JJTech0130

-- iAP2 (iPod Accessory Protocol 2) 
--
-- Layers:
--   1. iAP2 Link — packet framing, control flags, checksums
--   2. iAP2 Session — payload interpretation based on session type
--      a. Control Session messages with parameters
--      b. File Transfer Session datagrams
--      c. External Accessory Session datagrams

-- ============================================================

JJTech0130

// This script implements SSL keylogging for libssl.35.dylib, which is an old version of LibreSSL.
// Primarily intended to be used when debugging MobileDevice.framework, which uses it for some reason.

var mod = Process.getModuleByName("libssl.35.dylib");
var gen_master = mod.findExportByName("tls1_generate_master_secret");

var keylogPath = '/tmp/keylog.txt';
var keylog = new File(keylogPath, "a");

var toHex = function(arr) {

JJTech0130

local proto_usbmuxd = Proto("usbmuxd",  "Usbmuxd Protocol")

proto_usbmuxd.fields.protocol = ProtoField.uint32("usbmuxd.protocol", "Message Kind", base.DEC)
proto_usbmuxd.fields.length = ProtoField.uint32("usbmuxd.length", "Length", base.DEC)
proto_usbmuxd.fields.magic = ProtoField.uint32("usbmuxd.magic", "Magic", base.HEX)
proto_usbmuxd.fields.tx_seq = ProtoField.uint16("usbmuxd.tx_seq", "Transmit sequence", base.DEC)
proto_usbmuxd.fields.rx_seq = ProtoField.uint16("usbmuxd.rx_seq", "Receive sequence", base.DEC)

proto_usbmuxd.fields.version_major = ProtoField.uint32("usbmuxd.version_major", "Major version", base.DEC)
proto_usbmuxd.fields.version_minor = ProtoField.uint32("usbmuxd.version_minor", "Minor version", base.DEC)

JJTech0130

"""
jjgRISC assembler
Assembles fmlRISC assembly (.s) to Altera .mif format.

Based on dxp_asm, which is written in C, aimed to be implemented in a cleaner way.

I added support for .equ and .word directives, .word doesn't happen to be very useful for SMIOP due to the fact that you can't load PM into registers.
Also, I fixed the jump implementation. Needs a second pass to calculate the label address to jump to first.

I implemented support for all memnotics for all IDNs, so hopefully it should be usable for everyone.

JJTech0130

// ConsumerKeys.swift
// Boot-protocol keyboard that reports keycodes in Consumer page (0x0C).
// iOS maps consumer page usages received this way to system actions.

import Foundation

public final class ConsumerKeys: SyntheticHID {

    // MARK: - Consumer usages sent as boot-keyboard keycodes (page 0x0C, ≤ 0xFF)

JJTech0130

import Dynamic
import Foundation
import IOKit
import Virtualization

enum PassthroughError: Error {
    case deviceNotFound(vendor: Int, product: Int)
    case failedToCreateDeviceConfig(underlyingError: Error?)
    case failedToCreateDevice(underlyingError: Error?)
    case failedToAttachDevice(underlyingError: Error)

JJTech0130

amfid-allow

This script hooks into macOS amfid to grant restricted entitlements to selected executables. Tested on macOS 15.4.

Prerequisites

Only disabling Debugging Restrictions (ALLOW_TASK_FOR_PID) is required and other SIP restrictions can be left enabled:

JJTech0130

#!/usr/bin/env python3

import csv
import sys
import requests
from typing import Dict, Any, Optional

# Configuration
BASE_URL = "https://scorify.local"
GRAPHQL_URL = f"{BASE_URL}/api/query"

JJTech0130

#!/usr/bin/env python3

import argparse
import json
import time
import threading
from datetime import datetime, timezone
from typing import Dict, Any, Tuple, List
import pika
from pika.adapters.blocking_connection import BlockingChannel

JJTech0130

import sys
import json
import plistlib
import requests
import zipfile
from io import BytesIO
try:
    from rich import print
except ImportError:
    print=print