Skip to content
/ Dobby Public
forked from jmpews/Dobby

a lightweight, multi-platform, multi-architecture hook framework.

License

Notifications You must be signed in to change notification settings

xgDebug/Dobby

 
 

Repository files navigation

Dobby

Dobby a lightweight, multi-platform, multi-architecture exploit hook framework.

  • Minimal and modular library
  • Multi-platform support(Windows/macOS/iOS/Android/Linux)
  • Multiple architecture support(X86-64, ARM, ARM64)
  • Clean code without STL(port to kernel easily)
  • Plugin support(DobbyDrill ?)
  • iOS kernel exploit support(Gollum ?)

Getting started

git clone https://github.com/jmpews/Dobby.git --depth=1
cd Dobby/example/
mkdir build; cd build; cmake ..

Or download latest release

Quick demo

iOS ARM64E

void *posix_spawn_ptr = __builtin_ptrauth_strip((void *)posix_spawn, ptrauth_key_asia);
void *fake_posix_spawn_ptr = __builtin_ptrauth_strip((void *)fake_posix_spawn, ptrauth_key_asia);

DobbyHook((void *)posix_spawn_ptr, (void *)fake_posix_spawn_ptr, (void **)&orig_posix_spawn);

*(void **)&orig_posix_spawn = (void *)ptrauth_sign_unauthenticated((void *)orig_posix_spawn, ptrauth_key_asia, 0);

Android Linker Restriction

# impl at SymbolResolver/elf/dobby_symbol_resolver.cc
void *__loader_dlopen = DobbySymbolResolver(NULL, "__loader_dlopen");
DobbyHook((void *)__loader_dlopen, (void *)fake_loader_dlopen, (void **)&orig_loader_dlopen);
# impl at AndroidRestriction/android_restriction.cc
linker_disable_namespace_restriction();
void *handle = NULL;
handle       = dlopen(lib, RTLD_LAZY);
vm           = dlsym(handle, "_ZN7android14AndroidRuntime7mJavaVME");

Documentation

full Installation documentation site

Download

download static library

Credits

  1. frida-gum
  2. minhook
  3. substrate.
  4. v8
  5. dart
  6. vixl

About

a lightweight, multi-platform, multi-architecture hook framework.

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages

  • C++ 85.3%
  • C 9.6%
  • CMake 4.4%
  • Other 0.7%