Skip to content

Instantly share code, notes, and snippets.

@NyanSatan
NyanSatan / uart.c
Created April 10, 2023 12:05
UART write-only driver for A6 SecureROM
/*
* The algorithm is mostly stolen from iBoot source,
* cleaned up for the purpose
*
* TODO: analyze S5L8700X datasheet in order
* to understand if UART peripherial is the same,
* and if so - clean up this mess
*/
#include <stdint.h>
@NyanSatan
NyanSatan / t8110-ap_keys-281023.json
Created January 13, 2024 16:47
T8110 AP & SEP keys 28.10.23
This file has been truncated, but you can view the full file.
[
{
"fw": "iPad_Fall_2021_15.0.1_19A348_Restore.ipsw",
"file": "LLB.j310.RELEASE.im4p",
"kbag": "C883D3D32C20E3108DF7BA1BB79F23E2BC848D034A968042E28615B85A490A26CDAA60A0F9F931C8C901AE1C7593C8BF",
"key": "793a284aff409d72860e64431e3d6a0e27f0d574ac4d4053628a7266ed5bd051eb6d06dde0acd5b9730ed874e136ed00"
},
{
"fw": "iPad_Fall_2021_15.0.1_19A348_Restore.ipsw",
@NyanSatan
NyanSatan / t8120-ap_keys-210124.json
Created January 21, 2024 16:47
T8120 AP & SEP keys 21.01.24
[
{
"build": "20A362",
"fw": "iPhone15,2_16.0_20A362_Restore.ipsw",
"file": "LLB.d73.RELEASE.im4p",
"kbag": "985898593B143B130AAEA95C723A342D647ED5F9E0953871E836000A7108E52D75E0BA03A9917E984889DCA1253D3F1C",
"key": "9f58969bb426e99f2dc541bd524f2b5696865560a201a230ee25c89cd2a147d9e5d17779c0b816fd29c5f760a892c5bf"
},
{
"build": "20A362",
@NyanSatan
NyanSatan / t8020-ap_keys-220124-release_ipsws.json
Created January 22, 2024 20:27
T8020 AP & SEP keys 22.01.24, only release IPSWs, credits to m1stadev for KBAG collection
This file has been truncated, but you can view the full file.
[
{
"build": "21C66",
"fw": "iPhone11,2,iPhone11,4,iPhone11,6_17.2.1_21C66_Restore.ipsw",
"file": "LLB.d331p.RELEASE.im4p",
"kbag": "ceb94a60d2ab04749f320df617939ee51d83c1075500c630135fa816801fa2465aa60d32bb4b1aface8d4edae78ed8c1",
"key": "8f8e2885ba96e189ee3e31553da43c303c6014bb91285ce572a2eac6a72320ca5f5fef05b8d9a429857544fb7d22136e"
},
{
@ohsevin
ohsevin / awesome-re-piracy-mega-list.md
Created May 15, 2023 03:14
awesome.re piracy mega list (archived) for safe keeping!
@bb33bb
bb33bb / modern-iboot-symbols.txt
Created May 8, 2025 06:04 — forked from NyanSatan/modern-iboot-symbols.txt
Modern as of 2024. Obviously not every single one, but still over 2K. Dumped from test coverage files
iBootCoverage> gcov -n --dump */coverage/*.gcno |& grep "=====" | sort | uniq | grep -v test | grep -v AppleInternal | cut -d " " -f2,4,5 | cut -d ":" -f1 | sort | uniq | sed -e 's/ @/\t@/g' > modern-iboot-symbols.txt
__os_warn_unused @ include/overflow.h
__syscfg_validate_and_get_instance_id_for_multi @ lib/syscfg/syscfg.c
__syscfg_validate_keybag_instance_id @ lib/syscfg/syscfg.c
_abb_panic_buffered_write @ lib/abb_panic/abb_panic.c
_abb_panic_calculate_file_size @ lib/abb_panic/abb_panic.c
_abb_panic_create_4cc @ lib/abb_panic/abb_panic.c
_abb_panic_create_ce_subsystem_crash_report_entry @ lib/abb_panic/abb_panic.c
_abb_panic_create_lph_subsystem_crash_report_entry @ lib/abb_panic/abb_panic.c
@NyanSatan
NyanSatan / modern-iboot-symbols.txt
Created April 2, 2025 19:56
Modern as of 2024. Obviously not every single one, but still over 2K. Dumped from test coverage files
iBootCoverage> gcov -n --dump */coverage/*.gcno |& grep "=====" | sort | uniq | grep -v test | grep -v AppleInternal | cut -d " " -f2,4,5 | cut -d ":" -f1 | sort | uniq | sed -e 's/ @/\t@/g' > modern-iboot-symbols.txt
__os_warn_unused @ include/overflow.h
__syscfg_validate_and_get_instance_id_for_multi @ lib/syscfg/syscfg.c
__syscfg_validate_keybag_instance_id @ lib/syscfg/syscfg.c
_abb_panic_buffered_write @ lib/abb_panic/abb_panic.c
_abb_panic_calculate_file_size @ lib/abb_panic/abb_panic.c
_abb_panic_create_4cc @ lib/abb_panic/abb_panic.c
_abb_panic_create_ce_subsystem_crash_report_entry @ lib/abb_panic/abb_panic.c
_abb_panic_create_lph_subsystem_crash_report_entry @ lib/abb_panic/abb_panic.c
@tomnomnom
tomnomnom / alert.js
Last active May 8, 2025 06:03
Ways to alert(document.domain)
// How many ways can you alert(document.domain)?
// Comment with more ways and I'll add them :)
// I already know about the JSFuck way, but it's too long to add (:
// Direct invocation
alert(document.domain);
(alert)(document.domain);
al\u0065rt(document.domain);
al\u{65}rt(document.domain);
window['alert'](document.domain);
@1allen
1allen / arr.sh
Last active May 8, 2025 05:57
ARR app stack management script for PulsedMedia service, generated by AI.
#!/bin/bash
# Function to launch Jellyfin
jellyfin() {
tmux new-session -d -s "jellyfin" "export JELLYFIN_DATA_DIR=$HOME/.config/jellyfin && JELLYFIN_LOG_DIR=$HOME/.config/jellyfin/log && nice -n 19 sh -c $DOTNET_ROOT/dotnet\ $HOME/.bin/jellyfin/jellyfin.dll"
}
# Function to launch Sonarr
sonarr() {
tmux new-session -d -s "sonarr" "mono $HOME/.bin/Sonarr/Sonarr.exe --data=$HOME/.config/sonarr; exec $SHELL"