Skip to content

Releases: sadopc/machscope

MachScope v1.0.0

12 Feb 14:03

Choose a tag to compare

MachScope v1.0.0

First stable release of MachScope — a native macOS binary analysis tool.

Features

  • Mach-O Parsing — Headers, segments, sections, symbols, dylibs, strings
  • Code Signatures — Entitlements, CDHash, signing info, team ID
  • ARM64 Disassembly — Full instruction decoder with PAC annotation
  • Process Debugging — Attach, breakpoints, memory read/write, registers
  • JSON Output — Machine-readable output for scripting
  • Swift Library — Embed MachOKit, Disassembler, or DebuggerCore in your own projects

Install

brew install sadopc/tap/machscope

Or build from source:

swift build -c release

Requirements

  • macOS 14.0+ (Sonoma)
  • Apple Silicon (ARM64)
  • Swift 6.0+

Stats

  • 319+ tests
  • ~13,500 lines of Swift
  • Zero external dependencies