NyanSatan’s gists

NyanSatan / bloody_gear.png.b64

Created May 27, 2025 20:31

SwitchBoard logo with blood🩸+ cursed decoding script

	iVBORw0KGgoAAAANSUhEUgAAAEcAAABUCAYAAADQ8ioqAAAlaUlEQVR4nO18C5Sd
	ZXnu+/7f9///vs5kMntuuU0SkpCEBAiRcAmBAFaPuOoStWKRUsVabG2169jTi21P
	T3vO6lmrXa4q2lq1NwWtWBVFgR4BEREBFYIYLrlM7slMkj2XPfv2377vPev5/hnq
	Oksp4Sb28MFOMnv27P1/7/9envd5n2+IXlmvrOeymH7GKyyExeHFi5dtOX/LL6xa
	vXxrYCxVj580/7Z7/1fvue++W4wx2c/q2jT9DFepXK6eedaG887cvGnbmevXbO9f
	UNxQ7aQ0NNsoHVq9uv7tBx74+v8XxllY6x8cXbFi3f79+5+cqU+eWLdh3Xnv+NW3
	/fFpixZuDsRbyJQGkjQ4O3CI9n3kE7Tyfe97zciSJZ86ODb2+NMXq7Vf7e3t67bb
	rSiKOj/XxqkN1IY3n3vO1u0XnvO6FUuHt4UmGvzcd578i3/9x0//1aLBgXVLK+Gl
	Znam3FYh6SCgQlAgu2SpJFds5ZEbbli34Q1v2ArjDA0PL/2liy669uKhodesDoKV
	9Sg68dGxsQ/fcc89N6dpmvxcGWfJ0iUrrrn6TddfdcXWa8ohDR8+eFR12k1SaZO2

NyanSatan / modern-iboot-symbols.txt

Created April 2, 2025 19:56

Modern as of 2024. Obviously not every single one, but still over 2K. Dumped from test coverage files

	iBootCoverage> gcov -n --dump /coverage/.gcno \|& grep "=====" \| sort \| uniq \| grep -v test \| grep -v AppleInternal \| cut -d " " -f2,4,5 \| cut -d ":" -f1 \| sort \| uniq \| sed -e 's/ @/\t@/g' > modern-iboot-symbols.txt

	__os_warn_unused @ include/overflow.h
	__syscfg_validate_and_get_instance_id_for_multi @ lib/syscfg/syscfg.c
	__syscfg_validate_keybag_instance_id @ lib/syscfg/syscfg.c
	_abb_panic_buffered_write @ lib/abb_panic/abb_panic.c
	_abb_panic_calculate_file_size @ lib/abb_panic/abb_panic.c
	_abb_panic_create_4cc @ lib/abb_panic/abb_panic.c
	_abb_panic_create_ce_subsystem_crash_report_entry @ lib/abb_panic/abb_panic.c
	_abb_panic_create_lph_subsystem_crash_report_entry @ lib/abb_panic/abb_panic.c

NyanSatan / t8020-ap_keys-220124-release_ipsws.json

Created January 22, 2024 20:27

T8020 AP & SEP keys 22.01.24, only release IPSWs, credits to m1stadev for KBAG collection

This file has been truncated, but you can view the full file.

	[
	{
	"build": "21C66",
	"fw": "iPhone11,2,iPhone11,4,iPhone11,6_17.2.1_21C66_Restore.ipsw",
	"file": "LLB.d331p.RELEASE.im4p",
	"kbag": "ceb94a60d2ab04749f320df617939ee51d83c1075500c630135fa816801fa2465aa60d32bb4b1aface8d4edae78ed8c1",
	"key": "8f8e2885ba96e189ee3e31553da43c303c6014bb91285ce572a2eac6a72320ca5f5fef05b8d9a429857544fb7d22136e"
	},
	{
	"build": "21C66",

NyanSatan / t8120-ap_keys-210124.json

Created January 21, 2024 16:47

T8120 AP & SEP keys 21.01.24

	[
	{
	"build": "20A362",
	"fw": "iPhone15,2_16.0_20A362_Restore.ipsw",
	"file": "LLB.d73.RELEASE.im4p",
	"kbag": "985898593B143B130AAEA95C723A342D647ED5F9E0953871E836000A7108E52D75E0BA03A9917E984889DCA1253D3F1C",
	"key": "9f58969bb426e99f2dc541bd524f2b5696865560a201a230ee25c89cd2a147d9e5d17779c0b816fd29c5f760a892c5bf"
	},
	{
	"build": "20A362",

NyanSatan / t8110-ap_keys-281023.json

Created January 13, 2024 16:47

T8110 AP & SEP keys 28.10.23

This file has been truncated, but you can view the full file.

	[
	{
	"fw": "iPad_Fall_2021_15.0.1_19A348_Restore.ipsw",
	"file": "LLB.j310.RELEASE.im4p",
	"kbag": "C883D3D32C20E3108DF7BA1BB79F23E2BC848D034A968042E28615B85A490A26CDAA60A0F9F931C8C901AE1C7593C8BF",
	"key": "793a284aff409d72860e64431e3d6a0e27f0d574ac4d4053628a7266ed5bd051eb6d06dde0acd5b9730ed874e136ed00"
	},
	{
	"fw": "iPad_Fall_2021_15.0.1_19A348_Restore.ipsw",
	"file": "iBEC.j310.RELEASE.im4p",

NyanSatan / uart.c

Created April 10, 2023 12:05

UART write-only driver for A6 SecureROM

	/*
	* The algorithm is mostly stolen from iBoot source,
	* cleaned up for the purpose
	*
	* TODO: analyze S5L8700X datasheet in order
	* to understand if UART peripherial is the same,
	* and if so - clean up this mess
	*/

	#include <stdint.h>

NyanSatan / t8301-ap_keys-200722.json

Created September 10, 2022 16:07

T8301 AP keys 20.07.22

	[
	{
	"fw": "Watch6,1_7.5_18T567_Restore.ipsw",
	"file": "LLB.n157s.RELEASE.im4p",
	"kbag": "ED5083404184FFD4B6B3AC3BAC11784F1523E552FB434250AE9AFAC4D969C017E392277BDB33F73D136ADB74300469F2",
	"key": "4ab9cec46db6e89b061c2f12cb9a21b3fa659fa9f076afba2377184011250b459c0e55837d04e463d9242e1447f75cdb"
	},
	{
	"fw": "Watch6,1_7.5_18T567_Restore.ipsw",
	"file": "iBEC.n157s.RELEASE.im4p",

NyanSatan / t8101-ap_keys-300622.json

Last active May 8, 2025 06:07

T8101 AP keys 18.08.21 - 30.06.22, credits to @nicolas09F9 for KBAG collecting

	[
	{
	"device": "iPad13,1",
	"build": "18H17",
	"type": "iBEC",
	"filename": "iBEC.j307.RELEASE.im4p",
	"kbag": "cf41c5052d1256c65295b8f97c540d7d6a9f9c10996e38dd0262cdc8cc7576f9a4ba654aebabfa651105de217090bddb",
	"key": "e68010a6c0d14d31f7572dcccf297fe088f10eef4ac53b9293bddc6cfa43afed85a465d98d3dda5632cce58d400e5213"
	},
	{

NyanSatan / t8103-ap_keys-180622.json

Created June 18, 2022 12:34

T8103 AP keys 18.06.22

This file has been truncated, but you can view the full file.

	[
	{
	"fw": "UniversalMac_11.0.1_20B28_Restore.ipsw",
	"file": "LLB.j274.RELEASE.im4p",
	"kbag": "3267519BE210D18C937A7180542EE2D66F5FBE37A0EB6BFE632B86B75C14392F2001BC3F383A7FF966F968BAB2EE484F",
	"key": "44a6f8571fa811690914ba053f1740400cc0931c70bd8c5a1374dd12783d84db61e89fa68a6ac4349c04b319138e7bc9"
	},
	{
	"fw": "UniversalMac_11.0.1_20B28_Restore.ipsw",
	"file": "LLB.j293.RELEASE.im4p",

NyanSatan / the_final_panic

Created February 21, 2022 17:35

	The Final Panic
	by @nyan_satan
	Jan 27 2022 8:08 PM MSK

	A6 doesn't lose SRAM contents after a panic in SecureROM

	Data, BSS and heap will be reinitialized, for sure, but stacks won't (both IRQ, exception and bootstrap)

	Now I gotta understand what to do with this information...

john NyanSatan