Skip to content

Instantly share code, notes, and snippets.

View rickmark's full-sized avatar
🔬
Decoding iOS Formats

Rick Mark rickmark

🔬
Decoding iOS Formats
259 followers · 30 following
View GitHub Profile
@rickmark
rickmark / fixup.txt
Created March 5, 2024 02:55
dyld symbolic fixup
/usr/lib/dyld [arm64e]:
-symbolic_fixups:
0x00098000 __DATA_CONST __auth_ptr
+0x98000 rebase pointer ___chkstk_darwin (div=0x0000 ad=0 key=IA)
+0x98008 rebase pointer ___chkstk_darwin (div=0x0000 ad=0 key=IA)
+0x98010 rebase pointer ___chkstk_darwin (div=0x0000 ad=0 key=IA)
+0x98018 rebase pointer ___chkstk_darwin (div=0x0000 ad=0 key=IA)
+0x98020 rebase pointer ___chkstk_darwin (div=0x0000 ad=0 key=IA)
+0x98028 rebase pointer ___chkstk_darwin (div=0x0000 ad=0 key=IA)
+0x98030 rebase pointer ___chkstk_darwin (div=0x0000 ad=0 key=IA)
@rickmark
rickmark / TargetList.txt
Created March 5, 2024 02:46
TargetedAppList
__ZN5dyld4L27dataConstApps_iOS14_5_arm64E:
+0x0000 rebase pointer "WeChat"
+0x0008 rebase pointer "True Skate"
+0x0010 rebase pointer "imeituan"
+0x0018 rebase pointer "DPScope"
+0x0020 rebase pointer "PCDBank"
+0x0028 rebase pointer "AirChina"
+0x0030 rebase pointer "ceair_iOS_branch"
+0x0038 rebase pointer "WeRead"
+0x0040 rebase pointer "osee2unifiedRelease"
@rickmark
rickmark / gist:497c081d9725c0cf6ccab66ba4bbcdb9
Created February 12, 2024 08:30
[ 0.000000] Booting Linux on physical CPU 0x0000000000 [0x411fd073]
[ 0.000000] Linux version 4.19.152-alpine-unvr (bdd@builder) (gcc version 10.2.1 20210110 (Debian 10.2.1-6)) #2 SMP Fri Jan 26 02:09:27 CST 2024
[ 0.000000] Machine model: Annapurna Labs Alpine V2 UBNT
[ 0.000000] efi: Getting EFI parameters from FDT:
[ 0.000000] efi: UEFI not found.
[ 0.000000] On node 0 totalpages: 2097152
[ 0.000000] DMA32 zone: 12288 pages used for memmap
[ 0.000000] DMA32 zone: 0 pages reserved
[ 0.000000] DMA32 zone: 786432 pages, LIFO batch:63
[ 0.000000] Normal zone: 20480 pages used for memmap
@rickmark
rickmark / as_header.h
Created February 3, 2024 14:24
AppleOLYHAL
//------------------------------------------------------------------------------
// Types for /Users/rickmark/BootKernelCollection.development.kc.bin.bndb
//
// This header file generated by Binary Ninja 3.6.4811-dev
//------------------------------------------------------------------------------
#ifndef BN_TYPE_PARSER
#include <stdint.h>
#include <stddef.h>
#include <stdlib.h>
@rickmark
rickmark / symbols
Created February 3, 2024 14:22
AppleOLYHAL
This file has been truncated, but you can view the full file.
sub_fffffe0008fd3a0c
sub_fffffe0008fd3c8c
sub_fffffe0008fd3f24
sub_fffffe0008fd4480
sub_fffffe0008fd4730
sub_fffffe0008fd4970
sub_fffffe0008fd4aac
sub_fffffe0008fd4d30
sub_fffffe0008fd522c
sub_fffffe0008fd54b0
@rickmark
rickmark / bbupdate.log
Created May 18, 2022 21:58
Baseband updates
[02:57:35.0961-GMT]{3>5} CHECKPOINT BEGIN: FIRMWARE:[0x1303] update_baseband
ota-step-ids = {0x1103053F:94;0x11031303:107}
executing /usr/sbin/nvram ramrod-nvram-sequence=609
nvram successfully persisted to the filesystem
ota-step-names = {0x1103053F:wait_firmware_update_thread;0x11031303:update_baseband}
executing /usr/sbin/nvram ramrod-nvram-sequence=610
nvram successfully persisted to the filesystem
ota-step-uptime = 116
executing /usr/sbin/nvram ramrod-nvram-sequence=611
nvram successfully persisted to the filesystem
@rickmark
rickmark / ota_tolerated_failures.plist
Last active February 15, 2022 15:18
Tolerated Failures - IoC
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>0x1303</key>
<dict>
<key>InitialAttempted</key>
<true/>
<key>InitialFailureNumber</key>
<integer>2</integer>
@rickmark
rickmark / files.txt
Created December 14, 2021 05:56
Case sensitive files in the linux tree...
include/uapi/linux/netfilter/xt_CONNMARK.h
include/uapi/linux/netfilter/xt_DSCP.h
include/uapi/linux/netfilter/xt_MARK.h
include/uapi/linux/netfilter/xt_RATEEST.h
include/uapi/linux/netfilter/xt_TCPMSS.h
include/uapi/linux/netfilter_ipv4/ipt_ECN.h
include/uapi/linux/netfilter_ipv4/ipt_TTL.h
include/uapi/linux/netfilter_ipv6/ip6t_HL.h
net/netfilter/xt_DSCP.c
net/netfilter/xt_HL.c
@rickmark
rickmark / linux_net.diff
Created December 14, 2021 05:00
Confusing delta in linux source
diff --git a/include/uapi/linux/netfilter/xt_CONNMARK.h b/include/uapi/linux/netfilter/xt_CONNMARK.h
index 36cc956ead1a..f01c19b83a2b 100644
--- a/include/uapi/linux/netfilter/xt_CONNMARK.h
+++ b/include/uapi/linux/netfilter/xt_CONNMARK.h
@@ -1,7 +1,42 @@
-/* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
-#ifndef _XT_CONNMARK_H_target
-#define _XT_CONNMARK_H_target
+/* SPDX-License-Identifier: GPL-2.0+ WITH Linux-syscall-note */
+#ifndef _XT_CONNMARK_H
@rickmark
rickmark / uart_log.txt
Created December 7, 2021 22:15
Proof of Ubiquity AP Tampering
DRAM cfg init type(1): predefined first
U-Boot SPL 2018.03 [UniFi,v1.1.49.79] (Apr 01 2021 - 13:07:30 +0800)
Trying to boot from MTK-MMAP
\x02\x02\x02\x02\x1B\x1B\x1B\x02
U-Boot 2018.03 [UniFi,v1.1.49.79] (Apr 01 2021 - 13:07:30 +0800)
MediaTek MT7621AT ver 1, eco 3
Clocks: CPU: 880MHz, DDR: 1200MHz, Bus: 220MHz, XTAL: 40MHz