = self._java_classes.selectionModel().currentIndex().row()
if class_index:
class_item = self._javaclass_model.item(class_index, 0)
if class_item:
class_name = class_item.text()
if class_name and method_name:
self._app_window.dwarf.breakpoint_java(class_name + '.' +
method_name)
def _cm_refresh_methods(self):
index = self._java_classes.selectionModel().currentIndex().row()
_class = self._javaclass_model.item(index, 0)
if _class is None:
return
self.update_methods(_class.text())
def _on_method_contextmenu(self, pos):
""" Modules ContextMenu
"""
index = self._java_methods.indexAt(pos).row()
glbl_pt = self._java_methods.mapToGlobal(pos)
context_menu = QMenu(self)
if index != -1:
context_menu.addAction(
'Breakpoint method', lambda: self._breakpoint_method(
self._javamethod_model.item(index, 0).text()))
context_menu.addSeparator()
if self._java_methods.search_enabled:
context_menu.addSeparator()
context_menu.addAction('Search',
self._java_methods._on_cm_search)
context_menu.addAction('Refresh', self._cm_refresh_methods)
context_menu.exec_(glbl_pt)
class JavaTracePanel(QtWidgets.QWidget):
def __init__(self, app, *__args):
super().__init__(app)
self.app = app
self.app.dwarf.onJavaTraceEvent.connect(self.on_event)
self.app.dwarf.onEnumerateJavaClassesStart.connect(
self.on_enumeration_start)
self.app.dwarf.onEnumerateJavaClassesMatch.connect(
self.on_enumeration_match)
self.app.dwarf.onEnumerateJavaClassesComplete.connect(
self.on_enumeration_complete)
self.tracing = False
self.trace_depth = 0
# a list of classes you generally want to trace
self._prefixed_classes = [
'android.util.Base64', 'java.security.MessageDigest',
'java.util.zip.GZIPOutputStream'
]
layout = QtWidgets.QVBoxLayout()
layout.setContentsMargins(0, 0, 0, 0)
layout.setSpacing(0)
self._record_icon = QtGui.QIcon(
utils.resource_path('assets/icons/record.png'))
self._pause_icon = QtGui.QIcon(
utils.resource_path('assets/icons/pause.png'))
self._stop_icon = QtGui.QIcon(
utils.resource_path('assets/icons/stop.png'))
self._tool_bar = QtWidgets.QToolBar()
self._tool_bar.addAction('Start', self.start_trace)
self._tool_bar.addAction('Pause', self.pause_trace)
self._tool_bar.addAction('Stop', self.stop_trace)
self._tool_bar.addSeparator()
self._entries_lbl = QtWidgets.QLabel('Events: 0')
self._entries_lbl.setStyleSheet('color: #ef5350;')
self._entries_lbl.setContentsMargins(10, 0, 10, 2)
self._entries_lbl.setAttribute(QtCore.Qt.WA_TranslucentBackground,
True) # keep this
self._entries_lbl.setAlignment(QtCore.Qt.AlignRight
| QtCore.Qt.AlignVCenter)
self._entries_lbl.setSizePolicy(QtWidgets.QSizePolicy.Expanding,
QtWidgets.QSizePolicy.Preferred)
self._tool_bar.addWidget(self._entries_lbl)
layout.addWidget(self._tool_bar)
self.setup_splitter = QtWidgets.QSplitter()
self.events_list = JavaTraceView(self)
self.events_list.setVisible(False)
self.trace_list = DwarfListView()
self.trace_list_model = QtGui.QStandardItemModel(0, 1)
self.trace_list_model.setHeaderData(0, QtCore.Qt.Horizontal, 'Traced')
self.trace_list.setModel(self.trace_list_model)
self.trace_list.doubleClicked.connect(self.trace_list_double_click)
self.class_list = DwarfListView()
self.class_list_model = QtGui.QStandardItemModel(0, 1)
self.class_list_model.setHeaderData(0, QtCore.Qt.Horizontal, 'Classes')
self.class_list.setModel(self.class_list_model)
self.class_list.setContextMenuPolicy(QtCore.Qt.CustomContextMenu)
self.class_list.customContextMenuRequested.connect(
self.show_class_list_menu)
self.class_list.doubleClicked.connect(self.class_list_double_click)
self.current_class_search = ''
self.setup_splitter.addWidget(self.trace_list)
self.setup_splitter.addWidget(self.class_list)
layout.addWidget(self.setup_splitter)
layout.addWidget(self.events_list)
self.setLayout(layout)
def class_list_double_click(self, model_index):
class_name = self.class_list_model.item(model_index.row(), 0).text()
if class_name:
for i in range(self.trace_list_model.rowCount()):
if self.trace_list_model.item(i, 0).text() == class_name:
return
self.trace_list_model.appendRow([QtGui.QStandardItem(class_name)])
self.trace_list_model.sort(0, QtCore.Qt.AscendingOrder)
def on_enumeration_start(self):
self.class_list.clear()
def on_enumeration_match(self, java_class):
self.class_list_model.appendRow([QtGui.QStandardItem(java_class)])
if java_class in self._prefixed_classes:
for i in range(self.trace_list_model.rowCount()):
if self.trace_list_model.item(i, 0).text() == java_class:
return
self.trace_list_model.appendRow(QtGui.QStandardItem(java_class))
def on_enumeration_complete(self):
self.class_list_model.sort(0, QtCore.Qt.AscendingOrder)
self.trace_list_model.sort(0, QtCore.Qt.AscendingOrder)
def on_event(self, data):
trace, event, clazz, data = data
if trace == 'java_trace':
self.events_list.add_event({
'event': event,
'class': clazz,
'data': data.replace(',', ', ')
})
self._entries_lbl.setText('Events: %d' %
len(self.events_list.data))
def pause_trace(self):
self.app.dwarf.dwarf_api('stopJavaTracer')
self.tracing = False
def show_class_list_menu(self, pos):
menu = QtWidgets.QMenu()
search = menu.addAction('Search')
action = menu.exec_(self.class_list.mapToGlobal(pos))
if action:
if action == search:
self.class_list._on_cm_search()
def start_trace(self):
trace_classes = []
for i in range(self.trace_list_model.rowCount()):
trace_classes.append(self.trace_list_model.item(i, 0).text())
if not trace_classes:
return
self.app.dwarf.dwarf_api('startJavaTracer', [trace_classes])
self.trace_depth = 0
self.tracing = True
self.setup_splitter.setVisible(False)
self.events_list.setVisible(True)
def stop_trace(self):
self.app.dwarf.dwarf_api('stopJavaTracer')
self.tracing = False
self.setup_splitter.setVisible(True)
self.events_list.setVisible(False)
self.events_list.clear()
def trace_list_double_click(self, model_index):
self.trace_list_model.removeRow(model_index.row())
def keyPressEvent(self, event):
if event.modifiers() & QtCore.Qt.ControlModifier:
if event.key() == QtCore.Qt.Key_F:
self.search()
super(JavaTracePanel, self).keyPressEvent(event)
class ProcessList(QWidget):
""" ProcessListWidget wich shows running Processes on Device
Includes a Refresh Button to manually start refreshthread
args:
device needed
Signals:
onProcessSelected([pid, name]) - pid(int) name(str)
onRefreshError(str)
"""
onProcessSelected = pyqtSignal(list, name='onProcessSelected')
onRefreshError = pyqtSignal(str, name='onRefreshError')
def __init__(self, device, parent=None):
super(ProcessList, self).__init__(parent=parent)
# if not isinstance(device, frida.core.Device):
# print('No FridaDevice')
# return
self._device = device
self.process_list = DwarfListView()
model = QStandardItemModel(0, 2, parent)
model.setHeaderData(0, Qt.Horizontal, "PID")
model.setHeaderData(0, Qt.Horizontal, Qt.AlignCenter,
Qt.TextAlignmentRole)
model.setHeaderData(1, Qt.Horizontal, "Name")
self.process_list.doubleClicked.connect(self._on_item_clicked)
v_box = QVBoxLayout()
v_box.setContentsMargins(0, 0, 0, 0)
v_box.addWidget(self.process_list)
self.refresh_button = QPushButton('Refresh')
self.refresh_button.clicked.connect(self._on_refresh_procs)
self.refresh_button.setEnabled(False)
v_box.addWidget(self.refresh_button)
self.setLayout(v_box)
self.process_list.setModel(model)
self.process_list.header().setSectionResizeMode(
0, QHeaderView.ResizeToContents)
self.procs_update_thread = ProcsThread(self, self._device)
self.procs_update_thread.add_proc.connect(self._on_add_proc)
self.procs_update_thread.is_error.connect(self._on_error)
self.procs_update_thread.is_finished.connect(self._on_refresh_finished)
self.procs_update_thread.device = self._device
self.procs_update_thread.start()
# ************************************************************************
# **************************** Properties ********************************
# ************************************************************************
@property
def device(self):
""" Sets Device needs frida.core.device
"""
return self._device
@device.setter
def device(self, value):
self.set_device(value)
# ************************************************************************
# **************************** Functions *********************************
# ************************************************************************
def clear(self):
""" Clears the List
"""
self.process_list.clear()
def set_device(self, device):
""" Set frida Device
"""
if isinstance(device, frida.core.Device):
self._device = device
self.procs_update_thread.device = device
self._on_refresh_procs()
# ************************************************************************
# **************************** Handlers **********************************
# ************************************************************************
def _on_item_clicked(self, model_index):
model = self.process_list.model()
index = model.itemFromIndex(model_index).row()
if index != -1:
sel_pid = self.process_list.get_item_text(index, 0)
sel_name = self.process_list.get_item_text(index, 1)
self.onProcessSelected.emit([int(sel_pid), sel_name])
def _on_add_proc(self, item):
model = self.process_list.model()
pid = QStandardItem()
pid.setText(str(item['pid']))
pid.setTextAlignment(Qt.AlignCenter)
name = QStandardItem()
name.setText(item['name'])
model.appendRow([pid, name])
def _on_error(self, error_str):
self.onRefreshError.emit(error_str)
def _on_refresh_procs(self):
if not self._device:
return
if self.procs_update_thread.isRunning():
self.procs_update_thread.terminate()
if not self.procs_update_thread.isRunning():
self.clear()
self.refresh_button.setEnabled(False)
self.procs_update_thread.device = self._device
self.procs_update_thread.start()
def _on_refresh_finished(self):
self.refresh_button.setEnabled(True)
class JavaExplorerPanel(QWidget):
def __init__(self, parent=None):
super().__init__(parent=parent)
self._app_window = parent
self._handle_history = []
self._setup_ui()
self._setup_models()
def _setup_ui(self):
self.setContentsMargins(0, 0, 0, 0)
top_font = QFont()
top_font.setBold(True)
top_font.setPixelSize(19)
# main wrapper
main_wrapper = QVBoxLayout()
main_wrapper.setContentsMargins(1, 1, 1, 1)
# wrapwdgt
wrap_wdgt = QWidget()
self._top_class_name = QLabel(wrap_wdgt)
self._top_class_name.setContentsMargins(10, 10, 10, 10)
self._top_class_name.setAttribute(Qt.WA_TranslucentBackground,
True) # keep this
self._top_class_name.setFont(top_font)
self._top_class_name.setStyleSheet('color: #ef5350;')
wrap_wdgt.setMaximumHeight(self._top_class_name.height() + 20)
main_wrapper.addWidget(wrap_wdgt)
# left list
left_wrap_wdgt = QWidget()
left_v_box = QVBoxLayout(left_wrap_wdgt)
left_v_box.setContentsMargins(0, 0, 0, 0)
methods_label = QLabel('METHODS')
font = methods_label.font()
font.setBold(True)
methods_label.setFont(font)
methods_label.setContentsMargins(10, 0, 10, 2)
methods_label.setAttribute(Qt.WA_TranslucentBackground,
True) # keep this
left_v_box.addWidget(methods_label)
self._methods_list = DwarfListView()
left_v_box.addWidget(self._methods_list)
# center list
center_wrap_wdgt = QWidget()
center_v_box = QVBoxLayout(center_wrap_wdgt)
center_v_box.setContentsMargins(0, 0, 0, 0)
methods_label = QLabel('NATIVE FIELDS')
methods_label.setFont(font)
methods_label.setContentsMargins(10, 0, 10, 2)
methods_label.setAttribute(Qt.WA_TranslucentBackground,
True) # keep this
center_v_box.addWidget(methods_label)
self._native_fields_list = DwarfListView()
self._native_fields_list.doubleClicked.connect(
self._on_native_field_dblclicked)
center_v_box.addWidget(self._native_fields_list)
# right list
right_wrap_wdgt = QWidget()
right_v_box = QVBoxLayout(right_wrap_wdgt)
right_v_box.setContentsMargins(0, 0, 0, 0)
methods_label = QLabel('FIELDS')
methods_label.setFont(font)
methods_label.setContentsMargins(10, 0, 10, 2)
methods_label.setAttribute(Qt.WA_TranslucentBackground,
True) # keep this
right_v_box.addWidget(methods_label)
self._fields_list = DwarfListView()
self._fields_list.doubleClicked.connect(self._on_field_dblclicked)
right_v_box.addWidget(self._fields_list)
# main splitter
main_splitter = QSplitter(Qt.Horizontal)
main_splitter.setContentsMargins(0, 0, 0, 0)
main_splitter.addWidget(left_wrap_wdgt)
main_splitter.addWidget(center_wrap_wdgt)
main_splitter.addWidget(right_wrap_wdgt)
main_splitter.setSizes([250, 100, 100])
main_wrapper.addWidget(main_splitter)
main_wrapper.setSpacing(0)
self.setLayout(main_wrapper)
def _setup_models(self):
# left list
self._methods_model = QStandardItemModel(0, 3)
self._methods_model.setHeaderData(0, Qt.Horizontal, 'Name')
self._methods_model.setHeaderData(1, Qt.Horizontal, 'Return')
self._methods_model.setHeaderData(2, Qt.Horizontal, 'Arguments')
self._methods_list.setModel(self._methods_model)
self._methods_list.header().setSectionResizeMode(
0, QHeaderView.ResizeToContents)
self._methods_list.header().setSectionResizeMode(
1, QHeaderView.ResizeToContents)
# center list
self._native_fields_model = QStandardItemModel(0, 2)
self._native_fields_model.setHeaderData(0, Qt.Horizontal, 'Name')
self._native_fields_model.setHeaderData(1, Qt.Horizontal, 'Value')
self._native_fields_list.setModel(self._native_fields_model)
self._native_fields_list.header().setSectionResizeMode(
0, QHeaderView.ResizeToContents)
# right list
self._fields_model = QStandardItemModel(0, 2)
self._fields_model.setHeaderData(0, Qt.Horizontal, 'Name')
self._fields_model.setHeaderData(1, Qt.Horizontal, 'Class')
self._fields_list.setModel(self._fields_model)
self._fields_list.header().setSectionResizeMode(
0, QHeaderView.ResizeToContents)
# ************************************************************************
# **************************** Functions *********************************
# ************************************************************************
def _set_data(self, data):
if 'class' not in data:
return
self._top_class_name.setText(data['class'])
data = data['data']
self._methods_list.clear()
self._native_fields_list.clear()
self._fields_list.clear()
for key in data:
ref = data[key]
if ref['type'] == 'function':
if not key.startswith('$'):
self._add_method(key, ref)
elif ref['type'] == 'object':
if ref['handle'] is not None:
if not key.startswith('$'):
self._add_field(key, ref['value'], ref['handle'],
ref['handle_class'])
else:
if not key.startswith('$'):
self._add_field(key, ref['value'], is_native=True)
self._methods_list.sortByColumn(0, 0)
self._native_fields_list.sortByColumn(0, 0)
self._fields_list.sortByColumn(0, 0)
def _add_method(self, name, ref):
ref_overloads = ref['overloads']
for _, ref_overload in enumerate(ref_overloads):
args = []
if 'args' in ref_overload:
for arg in ref_overload['args']:
if 'className' in arg:
args.append(arg['className'])
self._methods_model.appendRow([
QStandardItem(name),
QStandardItem(ref_overload['return']['className']),
QStandardItem('(%s)' % ', '.join(args)),
])
def _add_field(self,
name,
value,
handle=None,
handle_class=None,
is_native=False):
if handle:
handle = {'handle': handle, 'handle_class': handle_class}
handle_item = QStandardItem(name)
handle_item.setData(handle, Qt.UserRole + 1)
else:
handle_item = QStandardItem(name)
if not is_native:
self._fields_model.appendRow(
[handle_item, QStandardItem(str(value))])
else:
self._native_fields_model.appendRow(
[handle_item, QStandardItem(str(value))])
def _set_handle(self, handle):
data = self._app_window.dwarf.dwarf_api('jvmExplorer', handle)
if not data:
return
self._handle_history.append({'handle': handle})
self._set_data(data)
def _set_handle_arg(self, arg):
data = self._app_window.dwarf.dwarf_api('jvmExplorer', arg)
if not data:
return
self._handle_history.append({'handle': arg})
self._set_data(data)
def init(self):
data = self._app_window.dwarf.dwarf_api('jvmExplorer')
if not data:
return
self._handle_history.append({'handle': None})
self._set_data(data)
def clear_panel(self):
self._top_class_name.setText('')
self._handle_history = []
self._methods_list.clear()
self._native_fields_list.clear()
self._fields_list.clear()
def _back(self):
if len(self._handle_history) < 2:
return
self._handle_history.pop()
data = self._handle_history.pop(len(self._handle_history) -
1)['handle']
if isinstance(data, int):
self._set_handle_arg(data)
else:
if data is not None:
self._set_handle(data)
else:
self.init()
# ************************************************************************
# **************************** Handlers **********************************
# ************************************************************************
def _on_field_dblclicked(self, _):
field_row = self._fields_list.selectionModel().currentIndex().row()
if field_row >= 0:
field_handle = self._fields_model.item(field_row,
0).data(Qt.UserRole + 1)
if field_handle:
self._set_handle(field_handle)
def _on_native_field_dblclicked(self, _):
field_row = self._native_fields_list.selectionModel().currentIndex(
).row()
if field_row:
field_handle = self._native_fields_model.item(
field_row, 0).data(Qt.UserRole + 1)
if field_handle:
self._set_handle(field_handle)
def keyPressEvent(self, event): # pylint: disable=invalid-name
key = event.key()
if key == Qt.Key_Backspace or key == Qt.Key_Escape:
self._back()
return super().keyPressEvent(event)
class ModulesPanel(QSplitter):
""" ModulesPanel
Signals:
onAddBreakpoint([ptr, funcname]) - MenuItem AddBreakpoint
onDumpBinary([ptr, size#int]) - MenuItem DumpBinary
onModuleSelected([ptr, size#int]) - ModuleDoubleClicked
onModuleFuncSelected(ptr) - FunctionDoubleClicked
"""
# pylint: disable=too-many-instance-attributes
onAddBreakpoint = pyqtSignal(list, name='onAddBreakpoint')
onDumpBinary = pyqtSignal(list, name='onDumpBinary')
onModuleSelected = pyqtSignal(list, name='onModuleSelected')
onModuleFuncSelected = pyqtSignal(str, name='onModuleFuncSelected')
def __init__(self, parent=None): # pylint: disable=too-many-statements
super(ModulesPanel, self).__init__(parent)
self._app_window = parent
if self._app_window.dwarf is None:
print('ModulesPanel created before Dwarf exists')
return
self._app_window.dwarf.onSetModules.connect(self.set_modules)
self._app_window.dwarf.onModuleLoaded.connect(self.on_module_loaded)
self._uppercase_hex = True
self._sized = False
self.setContentsMargins(0, 0, 0, 0)
# setup models
self.modules_list = None
self.modules_model = QStandardItemModel(0, 4, self)
self.modules_model.setHeaderData(0, Qt.Horizontal, 'Name')
self.modules_model.setHeaderData(1, Qt.Horizontal, 'Base')
self.modules_model.setHeaderData(1, Qt.Horizontal, Qt.AlignCenter,
Qt.TextAlignmentRole)
self.modules_model.setHeaderData(2, Qt.Horizontal, 'Size')
self.modules_model.setHeaderData(2, Qt.Horizontal, Qt.AlignCenter,
Qt.TextAlignmentRole)
self.modules_model.setHeaderData(3, Qt.Horizontal, 'Path')
self.imports_list = None
self.imports_model = QStandardItemModel(0, 4, self)
self.imports_model.setHeaderData(0, Qt.Horizontal, 'Import')
self.imports_model.setHeaderData(1, Qt.Horizontal, 'Address')
self.imports_model.setHeaderData(1, Qt.Horizontal, Qt.AlignCenter,
Qt.TextAlignmentRole)
self.imports_model.setHeaderData(2, Qt.Horizontal, 'Module')
self.imports_model.setHeaderData(2, Qt.Horizontal, Qt.AlignCenter,
Qt.TextAlignmentRole)
self.imports_model.setHeaderData(3, Qt.Horizontal, 'Type')
self.exports_list = None
self.exports_model = QStandardItemModel(0, 3, self)
self.exports_model.setHeaderData(0, Qt.Horizontal, 'Export')
self.exports_model.setHeaderData(1, Qt.Horizontal, 'Address')
self.exports_model.setHeaderData(1, Qt.Horizontal, Qt.AlignCenter,
Qt.TextAlignmentRole)
self.exports_model.setHeaderData(2, Qt.Horizontal, 'Type')
self.symbols_list = None
self.symbols_model = QStandardItemModel(0, 3, self)
self.symbols_model.setHeaderData(0, Qt.Horizontal, 'Symbol')
self.symbols_model.setHeaderData(1, Qt.Horizontal, 'Address')
self.symbols_model.setHeaderData(1, Qt.Horizontal, Qt.AlignCenter,
Qt.TextAlignmentRole)
self.symbols_model.setHeaderData(2, Qt.Horizontal, 'Type')
# setup ui
self.modules_list = DwarfListView()
self.modules_list.setContextMenuPolicy(Qt.CustomContextMenu)
self.modules_list.customContextMenuRequested.connect(
self._on_modules_contextmenu)
self.modules_list.setEditTriggers(self.modules_list.NoEditTriggers)
self.modules_list.clicked.connect(self._module_clicked)
self.modules_list.doubleClicked.connect(self._module_dblclicked)
self.modules_list.setModel(self.modules_model)
self.modules_list.header().setSectionResizeMode(
0, QHeaderView.ResizeToContents)
self.modules_list.header().setSectionResizeMode(
1, QHeaderView.ResizeToContents)
self.modules_list.header().setSectionResizeMode(
2, QHeaderView.ResizeToContents)
self.modules_list.selectionModel().selectionChanged.connect(
self._module_clicked)
self.addWidget(self.modules_list)
v_splitter = QSplitter(Qt.Vertical)
self.imports_list = DwarfListView()
self.imports_list.setContextMenuPolicy(Qt.CustomContextMenu)
self.imports_list.customContextMenuRequested.connect(
self._on_imports_contextmenu)
self.imports_list.setEditTriggers(self.modules_list.NoEditTriggers)
self.imports_list.doubleClicked.connect(self._import_dblclicked)
self.imports_list.setModel(self.imports_model)
self.imports_list.header().setSectionResizeMode(
0, QHeaderView.ResizeToContents)
self.imports_list.header().setSectionResizeMode(
1, QHeaderView.ResizeToContents)
self.imports_list.header().setSectionResizeMode(
2, QHeaderView.ResizeToContents)
self.imports_list.setVisible(False)
self.exports_list = DwarfListView()
self.exports_list.setContextMenuPolicy(Qt.CustomContextMenu)
self.exports_list.customContextMenuRequested.connect(
self._on_exports_contextmenu)
self.exports_list.setEditTriggers(self.modules_list.NoEditTriggers)
self.exports_list.doubleClicked.connect(self._export_dblclicked)
self.exports_list.setModel(self.exports_model)
self.exports_list.header().setSectionResizeMode(
0, QHeaderView.ResizeToContents)
self.exports_list.header().setSectionResizeMode(
1, QHeaderView.ResizeToContents)
self.exports_list.header().setSectionResizeMode(
2, QHeaderView.ResizeToContents)
self.exports_list.setVisible(False)
self.symbols_list = DwarfListView()
self.symbols_list.setContextMenuPolicy(Qt.CustomContextMenu)
self.symbols_list.doubleClicked.connect(self._symbol_dblclicked)
self.symbols_list.setModel(self.symbols_model)
self.symbols_list.header().setSectionResizeMode(
0, QHeaderView.ResizeToContents)
self.symbols_list.header().setSectionResizeMode(
1, QHeaderView.ResizeToContents)
self.symbols_list.header().setSectionResizeMode(
2, QHeaderView.ResizeToContents)
self.symbols_list.setVisible(False)
v_splitter.addWidget(self.imports_list)
v_splitter.addWidget(self.exports_list)
v_splitter.addWidget(self.symbols_list)
v_splitter.setSizes([100, 100, 100])
self.addWidget(v_splitter)
self.update_modules()
# ************************************************************************
# **************************** Properties ********************************
# ************************************************************************
@property
def uppercase_hex(self):
""" HexDisplayStyle
"""
return self._uppercase_hex
@uppercase_hex.setter
def uppercase_hex(self, value):
""" HexDisplayStyle
"""
if isinstance(value, bool):
self._uppercase_hex = value
elif isinstance(value, str):
self._uppercase_hex = (value == 'upper')
# ************************************************************************
# **************************** Functions *********************************
# ************************************************************************
def set_modules(self, modules):
""" Fills the ModulesList with data
"""
if self.modules_list is None:
return
self.modules_list.clear()
for module in modules:
self.add_module(module)
self.modules_list.resizeColumnToContents(0)
self.modules_list.resizeColumnToContents(1)
self.modules_list.resizeColumnToContents(2)
self.modules_list.resizeColumnToContents(3)
def on_module_loaded(self, data):
module = data[0]
self.add_module(module)
def add_module(self, module):
name = QStandardItem()
name.setTextAlignment(Qt.AlignLeft)
if 'name' in module:
name.setText(module['name'])
base = QStandardItem()
base.setTextAlignment(Qt.AlignCenter)
str_fmt = '0x{0:X}'
if not self.uppercase_hex:
str_fmt = '0x{0:x}'
if 'base' in module:
base.setText(str_fmt.format(int(module['base'], 16)))
size = QStandardItem()
size.setTextAlignment(Qt.AlignRight)
if 'size' in module:
size.setText("{0:,d}".format(int(module['size'])))
path = QStandardItem()
path.setTextAlignment(Qt.AlignLeft)
if 'path' in module:
path.setText(module['path'])
self.modules_model.appendRow([name, base, size, path])
module_info = ModuleInfo(module)
if 'exports' in module and module['exports']:
module_info.apply_exports(module['exports'])
if 'imports' in module and module['imports']:
module_info.apply_imports(module['imports'])
if 'symbols' in module and module['symbols']:
module_info.apply_symbols(module['symbols'])
module_info._updated_details = True
def update_modules(self):
""" DwarfApiCall updateModules
"""
return self._app_window.dwarf.dwarf_api('updateModules')
def set_imports(self, imports):
""" Fills the ImportsList with data
"""
if self.imports_list is None:
return
self.imports_list.clear()
for import_ in imports:
name = QStandardItem()
name.setTextAlignment(Qt.AlignLeft)
if 'name' in import_:
name.setText(import_['name'])
address = QStandardItem()
address.setTextAlignment(Qt.AlignCenter)
str_fmt = '0x{0:X}'
if not self.uppercase_hex:
str_fmt = '0x{0:x}'
if 'address' in import_:
address.setText(str_fmt.format(int(import_['address'], 16)))
module = QStandardItem()
if 'module' in import_:
module.setTextAlignment(Qt.AlignLeft)
module.setText(import_['module'])
type_ = QStandardItem()
if 'type' in import_:
type_.setTextAlignment(Qt.AlignLeft)
type_.setText(import_['type'])
self.imports_model.appendRow([name, address, module, type_])
def set_exports(self, exports):
""" Fills the ExportsList with data
"""
if self.exports_list is None:
return
self.exports_list.clear()
for export in exports:
name = QStandardItem()
name.setTextAlignment(Qt.AlignLeft)
if 'name' in export:
name.setText(export['name'])
address = QStandardItem()
address.setTextAlignment(Qt.AlignCenter)
str_fmt = '0x{0:X}'
if not self.uppercase_hex:
str_fmt = '0x{0:x}'
if 'address' in export:
address.setText(str_fmt.format(int(export['address'], 16)))
type_ = QStandardItem()
type_.setTextAlignment(Qt.AlignLeft)
if 'type' in export:
type_.setText(export['type'])
self.exports_model.appendRow([name, address, type_])
def set_symbols(self, symbols):
""" Fills the SymbolsList with data
"""
if self.symbols_list is None:
return
self.symbols_list.clear()
for symbol in symbols:
name = QStandardItem()
name.setTextAlignment(Qt.AlignLeft)
if 'name' in symbol:
name.setText(symbol['name'])
address = QStandardItem()
address.setTextAlignment(Qt.AlignCenter)
str_fmt = '0x{0:X}'
if not self.uppercase_hex:
str_fmt = '0x{0:x}'
if 'address' in symbol:
address.setText(str_fmt.format(int(symbol['address'], 16)))
type_ = QStandardItem()
type_.setTextAlignment(Qt.AlignLeft)
if 'type' in symbol:
type_.setText(symbol['type'])
self.symbols_model.appendRow([name, address, type_])
# ************************************************************************
# **************************** Handlers **********************************
# ************************************************************************
def _module_clicked(self):
""" Module Clicked updates imports/exports/symbols
"""
if not self.modules_list.hasFocus():
return
module_index = self.modules_list.selectionModel().currentIndex().row()
module_name = self.modules_model.item(module_index, 0)
if module_name is None:
return
module_name = module_name.text()
module_address = self.modules_model.item(module_index, 1).text()
module_info = self._app_window.dwarf.database.get_module_info(module_address)
if module_info is not None:
if not module_info.have_details:
module_info = ModuleInfo.build_module_info(self._app_window.dwarf, module_name, fill_ied=True)
else:
module_info = ModuleInfo.build_module_info(self._app_window.dwarf, module_name, fill_ied=True)
if module_info is not None:
self.update_module_ui(module_info)
if not self._sized:
self.setSizes([100, 100])
self._sized = True
def update_module_ui(self, module_info):
if module_info.imports:
self.set_imports(module_info.imports)
self.imports_list.setVisible(True)
self.imports_list.resizeColumnToContents(0)
self.imports_list.resizeColumnToContents(1)
self.imports_list.resizeColumnToContents(2)
else:
self.imports_list.setVisible(False)
if module_info.exports:
self.set_exports(module_info.exports)
self.exports_list.setVisible(True)
self.exports_list.resizeColumnToContents(0)
self.exports_list.resizeColumnToContents(1)
else:
self.exports_list.setVisible(False)
if module_info.symbols:
self.set_symbols(module_info.symbols)
self.symbols_list.setVisible(True)
self.symbols_list.resizeColumnToContents(0)
self.symbols_list.resizeColumnToContents(1)
else:
self.symbols_list.setVisible(False)
def _module_dblclicked(self):
""" Module DoubleClicked
"""
module_index = self.modules_list.selectionModel().currentIndex().row()
base = self.modules_model.item(module_index, 1).text()
size = self.modules_model.item(module_index, 2).text().replace(',', '')
self.onModuleSelected.emit([base, size])
def _import_dblclicked(self):
""" ImportFunction DoubleClicked
"""
index = self.imports_list.selectionModel().currentIndex().row()
addr = self.imports_model.item(index, 1).text()
self.onModuleFuncSelected.emit(addr)
def _export_dblclicked(self):
""" ExportFunction DoubleClicked
"""
index = self.exports_list.selectionModel().currentIndex().row()
addr = self.exports_model.item(index, 1).text()
self.onModuleFuncSelected.emit(addr)
def _symbol_dblclicked(self):
""" Symbol DoubleClicked
"""
index = self.symbols_list.selectionModel().currentIndex().row()
addr = self.symbols_model.item(index, 1).text()
self.onModuleFuncSelected.emit(addr)
def _on_modules_contextmenu(self, pos):
""" Modules ContextMenu
"""
index = self.modules_list.indexAt(pos).row()
glbl_pt = self.modules_list.mapToGlobal(pos)
context_menu = QMenu(self)
if index != -1:
context_menu.addAction(
'Dump Binary', lambda: self._on_dumpmodule(
self.modules_model.item(index, 1).text(),
self.modules_model.item(index, 2).text()))
context_menu.addSeparator()
context_menu.addAction(
'Copy address', lambda: utils.copy_hex_to_clipboard(
self.modules_model.item(index, 1).text()))
context_menu.addAction(
'Copy Name', lambda: utils.copy_str_to_clipboard(
self.modules_model.item(index, 0).text()))
context_menu.addAction(
'Copy Path', lambda: utils.copy_str_to_clipboard(
self.modules_model.item(index, 3).text()))
context_menu.addSeparator()
file_path = self.modules_model.item(index, 3).text()
if self._app_window.dwarf._platform == 'linux':
context_menu.addAction(
'Show ELF Info', lambda: self._on_parse_elf(file_path))
context_menu.addSeparator()
# elif file_path and (file_path.endswith('.dll') or file_path.endswith('.exe')):
# context_menu.addAction('Show PE Info', lambda: self._on_parse_pe(file_path))
# context_menu.addSeparator()
if self.modules_list.search_enabled:
context_menu.addSeparator()
context_menu.addAction(
'Search', self.modules_list._on_cm_search)
context_menu.addSeparator()
context_menu.addAction('Refresh', self.update_modules)
context_menu.exec_(glbl_pt)
def _on_imports_contextmenu(self, pos):
""" ImportList ContextMenu
"""
index = self.imports_list.indexAt(pos).row()
if index != -1:
context_menu = QMenu(self)
func_name = self.imports_model.item(index, 0).text()
addr = self.imports_model.item(index, 1).text()
context_menu.addAction(
'Add Breakpoint', lambda: self._add_breakpoint(addr, func_name))
context_menu.addSeparator()
context_menu.addAction(
'Copy address', lambda: utils.copy_hex_to_clipboard(
self.imports_model.item(index, 1).text()))
context_menu.addSeparator()
context_menu.addAction(
'Copy FunctionName', lambda: utils.copy_str_to_clipboard(
func_name))
context_menu.addAction(
'Copy ModuleName', lambda: utils.copy_str_to_clipboard(
self.imports_model.item(index, 2).text()))
if self.imports_list.search_enabled:
context_menu.addSeparator()
context_menu.addAction(
'Search', self.imports_list._on_cm_search)
# show context menu
glbl_pt = self.imports_list.mapToGlobal(pos)
context_menu.exec_(glbl_pt)
def _on_exports_contextmenu(self, pos):
""" ExportsList ContextMenu
"""
index = self.exports_list.indexAt(pos).row()
if index != -1:
context_menu = QMenu(self)
func_name = self.exports_model.item(index, 0).text()
addr = self.exports_model.item(index, 1).text()
context_menu.addAction(
'Add Breakpoint', lambda: self._add_breakpoint(addr, func_name))
context_menu.addSeparator()
context_menu.addAction(
'Copy address', lambda: utils.copy_hex_to_clipboard(
self.exports_model.item(index, 1).text()))
context_menu.addSeparator()
context_menu.addAction(
'Copy FunctionName', lambda: utils.copy_str_to_clipboard(
func_name))
if self.exports_list.search_enabled:
context_menu.addSeparator()
context_menu.addAction(
'Search', self.exports_list._on_cm_search)
# show contextmenu
glbl_pt = self.exports_list.mapToGlobal(pos)
context_menu.exec_(glbl_pt)
def _on_dumpmodule(self, ptr, size):
""" MenuItem DumpBinary
"""
if isinstance(ptr, int):
str_fmt = '0x{0:X}'
if not self.uppercase_hex:
str_fmt = '0x{0:x}'
ptr = str_fmt.format(ptr)
size = size.replace(',', '')
self.onDumpBinary.emit([ptr, size])
def _add_breakpoint(self, ptr, name=None):
""" MenuItem AddBreakpoint
"""
if name is None:
name = ptr
if isinstance(ptr, str):
if ptr.startswith('0x') or ptr.startswith('#'):
self.onAddBreakpoint.emit([ptr, name])
elif isinstance(ptr, int):
str_fmt = '0x{0:x}'
self.onAddBreakpoint.emit(str_fmt.format([ptr, name]))
def _on_parse_elf(self, elf_path):
from dwarf_debugger.ui.dialogs.elf_info_dlg import ElfInfo
parsed_infos = self._app_window.dwarf.dwarf_api('parseElf', elf_path)
if parsed_infos:
elf_dlg = ElfInfo(self._app_window, elf_path)
elf_dlg.onShowMemoryRequest.connect(self.onModuleFuncSelected)
elf_dlg.set_parsed_data(parsed_infos)
elf_dlg.show()
class ContextWidget(QTabWidget):
# consts
CONTEXT_TYPE_NATIVE = 0
CONTEXT_TYPE_JAVA = 1
onShowMemoryRequest = pyqtSignal(str, name='onShowMemoryRequest')
def __init__(self, parent=None):
super(ContextWidget, self).__init__(parent=parent)
self._app_window = parent
self.setAutoFillBackground(True)
self._app_window.dwarf.onContextChanged.connect(
self._on_context_changed)
self._nativectx_model = QStandardItemModel(0, 4)
self._nativectx_model.setHeaderData(0, Qt.Horizontal, 'Reg')
self._nativectx_model.setHeaderData(0, Qt.Horizontal, Qt.AlignCenter,
Qt.TextAlignmentRole)
self._nativectx_model.setHeaderData(1, Qt.Horizontal, 'Value')
self._nativectx_model.setHeaderData(1, Qt.Horizontal, Qt.AlignCenter,
Qt.TextAlignmentRole)
self._nativectx_model.setHeaderData(2, Qt.Horizontal, 'Decimal')
self._nativectx_model.setHeaderData(3, Qt.Horizontal, 'Telescope')
self._nativectx_list = DwarfListView()
self._nativectx_list.setModel(self._nativectx_model)
self._nativectx_list.header().setSectionResizeMode(
0, QHeaderView.ResizeToContents)
self._nativectx_list.header().setSectionResizeMode(
1, QHeaderView.ResizeToContents)
self._nativectx_list.header().setSectionResizeMode(
2, QHeaderView.ResizeToContents)
self._nativectx_list.setContextMenuPolicy(Qt.CustomContextMenu)
self._nativectx_list.customContextMenuRequested.connect(
self._on_native_contextmenu)
self._javactx_model = QStandardItemModel(0, 3)
self._javactx_model.setHeaderData(0, Qt.Horizontal, 'Argument')
self._javactx_model.setHeaderData(0, Qt.Horizontal, Qt.AlignCenter,
Qt.TextAlignmentRole)
self._javactx_model.setHeaderData(1, Qt.Horizontal, 'Class')
self._javactx_model.setHeaderData(2, Qt.Horizontal, 'Value')
self._javactx_list = DwarfListView()
self._javactx_list.setModel(self._javactx_model)
self._javactx_list.header().setSectionResizeMode(
0, QHeaderView.ResizeToContents)
self._javactx_list.header().setSectionResizeMode(
1, QHeaderView.ResizeToContents)
self._javactx_list.header().setSectionResizeMode(
2, QHeaderView.ResizeToContents)
self._javactx_list.setContextMenuPolicy(Qt.CustomContextMenu)
self._javactx_list.customContextMenuRequested.connect(
self._on_java_contextmenu)
self.addTab(self._nativectx_list, 'Native')
self.show_context_tab('Native')
# ************************************************************************
# **************************** Functions *********************************
# ************************************************************************
def clear(self):
self._nativectx_list.clear()
self._javactx_list.clear()
def set_context(self, ptr, context_type, context):
if isinstance(context, str):
context = json.loads(context)
if context_type == ContextWidget.CONTEXT_TYPE_NATIVE:
self._nativectx_list.clear()
self._set_native_context(ptr, context)
elif context_type == ContextWidget.CONTEXT_TYPE_JAVA:
self._javactx_list.clear()
self._set_java_context(ptr, context)
else:
raise Exception('unknown context type')
def have_context(self):
return self.count() > 0
def show_context_tab(self, tab_name):
index = 0
tab_name = tab_name.join(tab_name.split()).lower()
if tab_name == 'native':
index = self.indexOf(self._nativectx_list)
elif tab_name == 'java':
index = self.indexOf(self._javactx_list)
if self.count() > 0:
self.setCurrentIndex(index)
def _set_native_context(self, ptr, context):
if self.indexOf(self._nativectx_list) == -1:
self.addTab(self._nativectx_list, 'Native')
self.show_context_tab('Native')
else:
self.show_context_tab('Native')
context_ptr = ptr
sorted_regs = self.get_sort_order()
for register in sorted(context,
key=lambda x: sorted_regs[x]
if x in sorted_regs else len(sorted_regs)):
reg_name = QStandardItem()
reg_name.setTextAlignment(Qt.AlignCenter)
if context[register]['isValidPointer']:
reg_name.setData(context_ptr, Qt.UserRole + 1)
value_x = QStandardItem()
if context[register]['isValidPointer']:
value_x.setForeground(Qt.red)
value_dec = QStandardItem()
telescope = QStandardItem()
reg_name.setText(register)
if context[register] is not None:
str_fmt = '0x{0:x}'
if self._nativectx_list.uppercase_hex:
str_fmt = '0x{0:X}'
value_x.setText(
str_fmt.format(int(context[register]['value'], 16)))
value_dec.setText('{0:d}'.format(
int(context[register]['value'], 16)))
if context[register]['isValidPointer']:
if 'telescope' in context[register] and context[register][
'telescope'] is not None:
telescope = QStandardItem()
telescope_value = str(
context[register]['telescope'][1]).replace(
'\n', ' ')
if len(telescope_value) > 50:
telescope_value = telescope_value[:50] + '...'
telescope.setText(telescope_value)
if context[register]['telescope'][0] == 2:
telescope.setData(
context[register]['telescope'][1],
Qt.UserRole + 1)
if context[register]['telescope'][0] == 0:
telescope.setForeground(Qt.darkGreen)
elif context[register]['telescope'][0] == 2:
telescope.setForeground(Qt.white)
elif context[register]['telescope'][0] != 1:
telescope.setForeground(Qt.darkGray)
self._nativectx_model.appendRow(
[reg_name, value_x, value_dec, telescope])
self._nativectx_list.resizeColumnToContents(0)
def _set_java_context(self, ptr, context):
if self.indexOf(self._javactx_list) == -1:
self.addTab(self._javactx_list, 'Java')
self.show_context_tab('Java')
else:
self.show_context_tab('Java')
for arg in context:
_arg = QStandardItem()
_arg.setText(arg)
_class = QStandardItem()
_class.setText(context[arg]['className'])
if isinstance(context[arg]['handle'], str):
_class.setForeground(Qt.lightGray)
_value = QStandardItem()
if 'arg' not in context[arg] or context[arg]['arg'] is None:
_value.setText('null')
_value.setForeground(Qt.gray)
else:
_value.setText(context[arg]['arg'])
self._javactx_model.appendRow([_arg, _class, _value])
self._javactx_list.resizeColumnToContents(0)
self._javactx_list.resizeColumnToContents(1)
def get_sort_order(self):
reg_order = []
if self._app_window.dwarf.arch == 'arm': # arm
reg_order = [
'r0', 'r1', 'r2', 'r3', 'r4', 'r5', 'r6', 'r7', 'r8', 'r9',
'r10', 'r11', 'r12', 'r13', 'r14', 'r15', 'sp', 'lr', 'sb',
'sl', 'fp', 'ip', 'pc', 'cspr'
]
elif self._app_window.dwarf.arch == 'arm64':
reg_order = [
'x0', 'x1', 'x2', 'x3', 'x4', 'x5', 'x6', 'x7', 'x8', 'x9',
'x10', 'x11', 'x12', 'x13', 'x14', 'x15', 'x16', 'x17', 'x18',
'x19', 'x20', 'x21', 'x22', 'x23', 'x24', 'x25', 'x26', 'x27',
'x28', 'x29', 'x30', 'w0', 'w1', 'w2', 'w3', 'w4', 'w5', 'w6',
'w7', 'w8', 'w9', 'w10', 'w11', 'w12', 'w13', 'w14', 'w15',
'w16', 'w17', 'w18', 'w19', 'w20', 'w21', 'w22', 'w23', 'w24',
'w25', 'w26', 'w27', 'w28', 'w29', 'w30', 'sp', 'lr', 'fp',
'wsp', 'wzr', 'xzr', 'nzcv', 'ip0', 'ip1', 's0', 's1', 's2',
's3', 's4', 's5', 's6', 's7', 's8', 's9', 's10', 's11', 's12',
's13', 's14', 's15', 's16', 's17', 's18', 's19', 's20', 's21',
's22', 's23', 's24', 's25', 's26', 's27', 's28', 's29', 's30',
's31', 'd0', 'd1', 'd2', 'd3', 'd4', 'd5', 'd6', 'd7', 'd8',
'd9', 'd10', 'd11', 'd12', 'd13', 'd14', 'd15', 'd16', 'd17',
'd18', 'd19', 'd20', 'd21', 'd22', 'd23', 'd24', 'd25', 'd26',
'd27', 'd28', 'd29', 'd30', 'd31', 'q0', 'q1', 'q2', 'q3',
'q4', 'q5', 'q6', 'q7', 'q8', 'q9', 'q10', 'q11', 'q12', 'q13',
'q14', 'q15', 'q16', 'q17', 'q18', 'q19', 'q20', 'q21', 'q22',
'q23', 'q24', 'q25', 'q26', 'q27', 'q28', 'q29', 'q30', 'q31',
'sp', 'lr', 'sb', 'sl', 'fp', 'ip', 'pc', 'cspr'
]
elif self._app_window.dwarf.arch == 'ia32':
reg_order = [
'eax', 'ebx', 'ecx', 'edx', 'esi', 'edi', 'esp', 'r8d', 'r9d',
'r10d', 'r11d', 'r12d', 'r13d', 'r14d', 'r15d', 'ebp', 'eip',
'sp', 'pc'
]
elif self._app_window.dwarf.arch == 'x64': # x64
reg_order = [
'rax', 'rbx', 'rcx', 'rdx', 'rsi', 'rdi', 'rbp', 'rsp', 'r8',
'r9', 'r10', 'r11', 'r12', 'r13', 'r14', 'r15', 'esp', 'ebp',
'rip', 'eip', 'sp', 'pc'
]
sorted_regs = {b: i for i, b in enumerate(reg_order)}
return sorted_regs
# ************************************************************************
# **************************** Handlers **********************************
# ************************************************************************
def _on_native_contextmenu(self, pos):
index = self._nativectx_list.indexAt(pos).row()
glbl_pt = self._nativectx_list.mapToGlobal(pos)
context_menu = QMenu(self)
if index != -1:
item = self._nativectx_model.item(index, 1)
dec = self._nativectx_model.item(index, 2)
telescope = self._nativectx_model.item(index, 3)
# show contextmenu
if self._nativectx_model.item(index, 0).data(Qt.UserRole + 1):
context_menu.addAction(
'Jump to {0}'.format(item.text()),
lambda: self._app_window.jump_to_address(item.text()))
context_menu.addSeparator()
# copy menu
context_sub_menu = QMenu('Copy', context_menu)
context_sub_menu.addAction(
'Value', lambda: utils.copy_str_to_clipboard(item.text()))
if dec.text():
context_sub_menu.addAction(
'Decimal', lambda: utils.copy_str_to_clipboard(dec.text()))
if telescope.text():
context_sub_menu.addAction(
'Telescope',
lambda: utils.copy_str_to_clipboard(telescope.text()))
context_menu.addMenu(context_sub_menu)
context_menu.exec_(glbl_pt)
def _on_java_contextmenu(self, pos):
index = self._javactx_list.indexAt(pos).row()
glbl_pt = self._javactx_list.mapToGlobal(pos)
context_menu = QMenu(self)
if index != -1:
# show contextmenu
argument = self._javactx_model.item(index, 1)
_class = self._javactx_model.item(index, 2)
value = self._javactx_model.item(index, 3)
context_sub_menu = QMenu('Copy', context_menu)
context_sub_menu.addAction(
'Argument',
lambda: utils.copy_str_to_clipboard(argument.text()))
if _class.text():
context_sub_menu.addAction(
'Class',
lambda: utils.copy_str_to_clipboard(_class.text()))
if value:
if value.text():
context_sub_menu.addAction(
'Value',
lambda: utils.copy_str_to_clipboard(value.text()))
context_menu.addMenu(context_sub_menu)
context_menu.exec_(glbl_pt)
def _on_context_changed(self, reg_name, reg_val):
x_in = 0
for c in reg_val:
if c.lower() not in '1234567890abcdef':
if c.lower() == 'x' and x_in == 0:
x_in += 1
continue
self._app_window.dwarf.onLogToConsole.emit(
'error: invalid reg_value: ' + reg_val +
' - expected dec/hex')
return
if isinstance(reg_val, str) and reg_val.startswith('0x'):
try:
reg_val = int(reg_val, 16)
except ValueError:
self._app_window.dwarf.onLogToConsole.emit(
'error: invalid reg_value: ' + reg_val +
' - expected dec/hex')
return
try:
reg_val = int(reg_val)
except ValueError:
self._app_window.dwarf.onLogToConsole.emit(
'error: invalid reg_value: ' + reg_val + ' - expected dec/hex')
return
reg_val = hex(reg_val)
was_found, find_result = self._nativectx_list.contains_text(
reg_name, True, True, True)
if was_found:
if len(find_result) == 1:
find_result = find_result[0]
if self._nativectx_model.item(find_result[0],
0).text() == reg_name:
str_fmt = '0x{0:x}'
if self._nativectx_list.uppercase_hex:
str_fmt = '0x{0:X}'
value_x = str_fmt.format(int(reg_val, 16))
value_dec = '{0:d}'.format(int(reg_val, 16))
self._nativectx_model.item(find_result[0],
1).setText(value_x)
self._nativectx_model.item(find_result[0],
2).setText(value_dec)
self._nativectx_model.item(find_result[0], 3).setText("")
class SearchPanel(QWidget):
""" SearchPanel
"""
def __init__(self, parent=None, show_progress_dlg=False):
super(SearchPanel, self).__init__(parent=parent)
self._app_window = parent
if self._app_window.dwarf is None:
print('SearchPanel created before Dwarf exists')
return
self._app_window.dwarf.onMemoryScanResult.connect(
self._on_search_result)
self._app_window.dwarf.onSearchableRanges.connect(self._on_setranges)
self._ranges_model = None
self._result_model = None
self._blocking_search = show_progress_dlg
self.progress = None
self._pattern_length = 0
self._search_results = []
self.setContentsMargins(0, 0, 0, 0)
main_wrap = QVBoxLayout()
main_wrap.setContentsMargins(1, 1, 1, 1)
wrapping_wdgt = QWidget()
wrapping_wdgt.setContentsMargins(10, 10, 10, 10)
v_box = QVBoxLayout(wrapping_wdgt)
v_box.setContentsMargins(0, 0, 0, 0)
self.input = QLineEdit()
self.input.setPlaceholderText(
'search for a sequence of bytes in hex format: deadbeef123456aabbccddeeff...'
)
v_box.addWidget(self.input)
self.check_all_btn = QPushButton('check all')
self.check_all_btn.clicked.connect(self._on_click_check_all)
self.uncheck_all_btn = QPushButton('uncheck all')
self.uncheck_all_btn.clicked.connect(self._on_click_uncheck_all)
self.search_btn = QPushButton('search')
self.search_btn.clicked.connect(self._on_click_search)
h_box = QHBoxLayout()
h_box.addWidget(self.check_all_btn)
h_box.addWidget(self.uncheck_all_btn)
h_box.addWidget(self.search_btn)
v_box.addLayout(h_box)
main_wrap.addWidget(wrapping_wdgt)
self.ranges = DwarfListView(self)
self.ranges.clicked.connect(self._on_show_results)
self.results = DwarfListView(self)
self.results.setVisible(False)
h_box = QHBoxLayout()
h_box.setContentsMargins(0, 0, 0, 0)
h_box.addWidget(self.ranges)
h_box.addWidget(self.results)
main_wrap.addLayout(h_box)
main_wrap.setSpacing(0)
self.setLayout(main_wrap)
self._setup_models()
self._app_window.dwarf.dwarf_api('updateSearchableRanges')
# ************************************************************************
# **************************** Functions *********************************
# ************************************************************************
def _setup_models(self):
self._ranges_model = QStandardItemModel(0, 7)
# just replicate ranges panel model
self._ranges_model.setHeaderData(
0, Qt.Horizontal, 'x'
) # TODO: replace with checkbox in header - remove checkall btns
self._ranges_model.setHeaderData(0, Qt.Horizontal, Qt.AlignCenter,
Qt.TextAlignmentRole)
self._ranges_model.setHeaderData(1, Qt.Horizontal, 'Address')
self._ranges_model.setHeaderData(1, Qt.Horizontal, Qt.AlignCenter,
Qt.TextAlignmentRole)
self._ranges_model.setHeaderData(2, Qt.Horizontal, 'Size')
self._ranges_model.setHeaderData(2, Qt.Horizontal, Qt.AlignCenter,
Qt.TextAlignmentRole)
self._ranges_model.setHeaderData(3, Qt.Horizontal, 'Protection')
self._ranges_model.setHeaderData(3, Qt.Horizontal, Qt.AlignCenter,
Qt.TextAlignmentRole)
self._ranges_model.setHeaderData(4, Qt.Horizontal, 'FileOffset')
self._ranges_model.setHeaderData(4, Qt.Horizontal, Qt.AlignCenter,
Qt.TextAlignmentRole)
self._ranges_model.setHeaderData(5, Qt.Horizontal, 'FileSize')
self._ranges_model.setHeaderData(5, Qt.Horizontal, Qt.AlignCenter,
Qt.TextAlignmentRole)
self._ranges_model.setHeaderData(6, Qt.Horizontal, 'FilePath')
self.ranges.setModel(self._ranges_model)
self.ranges.header().setSectionResizeMode(0,
QHeaderView.ResizeToContents)
self.ranges.header().setSectionResizeMode(1,
QHeaderView.ResizeToContents)
self.ranges.header().setSectionResizeMode(2,
QHeaderView.ResizeToContents)
self.ranges.header().setSectionResizeMode(3,
QHeaderView.ResizeToContents)
self.ranges.header().setSectionResizeMode(4,
QHeaderView.ResizeToContents)
self.ranges.header().setSectionResizeMode(5,
QHeaderView.ResizeToContents)
self.ranges.doubleClicked.connect(self._on_range_dblclick)
# setup results model
self._result_model = QStandardItemModel(0, 1)
self._result_model.setHeaderData(0, Qt.Horizontal, 'Address')
self.results.setModel(self._result_model)
self.results.doubleClicked.connect(self._on_double_clicked)
def _on_setranges(self, ranges):
""" Fills Rangelist with Data
"""
if self._ranges_model.rowCount():
return
self.ranges.header().setSectionResizeMode(0, QHeaderView.Fixed)
if isinstance(ranges, list):
self._ranges_model.removeRows(0, self._ranges_model.rowCount())
for range_entry in ranges:
if 'protection' in range_entry and isinstance(
range_entry['protection'], str):
if 'r' not in range_entry['protection']:
# skip not readable range
continue
else:
continue
# create items to add
str_frmt = ''
if self.ranges._uppercase_hex:
str_frmt = '0x{0:X}'
else:
str_frmt = '0x{0:x}'
addr = QStandardItem()
addr.setTextAlignment(Qt.AlignCenter)
addr.setText(str_frmt.format(int(range_entry['base'], 16)))
size = QStandardItem()
size.setTextAlignment(Qt.AlignRight)
size.setText("{0:,d}".format(int(range_entry['size'])))
protection = QStandardItem()
protection.setTextAlignment(Qt.AlignCenter)
protection.setText(range_entry['protection'])
file_path = None
file_addr = None
file_size = None
if len(range_entry) > 3:
if range_entry['file']['path']:
file_path = QStandardItem()
file_path.setText(range_entry['file']['path'])
if range_entry['file']['offset']:
file_addr = QStandardItem()
file_addr.setTextAlignment(Qt.AlignCenter)
file_addr.setText(
str_frmt.format(range_entry['file']['offset']))
if range_entry['file']['size']:
file_size = QStandardItem()
file_size.setTextAlignment(Qt.AlignRight)
file_size.setText("{0:,d}".format(
int(range_entry['file']['size'])))
checkbox = QStandardItem()
checkbox.setCheckable(True)
self._ranges_model.appendRow([
checkbox, addr, size, protection, file_addr, file_size,
file_path
])
# ************************************************************************
# **************************** Handlers **********************************
# ************************************************************************
def _on_range_dblclick(self, model_index):
item = self._ranges_model.itemFromIndex(model_index)
if item:
if self._ranges_model.item(model_index.row(),
0).checkState() != Qt.Checked:
self._ranges_model.item(model_index.row(),
0).setCheckState(Qt.Checked)
else:
self._ranges_model.item(model_index.row(),
0).setCheckState(Qt.Unchecked)
def _on_click_check_all(self):
for i in range(self._ranges_model.rowCount()):
self._ranges_model.item(i, 0).setCheckState(Qt.Checked)
def _on_click_uncheck_all(self):
for i in range(self._ranges_model.rowCount()):
self._ranges_model.item(i, 0).setCheckState(Qt.Unchecked)
def _on_double_clicked(self, model_index):
item = self._result_model.itemFromIndex(model_index)
if item:
self._app_window.jump_to_address(
self._result_model.item(model_index.row(), 0).text())
def _on_click_search(self):
pattern = self.input.text()
if pattern == '':
return 1
# check if we already provide a hex string as input
try:
test = pattern.replace(' ', '')
int(test, 16)
pattern = test
except ValueError:
# search for string
pattern = binascii.hexlify(pattern.encode('utf8')).decode('utf8')
ranges = []
self._search_results = []
for i in range(self._ranges_model.rowCount()):
item = self._ranges_model.item(i, 0)
if item.checkState() == Qt.Checked:
addr = self._ranges_model.item(i, 1)
size = self._ranges_model.item(i, 2)
ranges.append([addr.text(), size.text()])
if len(ranges) == 0:
return 1
status_message = 'searching...'
if self._blocking_search:
self.progress = utils.progress_dialog(status_message)
self.progress.forceShow()
self._app_window.show_progress(status_message)
self.input.setEnabled(False)
self.search_btn.setEnabled(False)
self.check_all_btn.setEnabled(False)
self.uncheck_all_btn.setEnabled(False)
self._pattern_length = len(pattern) * .5
search_thread = SearchThread(self._app_window.dwarf, self)
search_thread.onCmdCompleted.connect(self._on_search_complete)
search_thread.onError.connect(self._on_search_error)
search_thread.pattern = pattern
search_thread.ranges = ranges
search_thread.start()
def _on_search_result(self, data):
self._search_results.append(data)
def _on_search_complete(self):
self.input.setEnabled(True)
self.search_btn.setEnabled(True)
self.check_all_btn.setEnabled(True)
self.uncheck_all_btn.setEnabled(True)
self._app_window.hide_progress()
if self._blocking_search:
self.progress.cancel()
self._ranges_model.removeColumns(4, 3)
self._ranges_model.setHeaderData(3, Qt.Horizontal, 'Search Results')
self._ranges_model.setHeaderData(3, Qt.Horizontal, None,
Qt.TextAlignmentRole)
results_count = 0
is_selected = False
for i in range(self._ranges_model.rowCount()):
item = self._ranges_model.item(i, 0)
if item.checkState() == Qt.Checked:
item.setCheckState(Qt.Unchecked)
if not is_selected:
is_selected = True
self.ranges.setCurrentIndex(self._ranges_model.index(i, 0))
else:
self._search_results.insert(i, None)
self._ranges_model.item(i, 3).setText('')
self._ranges_model.item(i, 3).setTextAlignment(Qt.AlignLeft)
continue
if len(self._search_results[i]):
results_count += len(self._search_results[i])
self._ranges_model.item(i, 3).setText('Matches: {0}'.format(
len(self._search_results[i])))
self._ranges_model.item(i, 3).setTextAlignment(Qt.AlignLeft)
else:
self._ranges_model.item(i, 3).setText('')
self._ranges_model.item(i, 3).setTextAlignment(Qt.AlignLeft)
self._app_window.set_status_text(
'Search complete: {0} matches'.format(results_count))
if results_count:
for i in self._search_results:
if i and len(i):
self.results.setVisible(True)
for result in i:
self._result_model.appendRow(
QStandardItem(result['address']))
break
def _on_search_error(self, msg):
utils.show_message_box(msg)
def _on_show_results(self):
if self._search_results:
self.results.clear()
if self._app_window.debug_panel.memory_panel:
self._app_window.debug_panel.memory_panel.remove_highlights('search')
selected_index = self.ranges.selectionModel().currentIndex().row()
if selected_index is not None:
item_txt = self._ranges_model.item(selected_index, 3).text()
if item_txt == '':
return
for result in self._search_results[selected_index]:
self._result_model.appendRow(
QStandardItem(result['address']))
# TODO: fix hexview highlights performance
"""
class SpawnsList(QWidget):
""" ProcessListWidget wich shows running Processes on Device
Includes a Refresh Button to manually start refreshthread
args:
device needed
Signals:
onProcessSelected([pid, name]) - pid(int) name(str)
onRefreshError(str)
"""
onProcessSelected = pyqtSignal(list, name='onProcessSelected')
onRefreshError = pyqtSignal(str, name='onRefreshError')
def __init__(self, device, parent=None):
super(SpawnsList, self).__init__(parent=parent)
self.break_at_start = False
self._device = device
self.spawn_list = DwarfListView()
model = QStandardItemModel(0, 2, parent)
model.setHeaderData(0, Qt.Horizontal, "Name")
model.setHeaderData(1, Qt.Horizontal, "Package")
self.spawn_list.doubleClicked.connect(self._on_item_clicked)
v_box = QVBoxLayout()
v_box.setContentsMargins(0, 0, 0, 0)
v_box.addWidget(self.spawn_list)
break_spawn_start = QCheckBox('Break at spawn')
break_spawn_start.stateChanged.connect(self._on_toggle_break_spawn)
v_box.addWidget(break_spawn_start)
self.refresh_button = QPushButton('Refresh')
self.refresh_button.clicked.connect(self._on_refresh_procs)
self.refresh_button.setEnabled(False)
v_box.addWidget(self.refresh_button)
self.setLayout(v_box)
self.spawn_list.setModel(model)
self.spawn_list.header().setSectionResizeMode(
0, QHeaderView.ResizeToContents)
self.spaw_update_thread = SpawnsThread(self, self._device)
self.spaw_update_thread.add_spawn.connect(self._on_add_proc)
self.spaw_update_thread.is_error.connect(self._on_error)
self.spaw_update_thread.is_finished.connect(self._on_refresh_finished)
self.spaw_update_thread.device = self._device
self.spaw_update_thread.start()
# ************************************************************************
# **************************** Properties ********************************
# ************************************************************************
@property
def device(self):
""" Sets Device needs frida.core.device
"""
return self._device
@device.setter
def device(self, value):
self.set_device(value)
# ************************************************************************
# **************************** Functions *********************************
# ************************************************************************
def clear(self):
""" Clears the List
"""
self.spawn_list.clear()
def set_device(self, device):
""" Set frida Device
"""
if isinstance(device, frida.core.Device):
self._device = device
self.spaw_update_thread.device = device
self._on_refresh_procs()
# ************************************************************************
# **************************** Handlers **********************************
# ************************************************************************
def _on_item_clicked(self, model_index):
model = self.spawn_list.model()
index = model.itemFromIndex(model_index).row()
if index != -1:
sel_pid = self.spawn_list.get_item_text(index, 0)
if model_index.column() == 0:
sel_name = model.data(model_index, Qt.UserRole + 2)
else:
sel_name = self.spawn_list.get_item_text(index, 1)
self.onProcessSelected.emit([sel_pid, sel_name])
def _on_add_proc(self, item):
model = self.spawn_list.model()
name = QStandardItem()
name.setText(item[0])
name.setData(item[1], Qt.UserRole + 2)
package = QStandardItem()
package.setText(item[1])
model.appendRow([name, package])
def _on_error(self, error_str):
self.onRefreshError.emit(error_str)
def _on_refresh_procs(self):
if not self._device:
return
if self.spaw_update_thread.isRunning():
self.spaw_update_thread.terminate()
if not self.spaw_update_thread.isRunning():
self.clear()
self.refresh_button.setEnabled(False)
self.spaw_update_thread.device = self._device
self.spaw_update_thread.start()
def _on_refresh_finished(self):
self.spawn_list.resizeColumnToContents(0)
self.refresh_button.setEnabled(True)
def _on_toggle_break_spawn(self, state):
self.break_at_start = state == Qt.Checked