misc-code icon indicating copy to clipboard operation
misc-code copied to clipboard

Error Jeb -> DartBytes.py

Open xk0m1 opened this issue 1 year ago • 3 comments

When i load DartBytes.py in JEB , i get this error

Script execution error: com.pnfsoftware.jeb.client.script.ScriptExecutionException: Traceback (most recent call last): File "/[REDACTED]/DartBytes.py", line 15, in run fragment = ctx.getFocusedView().getActiveFragment() AttributeError: 'NoneType' object has no attribute 'getActiveFragment'

xk0m1 avatar Mar 20 '24 17:03 xk0m1

That means that getFocusedView is returning None. Have you selected a view?

cryptax avatar Mar 22 '24 10:03 cryptax

Sorry for the late reply (didnt get the notification)

In the above example, I tried it for a AOT Compiled Program , thats why didnt work ig.

xk0m1 avatar Apr 02 '24 16:04 xk0m1

In JEB,

  1. Disassemble the Dart AOT snapshot. It must have been processed before you can run the script, i.e you should have a x86_64 image/Disassembly window (or for another platform).
  2. Go to a function which is loading Small Integers. You need to put your pointer in the function. If there is no function where your current address is, you'll get an error "Please selection a method".
  3. Run the script. It will attempt to show you each character the SMI is really representing, or if not a printable character, then it's hex value.

screenshot

cryptax avatar Apr 12 '24 12:04 cryptax