{
  "added_at": "2026-11-09",
  "category": "native-analysis",
  "description_en": "ExtractMachO is an IDA plugin that extracts Mach-O binaries found in a disassembly. It supports 32-bit and 64-bit images, fat binaries, and Intel, PowerPC, and ARM. Version 1.1 was tested with IDA 6.3 on Mac OS X.",
  "description_zh": "ExtractMachO 是一个 IDA 插件，用来提取反汇编中的 Mach-O 二进制。它支持 32 位和 64 位映像、胖二进制，以及 Intel、PowerPC 和 ARM。1.1 版在 Mac OS X 上的 IDA 6.3 中测试过。",
  "entry_url": "https://awesomerea.org/resources/extractmacho/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/extractmacho/",
  "evidence_url": "https://github.com/gdbinit/ExtractMachO/blob/0ee718a023ac5167560063ea2e95536e7bcb2c9e/README",
  "group": "tools",
  "id": "extractmacho",
  "json_url": "https://awesomerea.org/resources/extractmacho/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/extractmacho/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/extractmacho/index.md",
  "name": "ExtractMachO",
  "name_zh": "ExtractMachO",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "Place the cursor on a Mach-O start to dump that image, or let the plugin search the whole database. The magic values it recognizes are 0xFEEDFACE and 0xFEEDFACF.",
    "The OS X build uses the Makefile or the Xcode project.",
    "The README names no license."
  ],
  "requirements_zh": [
    "把光标放在 Mach-O 开头可以只导出该映像，也可以让插件搜索整个数据库。它识别的魔数是 0xFEEDFACE 和 0xFEEDFACF。",
    "OS X 构建使用 Makefile 或 Xcode 工程。",
    "README 没有写许可证。"
  ],
  "targets": [
    "binary"
  ],
  "url": "https://github.com/gdbinit/ExtractMachO",
  "verification": "source-reviewed",
  "verified_at": "2026-11-07"
}