macmade / dyld_cache_extract Goto Github PK

View Code? Open in Web Editor NEW

222.0 15.0 34.0 12.04 MB

A macOS utility to extract dynamic libraries from the dyld_shared_cache of macOS and iOS.

Home Page: http://www.xs-labs.com

License: MIT License

C++ 73.05% Objective-C 22.94% Objective-C++ 4.02%

macos ios dyld dylib cache extract extract-dynamic-libraries macos-utility reverse-engineering macho

dyld_cache_extract's Introduction

dyld_cache_extract

Notice

This project is now obsolete.
Please take a look at the dyld-cache-dump project.

About

A macOS utility to extract dynamic libraries from the dyld_shared_cache of macOS and iOS.

The project is available as a macOS application (with GUI) and as a command line tool.

Command line usage

dyld_cache_extract - Extractor utility for DYLD shared cache

Available options:
    
    --help                            Shows this help dialog.
    --info [PATH]                     Displays informations about a dyld_shared_cache file.
    --extract-all [PATH] [OUT_DIR]    Extracts all libraries from a dyld_shared_cache file.
    --extract [LIB] [PATH] [OUT_DIR]  Extracts a specific library from a dyld_shared_cache file.

License

Project is released under the terms of the MIT License.

Repository Infos

Owner:          Jean-David Gadina - XS-Labs
Web:            www.xs-labs.com
Blog:           www.noxeos.com
Twitter:        @macmade
GitHub:         github.com/macmade
LinkedIn:       ch.linkedin.com/in/macmade/
StackOverflow:  stackoverflow.com/users/182676/macmade

dyld_cache_extract's People

Contributors

Stargazers

Watchers

dyld_cache_extract's Issues

#include <XS/PIMPL/Object.hpp> not found

Is there any binary I can download instead of compile?
It reports #include <XS/PIMPL/Object.hpp> not found all the time and I don't know where is it.

The file "dyld_shared_cache_arm64" is not a valid DYLD shared cache file.

Hi, @macmade .

I found that is not worked for dyld_shared_cache_arm64, but worked for dyld_shared_cache_armv7s. I got the dyld_shared_cache from my Jailbroken iPhone 5s, on iOS 9.0.1.

dyld_shared_cache_arm64

dyld_shared_cache_armv7s

So is it doesn't support arm64 now? or some other reasons?

Thank you!

iOS 10.2 support

Opening dyld_shared_cache_armv7s from iOS 10.2 (copied using iExplorer) in the GUI and exporting NotesShared framework gave a 561.MB NotesShared file so obviously something has gone wrong.

Hi @macmade,
I've just tested your tool and it doesn't extract library/libraries from cache for --extract or -extract-all options. The --info option works just fine.
Could you please tell me how to use it?

Thank you.

can't use dylibs dyld overlapping segments

hello,

do you know how to fix it?

Extracting macOS 11 cache file leads to "duplicate file" prompts

I'm trying to extract all 1842 items of a "dyld_shared_cache_arm64e" file, taken from a DTK with macOS 11 beta 3. Using the released app v0.1.1

When selecting them all, and choosing "Export Selected", I get many prompts about duplicate files.

Also, all files end up being 2 GB in size, which is clearly incorrect.

I get the impression that the duplicates are symlinks, and that the extractor doesn't handle these well. It should probably simply ignore them.

Command ProcessPCH++ failed with a nonzero exit code

when I complie with xcode, it report this.

In file included from /Users/perf/Documents/GitHub/dyld_cache_extract/dyld_cache_extract/DCE.pch:33:
Submodules/SeriousCode/clang-warnings.h:453:32: fatal error: unknown warning group '-Wfallback', ignored [-Wunknown-warning-option]
#pragma clang diagnostic fatal "-Wfallback"
^
1 error generated.
Command ProcessPCH++ failed with a nonzero exit code

Object.hpp missing

#include <XS/PIMPL/Object.hpp>
But the file is not found in the project but in your pimpl project.

#include <clang-warnings.h>
But clang-warnnings.h missing, remove this statement, succeeded.

environment: Macos sieera + Xcode 8.1.