unidbg

Unidbg is a Java-based emulator for Android native libraries (ELF/ARM32 and ARM64) with experimental iOS support, originally built as an educational tool for studying ELF and MachO file formats and ARM assembly. It emulates the JNI Invocation API including JNIEnv and JavaVM, handles syscall instructions, and supports inline hooks via Dobby, Android import hooks via xHook, and iOS hooks via fishhook, Substrate, and Whale. Multiple execution backends are available, including Unicorn, Dynarmic, Apple M1 hypervisor, and Linux KVM. The MCP integration activates by typing "mcp" in the console when a breakpoint is hit, launching an SSE-based server that tools like Cursor can connect to. This exposes over 40 tools covering register read/write, memory inspection and patching, disassembly and assembly, breakpoint management, stepped execution, function calls with typed arguments, and instruction tracing. Reverse engineers analyzing obfuscated Android or iOS native code benefit most, using Claude-compatible AI assistants to interactively interrogate emulated library behavior without needing physical hardware.

Lo que la gente pregunta sobre unidbg