Modifying Metaphor for another Device

[TirelessMan]

I am going to use Metaphor for another device instead of Nexus 5.
Which part of Metaphor source code must I change?
did someone done that before?
Thanks.

[Enilos]

Hello,
Even if I did not do such a thing, I guess we have to add some files in the config folders.
The file "web/index.php" calls the file "../config/$final_ua.html", so we may have to :

1. create a new folder in "config" with a name like "Android ; Build"
2. copy LRX22C.html, rename it with the build name we'll use, and modify the lookup tables inside
3. copy LRX22C.json , rename it with the build name we'll use,and edit the values in it.

For the steps 2 and 3, I don't know how to get the values of "pop {pc}", "pop{r0,r1,r2,pc}", "stack pivot gadget address" and "mprotect address", and the lookup tables.

It is written, in the page 31/33 of the paper, that we need libc.so to get the for first values, and :

• libc.so (which can be extracted from the ROM's system image)
• libicui8n.so (which can be extracted from the ROM's system image)
• jemalloc configuration (which can be extracted from the ROM's system image)
• predictable spray address (which can be guess).

But I really don't know how to achieve all of this. I wanted to create a new issue, but I think it could be associated with this one.

If you managed to do this, maybe you could enlighten me ?
Thanks in advance

[navneetkumar]

Hi,
Did you figure out how to create lookup table for other device/emulator ? I have extracted the libc.so and other shared libraries from emulator but don't know how to create lookup tables from these .