Roadmap

Current 0tH version is 0.6.0. Features list can be found in the Documentation.

Next commands to be implemented

Command

Synopsis

Version

diff <path>

Compare target against the baseline (ephemeral parse)

0.6.0

diff_arch <a> <path>

Restrict comparison to a specific arch

0.6.0

diff_x <path> <fmt> <outfile>

Exports in the selected format the results of the comparisons. Accepted formats are: json, ndjson, and pretty

0.6.0

diff_xa <path> <a> <fmt> <outfile>

Restricts the comparison to a specific arch and exports in the selected format

0.6.0

save_AST <outfile> <fmt>

Saves normalised AST of the baseline

0.6.0

save_mmap <outfile>

Export flat memory map (mmap) in pretty print

0.5.8

save_strings <outfile>

Saves all the strings in text format

0.5.8

export_strings <outfile>

Saves all strings and their offset in json format

0.5.8

explore_code_signature <options>

If ran without arguments, it performs the analysis of all the LC_CODE_SIGNATURE’s superblob elements, otherwise:

- summary gives an overview of the superblob
- supeblob gives the full decoding of the superblob (alias to command without options)
- codedirectory returns the CodeDirectory blob
- entitlements extracts and shows the Entitlement XML
- requirements extracts and show the internal requirements

0.5.7

export_code_signature <options> <outfile> <fmt>

Exports the results of the previous command in the given format

0.5.7

Next features to be implemented

Feature

Synopsis

Version

Fat support

Full support for multiarchitecture files

0.5.9