jlutil (SimPLISTic) and XPoCe2 now both support bplist16

Used for discussing the various tools in the book as well as encouraging members to share tools

jlutil (SimPLISTic) and XPoCe2 now both support bplist16

Postby morpheus » Mon Aug 26, 2019 11:26 am

bplist16, an undocumented binary property list format used extensively in NSXPC is out of beta. Both tools now support it, and convert the nasty binary representation into the simpler SimPLISTic format. This is superb for NSXPC tracing with XPoCe2.

xpoce2 - http://NewOSXBook.com/tools/XPoCe2.html
jlutil - http://NewOSXBook.com/tools/jlutil.html
morpheus
Site Admin
 
Posts: 731
Joined: Thu Apr 11, 2013 6:24 pm

Re: jlutil (SimPLISTic) and XPoCe2 now both support bplist16

Postby backendbilly » Tue Aug 27, 2019 2:39 am

Are you sure SimPLISTic is the latest? I have an older tar dated back to January 20 2018 and its identical to the latest downloaded tar.

Also, why not release an ARM version of XPoCe2? my workaround right now is to use Frida and it works perfectly while capturing XPC messages. I'm not asking for releasing xnoop here just an ARM version of XPoCe2.
backendbilly
Site Admin
 
Posts: 142
Joined: Fri May 29, 2015 5:58 pm

Re: jlutil (SimPLISTic) and XPoCe2 now both support bplist16

Postby morpheus » Fri Aug 30, 2019 1:57 am

http://NewOSXBook.com/tools/jlutil.tgz - link was wrong. Thank you.

And I cannot and will not compete with Frida or other tools which have more developers than yours truly working on them. That said, I'll talk to Tg about release XPoCe for ARM64 as well.
morpheus
Site Admin
 
Posts: 731
Joined: Thu Apr 11, 2013 6:24 pm


Return to Tools

Who is online

Users browsing this forum: No registered users and 2 guests