rainyx

rainyx / injector.c

Created April 19, 2018 08:10

Dylib Remote Injection

	//
	// main.c
	// swinjector
	//
	// Created by rainyx on 13-7-24.
	// Copyright (c) 2013年 __MyCompanyName__. All rights reserved.
	//

	#include <stdio.h>
	#include <stdlib.h>

rainyx / bypass64.sh

Last active December 3, 2020 04:44

Bypass IDA "tls_stream_t::verify_certificate", tested in IDA750 for mac.

	#/bin/bash
	echo Please type an input file path. $e.g. "/Applications/ida750/ida.app/Contents/MacOS/libida64.dylib"$
	read input_file
	#input_file='/Applications/ida750/ida.app/Contents/MacOS/libida64.dylib'
	sym_addr=$(nm -a -P -t d $input_file \| grep -m 1 '__ZN12tls_stream_t18verify_certificateEv' \| awk '{print $3}')
	if [ ! $sym_addr ]
	then
	echo Symbol \"tls_stream_t::verify_certificate\" can not found in the input file.
	exit
	fi

rainyx / libGoolgeEarthProxy.mm

Created September 1, 2021 04:00

GoogleEarthPro HTTP Proxy Plugin. Compile and inject via DYLD_INSERT_LIBRARIES.

	//
	// main.cpp
	// GoogleEarthHttpProxy
	//
	// Created by admin on 2021/4/22.
	//

	#include <stdio.h>
	#include <Foundation/Foundation.h>
	#import <mach-o/dyld.h>

rainyx / IRMaker.cpp

Created April 18, 2022 06:07

Create IR code easily

	//
	// Created by rainyx on 2022/4/16.
	//

	#include "IRMaker.h"

	using namespace llvm;
	using namespace std;

	static bool hasTerminator(BasicBlock *BB) {

	#/bin/bash
	echo Please type an input file path. \(e.g. "/Applications/ida750/ida.app/Contents/MacOS/libida64.dylib"\)
	read input_file
	#input_file='/Applications/ida750/ida.app/Contents/MacOS/libida64.dylib'
	sym_addr=$(nm -a -P -t d $input_file \| grep -m 1 '__ZN12tls_stream_t18verify_certificateEv' \| awk '{print $3}')
	if [ ! $sym_addr ]
	then
	echo Symbol \"tls_stream_t::verify_certificate\" can not found in the input file.
	exit
	fi