Skip to content

Instantly share code, notes, and snippets.

View bb33bb's full-sized avatar
💭
I may be slow to respond.

boy1337 bb33bb

💭
I may be slow to respond.
485 followers · 569 following
View GitHub Profile
@bb33bb
bb33bb / t8103-ap_keys-180622.json
Created May 8, 2025 06:07 — forked from NyanSatan/t8103-ap_keys-180622.json
T8103 AP keys 18.06.22
This file has been truncated, but you can view the full file.
[
{
"fw": "UniversalMac_11.0.1_20B28_Restore.ipsw",
"file": "LLB.j274.RELEASE.im4p",
"kbag": "3267519BE210D18C937A7180542EE2D66F5FBE37A0EB6BFE632B86B75C14392F2001BC3F383A7FF966F968BAB2EE484F",
"key": "44a6f8571fa811690914ba053f1740400cc0931c70bd8c5a1374dd12783d84db61e89fa68a6ac4349c04b319138e7bc9"
},
{
"fw": "UniversalMac_11.0.1_20B28_Restore.ipsw",
"file": "LLB.j293.RELEASE.im4p",
@bb33bb
bb33bb / t8101-ap_keys-300622.json
Created May 8, 2025 06:07 — forked from NyanSatan/t8101-ap_keys-300622.json
T8101 AP keys 18.08.21 - 30.06.22, credits to @nicolas09F9 for KBAG collecting
[
{
"device": "iPad13,1",
"build": "18H17",
"type": "iBEC",
"filename": "iBEC.j307.RELEASE.im4p",
"kbag": "cf41c5052d1256c65295b8f97c540d7d6a9f9c10996e38dd0262cdc8cc7576f9a4ba654aebabfa651105de217090bddb",
"key": "e68010a6c0d14d31f7572dcccf297fe088f10eef4ac53b9293bddc6cfa43afed85a465d98d3dda5632cce58d400e5213"
},
{
@bb33bb
bb33bb / t8301-ap_keys-200722.json
Created May 8, 2025 06:07 — forked from NyanSatan/t8301-ap_keys-200722.json
T8301 AP keys 20.07.22
[
{
"fw": "Watch6,1_7.5_18T567_Restore.ipsw",
"file": "LLB.n157s.RELEASE.im4p",
"kbag": "ED5083404184FFD4B6B3AC3BAC11784F1523E552FB434250AE9AFAC4D969C017E392277BDB33F73D136ADB74300469F2",
"key": "4ab9cec46db6e89b061c2f12cb9a21b3fa659fa9f076afba2377184011250b459c0e55837d04e463d9242e1447f75cdb"
},
{
"fw": "Watch6,1_7.5_18T567_Restore.ipsw",
"file": "iBEC.n157s.RELEASE.im4p",
@bb33bb
bb33bb / uart.c
Created May 8, 2025 06:07 — forked from NyanSatan/uart.c
UART write-only driver for A6 SecureROM
/*
* The algorithm is mostly stolen from iBoot source,
* cleaned up for the purpose
*
* TODO: analyze S5L8700X datasheet in order
* to understand if UART peripherial is the same,
* and if so - clean up this mess
*/
#include <stdint.h>
@bb33bb
bb33bb / t8110-ap_keys-281023.json
Created May 8, 2025 06:06 — forked from NyanSatan/t8110-ap_keys-281023.json
T8110 AP & SEP keys 28.10.23
This file has been truncated, but you can view the full file.
[
{
"fw": "iPad_Fall_2021_15.0.1_19A348_Restore.ipsw",
"file": "LLB.j310.RELEASE.im4p",
"kbag": "C883D3D32C20E3108DF7BA1BB79F23E2BC848D034A968042E28615B85A490A26CDAA60A0F9F931C8C901AE1C7593C8BF",
"key": "793a284aff409d72860e64431e3d6a0e27f0d574ac4d4053628a7266ed5bd051eb6d06dde0acd5b9730ed874e136ed00"
},
{
"fw": "iPad_Fall_2021_15.0.1_19A348_Restore.ipsw",
"file": "iBEC.j310.RELEASE.im4p",
@bb33bb
bb33bb / t8120-ap_keys-210124.json
Created May 8, 2025 06:06 — forked from NyanSatan/t8120-ap_keys-210124.json
T8120 AP & SEP keys 21.01.24
[
{
"build": "20A362",
"fw": "iPhone15,2_16.0_20A362_Restore.ipsw",
"file": "LLB.d73.RELEASE.im4p",
"kbag": "985898593B143B130AAEA95C723A342D647ED5F9E0953871E836000A7108E52D75E0BA03A9917E984889DCA1253D3F1C",
"key": "9f58969bb426e99f2dc541bd524f2b5696865560a201a230ee25c89cd2a147d9e5d17779c0b816fd29c5f760a892c5bf"
},
{
"build": "20A362",
@bb33bb
bb33bb / t8020-ap_keys-220124-release_ipsws.json
Created May 8, 2025 06:06 — forked from NyanSatan/t8020-ap_keys-220124-release_ipsws.json
T8020 AP & SEP keys 22.01.24, only release IPSWs, credits to m1stadev for KBAG collection
This file has been truncated, but you can view the full file.
[
{
"build": "21C66",
"fw": "iPhone11,2,iPhone11,4,iPhone11,6_17.2.1_21C66_Restore.ipsw",
"file": "LLB.d331p.RELEASE.im4p",
"kbag": "ceb94a60d2ab04749f320df617939ee51d83c1075500c630135fa816801fa2465aa60d32bb4b1aface8d4edae78ed8c1",
"key": "8f8e2885ba96e189ee3e31553da43c303c6014bb91285ce572a2eac6a72320ca5f5fef05b8d9a429857544fb7d22136e"
},
{
"build": "21C66",
@bb33bb
bb33bb / modern-iboot-symbols.txt
Created May 8, 2025 06:04 — forked from NyanSatan/modern-iboot-symbols.txt
Modern as of 2024. Obviously not every single one, but still over 2K. Dumped from test coverage files
iBootCoverage> gcov -n --dump */coverage/*.gcno |& grep "=====" | sort | uniq | grep -v test | grep -v AppleInternal | cut -d " " -f2,4,5 | cut -d ":" -f1 | sort | uniq | sed -e 's/ @/\t@/g' > modern-iboot-symbols.txt
__os_warn_unused @ include/overflow.h
__syscfg_validate_and_get_instance_id_for_multi @ lib/syscfg/syscfg.c
__syscfg_validate_keybag_instance_id @ lib/syscfg/syscfg.c
_abb_panic_buffered_write @ lib/abb_panic/abb_panic.c
_abb_panic_calculate_file_size @ lib/abb_panic/abb_panic.c
_abb_panic_create_4cc @ lib/abb_panic/abb_panic.c
_abb_panic_create_ce_subsystem_crash_report_entry @ lib/abb_panic/abb_panic.c
_abb_panic_create_lph_subsystem_crash_report_entry @ lib/abb_panic/abb_panic.c
@bb33bb
bb33bb / address_functions.c
Created August 19, 2024 06:34 — forked from soez/address_functions.c
Samsung virt_to_phys - phys_to_virt - virt_to_page - page_to_virt
#define MEMSTART 0x80000000UL
#define VIRTUAL_KERNEL_START 0xffffffc008000000UL
#define LINEAR_MAP_START 0xffffff8000000000UL
bool is_lm_addr(uint64_t kaddr)
{
return (kaddr & (VIRTUAL_KERNEL_START - (0x8 << (6 * 4)))) == LINEAR_MAP_START;
}
uint64_t virt_to_phys(uint64_t kaddr)
@bb33bb
bb33bb / aarch64_virt_install.sh
Created August 19, 2024 03:28 — forked from yen3/aarch64_virt_install.sh
aarch64 virt-install commands
#!/bin/bash
rm -rf /home/yen3/ubuntu.qcow2
qemu-img create -f qcow2 /home/yen3/ubuntu.qcow2 10G
virsh undefine ubuntu1604arm64 --nvram
install_from_localtion() {
virt-install -n ubuntu1604arm64 --memory 1024 --arch aarch64 --vcpus 1 \
--disk /home/yen3/ubuntu.qcow2,device=disk,bus=virtio \