Kyle-Ye

Inspired by https://infosec.exchange/@jjtech/112612685494089718

Method 1: LLDB

Step 0

Reboot into Recovery OS + Disable SIP

csrutil disable

throwaway96

News

EOL (2024-07-21)

I'm not going to be maintaining this document anymore. I'm leaving it as-is since much of the FAQ section is still accurate and has yet to be incorporated into other resources.

Use CanI.RootMy.TV to find an exploit for your TV.

New exploit for webOS 3.5+: DejaVuln (2024-04-21)

chaucerling

[
    {
        "bundleID": "com.miHoYo.GenshinImpact",
        "name": "Genshin Impact",
        "version": "2.8.0",
        "itunesLookup": "http://itunes.apple.com/lookup?bundleId=com.miHoYo.GenshinImpact",
        "link": "https://ipa.playcover.workers.dev/0:/Genshin%20Impact/US/Genshin%20Impact_2.8.0.ipa"
    },
    {
            "id": "com.miHoYo.Yuanshen",

Sharrnah

#!/bin/bash

sudo steamos-readonly disable

sudo pacman-key --init
sudo pacman-key --populate archlinux
#sudo pacman-key --refresh-keys

# install docker package
echo -e "\rInstalling Docker..."

sj-dan

#!/bin/bash

URLs=$(curl "https://dl.google.com/dl/edgedl/chromeos/recovery/cloudready_recovery2.json" \
-s --output - | \
grep "^.*\"url\".*$" | \
sed "s/.*\"url\": \"\(.*\)\".*$/\1/g")

printf "\nPick which channel to download your image from. Channel name is near the end of the URL.\n\n"

select URL in $URLs;

giper45

#include <android/security/keystore/IKeystoreService.h>
#include <android/security/keystore/BpKeystoreService.h>

namespace android {

namespace security {

namespace keystore {

IMPLEMENT_META_INTERFACE(KeystoreService, "android.security.keystore.IKeystoreService")

sorny

X11 forwarding on macOS and docker

A quick guide on how to setup X11 forwarding on macOS when using docker containers requiring a DISPLAY. Works on both Intel and M1 macs!

This guide was tested on:

• macOS Catalina 10.15.4
• docker desktop 2.2.0.5 (43884) - stable release
• XQuartz 2.7.11 (xorg-server 1.18.4)
• Macbook Pro (Intel)

razhangwei

To disable it, set this preference

sudo defaults write /Library/Preferences/SystemConfiguration/com.apple.captive.control Active -boolean false

Then, as @Leon mentions, use the regular web browser to login. Or if you are on a network where that somehow does not work then you can still try and open the app manually (located at /System/Library/CoreServices/Captive Network Assistant.app )

In case, you would ever want to remove this setting, you can do:

sudo defaults delete /Library/Preferences/SystemConfiguration/com.apple.captive.control Active

windsurfer1122

Clean-Up of PS3HEN 3.0.1/2.3.2

Stand: 2020-04-15T16:04:00Z

Table of Contents

• Step 0 - Preparations
• Step 1 - Backup And First Clean-up of Homebrew
• Step 2 - Final Clean-up of PS3HEN, Execution History And Last Homebrew
• Credits

Step 0 - Preparations

pich4ya

// $ frida -l antiroot.js -U -f com.example.app --no-pause
// CHANGELOG by Pichaya Morimoto (p.morimoto@sth.sh): 
//  - I added extra whitelisted items to deal with the latest versions 
// 						of RootBeer/Cordova iRoot as of August 6, 2019
//  - The original one just fucked up (kill itself) if Magisk is installed lol
// Credit & Originally written by: https://codeshare.frida.re/@dzonerzy/fridantiroot/
// If this isn't working in the future, check console logs, rootbeer src, or libtool-checker.so
Java.perform(function() {

    var RootPackages = ["com.noshufou.android.su", "com.noshufou.android.su.elite", "eu.chainfire.supersu",