Sharpening my axe

#B1twis3 Leoid

Sharpening my axe

Security Researcher

bazad / find_kernel_base_checkra1n.c

Created November 21, 2019 02:46

A demo of one way to find the kernel base on iOS 13.2.2 on an iPhone 8 using the kernel task port as exposed by checkra1n 0.9.5.

	#include <assert.h>
	#include <mach/mach.h>
	#include <stdbool.h>
	#include <stdio.h>

	// ---- mach_vm.h ---------------------------------------------------------------------------------

	extern
	kern_return_t mach_vm_read_overwrite
	(

mattifestation / LoadMethodScanner.ps1

Last active July 20, 2024 22:52

A crude Load(byte[]) method scanner for UMCI bypass research

	# Author: Matthew Graeber (@mattifestation)
	# Load dnlib with Add-Type first
	# dnlib can be obtained here: https://github.com/0xd4d/dnlib
	# Example: ls C:\ -Recurse \| Get-AssemblyLoadReference
	filter Get-AssemblyLoadReference {
	param (
	[Parameter(Mandatory = $True, ValueFromPipelineByPropertyName = $True)]
	[Alias('FullName')]
	[String]
	[ValidateNotNullOrEmpty()]

adamawolf / Apple_mobile_device_types.txt

Last active November 18, 2024 06:08

List of Apple's mobile device codes types a.k.a. machine ids (e.g. `iPhone1,1`, `Watch1,1`, etc.) and their matching product names