Skip to content

Instantly share code, notes, and snippets.

@xooxo
xooxo / ffmpeg_pybindings.py
Created October 10, 2023 12:04
A script to create video from randomly selected videos on a folder. It's here for archive. concat function is so slow. There are solutions on the net
import os
import random
import ffmpeg
# Function to apply random color to text surrounded by symbols
def apply_random_color(text, symbol_colors):
result = ""
inside_symbol = False
for char in text:
if char == "#" or char == "/":
@xooxo
xooxo / lldb_test_mach_lookup.py
Created May 17, 2023 13:35
see if mach lookup to a service allowed from attached process
import lldb
file_path = "reachable_services.txt"
debugger = lldb.SBDebugger.Create()
interpreter = debugger.GetCommandInterpreter()
debugger.Initialize()
return_obj = lldb.SBCommandReturnObject()
with open(file_path, 'r') as file:
@xooxo
xooxo / 16_3_1_reachable_services
Created May 17, 2023 12:58
App Sandbox Reachable XPC Services for 16.3.1 iPhone 8+
com.apple.watchconnectivity.complication
com.apple.wcd
com.apple.mobileassetd.v2
com.apple.mobileassetd
com.apple.assistivetouchd.drag.xpc
UIASTNotificationCenter
com.apple.ScreenTimeAgent
com.apple.iconservices
com.apple.donotdisturb.availability.service
com.apple.donotdisturb.appconfiguration.service
@xooxo
xooxo / Xrefs to PsCreateSystemThread
Last active April 24, 2021 07:30
Xrefs to PsCreateSystemThread
Function Name: PopCreatePowerThread
--> Function Address: 0x140123b55L
Function Name: MiZeroInParallel
--> Function Address: 0x1401a330eL
Function Name: DisplayBootBitmap
--> Function Address: 0x1401b3124L
Function Name: ?SmStWorkerThreadStartThread@?$SMKM_STORE@USM_TRAITS@@@@SAJPEAU1@P6AXPEAX@ZPEAPEAU_ETHREAD@@@Z
--> Function Address: 0x14022390bL
Function Name: SmKmStoreHelperStart
--> Function Address: 0x14022fa2eL
@xooxo
xooxo / .cpp
Created June 8, 2020 19:13
NtQueryInformationProcess runtime-linking
typedef NTSTATUS (NTAPI *pfnNtQueryInformationProcess)(
IN HANDLE ProcessHandle,
IN PROCESSINFOCLASS ProcessInformationClass,
OUT PVOID ProcessInformation,
IN ULONG ProcessInformationLength,
OUT PULONG ReturnLength OPTIONAL
);
// ... blahblahblah ...