Zero-the-Hero

Documentation

Zero-the-Hero (ZtH, 0tH) is a Mach-O binary analyser focused on deep parsing, speed, precision, and diagnostics.

It is designed for reverse engineers, hackers, and security researchers, providing a fast and structured way to explore and inspect Mach-O executables.

ZtH is an interactive REPL, similar in spirit to tools like msfconsole.

Scope:

  • Mach-O 64-bit binaries

  • Universal FAT files

  • Uncommon load commands

  • Segments and sections

  • Strings extraction and analysis

  • Anomalies detection


List of commands

Generated with the help command:

Zero-the-Hero REPL — Available Commands
─────────────────────────────────────────

File & Baseline
load <path>        Load Mach-O/Universal as the session baseline
mmap [--arch <a>]  Flat map: header/LC/sections/padding
dmap [--arch <a>]  Deep map: normalized AST + indexes + fingerprint
clear              Clear the current baseline

Load Commands
lc_list          List all Load Commands with index and type
lc_show <index>  Show details for the selected Load Command