Duncan Ogilvie mrexodia

Blog posts

User mode debugging (easy).
Symbols available.
Attack surface: mostly Gen-1 VMs, device emulation, x86 emulation (for MMIO accesses).

Day	Title	link
1	Apple Source code	https://www.youtube.com/watch?v=WxOZgr0Ld9o
2	Mach-O Binaries	https://www.youtube.com/watch?v=G_bDl5hv8kY
3	PAC (Pointer Authentication Codes)	https://www.youtube.com/watch?v=9neXmcwtCF8
4	dyld_shared_cache	https://www.youtube.com/watch?v=I1ZkONfyHG4
5	Userspace Memory Layout	https://www.youtube.com/watch?v=MUr7qg7iqKE
6	SIP	https://www.youtube.com/watch?v=HeOVKe0xpW0
7	Kernel Boot Arguments	https://www.youtube.com/watch?v=gjOKlBpJWoc
8	XNU Source Code Overview	https://www.youtube.c

cdecl stands for "C declaration", it is used by most c compiler in the x86 architecture.

Understand your Mac and iPhone more deeply by tracing the evolution of Mac OS X from prelease to Swift. John Siracusa delivers the details.

You've got two main options:

	#
	# Port to binary ninja of the script written during the Off-by-One Security stream
	# (https://youtu.be/FnIQTL9w-Ow) to synchronize GEF with Binary Ninja
	# Requires `rpyc` and `pygments`
	#
	# In IDA, first download and load https://gist.githubusercontent.com/hugsy/714e0038d5d0b1deb7fad1907928252f/raw/87bd608a859c1699f9fc2fb556394d618747bdc8/binja_rpyc_snippet.py
	#
	# @_hugsy_
	#
	import rpyc

	// Created by Anthony Printup on 4/21/2023.
	#pragma once

	#include <algorithm>
	#include <bitset>
	#include <cstdint>
	#include <exception>
	#include <functional>
	#include <ranges>

	using System.Text;
	using AsmResolver;
	using AsmResolver.DotNet;
	using AsmResolver.DotNet.Builder.Metadata.Blob;
	using AsmResolver.DotNet.Builder.Metadata.Strings;
	using AsmResolver.DotNet.Code.Cil;
	using AsmResolver.DotNet.Signatures;
	using AsmResolver.IO;
	using AsmResolver.PE;
	using AsmResolver.PE.DotNet.Builder;

	In addition to a significant decrease in hepatic lipid accumulation in the IOE group, which inhibited energy intake by propionate enrichment, hepatic lipids were also significantly reduced in the mice in the IOP group, which was largely enriched with butyrate. Compared with the IOE group, IOP had a stronger regulatory effect on hepatic metabolism and triglyceride metabolism and higher levels of TCA cycle in the host. In addition, butyrate has the ability to promote browning of white adipose tissue (WAT) to brown adipose tissue (BAT).^[@ref39],[@ref40]^ WAT stores energy, whereas BAT uses energy for heating and consequently host energy expenditure increases.^[@ref41],[@ref42]^ However, adipose tissue weight does not change after WAT browning.^[@ref43]^ Therefore, the weight of adipose tissue of mice in the IOP group dominated by butyrate was greater than that of the mice in the IOE group dominated by propionate.

	In conclusion ([Figure [7](#fig7){ref-type="fig"}](#fig7){ref-type="fig"}C), the improvement of ob