darwin: processes: add cdhash property

doronz88 · Apr 4, 2024 · ef8ff5f · ef8ff5f
1 parent 18f3866
commit ef8ff5f
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/src/rpcclient/rpcclient/darwin/processes.py b/src/rpcclient/rpcclient/darwin/processes.py
@@ -42,6 +42,7 @@
 
 logger = logging.getLogger(__name__)
 
+CDHASH_SIZE = 20
 CHUNK_SIZE = 1024 * 64
 APP_SUFFIX = '.app/'
 
@@ -732,6 +733,14 @@ def regions(self) -> List[Region]:
 
         return result
 
+    @property
+    def cdhash(self) -> bytes:
+        with self._client.safe_malloc(CDHASH_SIZE) as cdhash:
+            # by reversing online-auth-agent
+            if 0 != self._client.symbols.csops(self.pid, 5, cdhash, CDHASH_SIZE):
+                raise BadReturnValueError(f'failed to get cdhash for {self.pid}')
+            return cdhash.peek(CDHASH_SIZE)
+
     def get_process_symbol(self, address: int) -> ProcessSymbol:
         return ProcessSymbol.create(address, self._client, self)