Skip to content

Instantly share code, notes, and snippets.

@zhuowei
Created February 21, 2023 06:26
Show Gist options
  • Save zhuowei/371d43b3e33f025f8db25390addf41a8 to your computer and use it in GitHub Desktop.
Save zhuowei/371d43b3e33f025f8db25390addf41a8 to your computer and use it in GitHub Desktop.
Reachable Mach services from the app sandbox on iOS 16.1
PurpleSystemAppPort
PurpleSystemEventPort
UIASTNotificationCenter
com.apple.ABDatabaseDoctor
com.apple.AppSSO.service-xpc
com.apple.AuthenticationServicesCore.AuthenticationServicesAgent
com.apple.CARenderServer
com.apple.ClipServices.clipserviced
com.apple.CoreAuthentication.daemon
com.apple.DeviceAccess.xpc
com.apple.DragUI.druid.destination
com.apple.DragUI.druid.source
com.apple.FSEvents
com.apple.FileCoordination
com.apple.FileProvider
com.apple.GSSCred
com.apple.GameController.gamecontrollerd
com.apple.GameController.gamecontrollerd.app
com.apple.GameController.gamecontrollerd.haptics
com.apple.MobileAccessoryUpdater
com.apple.MobileFileIntegrity
com.apple.MobileInternetSharing
com.apple.PowerManagement.control
com.apple.ProgressReporting
com.apple.SBUserNotification
com.apple.Safari.SafeBrowsing.Service
com.apple.ScreenTimeAgent
com.apple.SystemConfiguration.DNSConfiguration
com.apple.SystemConfiguration.NetworkInformation
com.apple.SystemConfiguration.configd
com.apple.SystemConfiguration.helper
com.apple.TextInput
com.apple.TextInput.emoji
com.apple.TextInput.image-cache-server
com.apple.TextInput.lexicon-server
com.apple.TextInput.preferences
com.apple.TextInput.rdt
com.apple.TextInput.shortcuts
com.apple.UIKit.KeyboardManagement.hosted
com.apple.UIKit.statusbarserver
com.apple.VoiceOverTouch
com.apple.VoiceOverTouch.drag.xpc
com.apple.VoiceOverTouch.xpc
com.apple.WebBookmarks.webbookmarksd
com.apple.accessibility.AXBackBoardServer
com.apple.accessibility.gax.backboard
com.apple.accessories.externalaccessory-server
com.apple.accessories.transport-server
com.apple.accountsd.accountmanager
com.apple.accountsd.oauthsigner
com.apple.aggregated
com.apple.airplay.apsynccontroller.xpc
com.apple.airplay.sender.xpc
com.apple.ak.authorizationservices.xpc
com.apple.analyticsd
com.apple.ap.adprivacyd.attribution
com.apple.ap.promotedcontent.attributionservice
com.apple.appleneuralengine
com.apple.apsd
com.apple.arkit.service.geoTracking
com.apple.arkit.service.location
com.apple.assistant.analytics
com.apple.assistant.dictation
com.apple.assistivetouchd.drag.xpc
com.apple.atc
com.apple.audio.AURemoteIOServer
com.apple.audio.AudioComponentPrefs
com.apple.audio.AudioComponentRegistrar
com.apple.audio.AudioFileServer
com.apple.audio.AudioQueueServer
com.apple.audio.AudioSession
com.apple.audio.AudioUnitServer
com.apple.audio.SystemSoundServer-iOS
com.apple.audio.hapticd
com.apple.awdd
com.apple.backboard.TouchDeliveryPolicyServer
com.apple.backboard.display.services
com.apple.backboard.hid-services.xpc
com.apple.backboard.hid.services
com.apple.backboard.watchdog
com.apple.backgroundassets.user
com.apple.bird
com.apple.bird.token
com.apple.businessservicesd
com.apple.cache_delete.public
com.apple.calaccessd
com.apple.calaccessd.xpc
com.apple.callkit.callcontrollerhost
com.apple.callkit.callsourcehost
com.apple.callkit.service
com.apple.certui.relay
com.apple.cfnetwork.AuthBrokerAgent
com.apple.cfnetwork.cfnetworkagent
com.apple.cfprefsd.daemon
com.apple.chrono.widgetcenterconnection
com.apple.ckdiscretionaryd
com.apple.cloudd
com.apple.cmfsyncagent.embedded.auth
com.apple.commandandcontrol.drag.xpc
com.apple.commcenter.coretelephony.xpc
com.apple.commcenter.cupolicy.xpc
com.apple.commcenter.dm-helper
com.apple.commcenter.mobile-helper
com.apple.commcenter.xpc
com.apple.contactsd
com.apple.containermanagerd
com.apple.coremedia.admin
com.apple.coremedia.asset.xpc
com.apple.coremedia.assetcacheinspector
com.apple.coremedia.assetimagegenerator.xpc
com.apple.coremedia.audiodeviceclock.xpc
com.apple.coremedia.audioprocessingtap.xpc
com.apple.coremedia.bytestream.xpc
com.apple.coremedia.capturesession
com.apple.coremedia.capturesource
com.apple.coremedia.compressionsession
com.apple.coremedia.cpe.xpc
com.apple.coremedia.cpeprotector.xpc
com.apple.coremedia.customurlloader.xpc
com.apple.coremedia.decompressionsession
com.apple.coremedia.endpoint.xpc
com.apple.coremedia.endpointremotecontrolsession.xpc
com.apple.coremedia.figcontentkeyboss.xpc
com.apple.coremedia.figcontentkeysession.xpc
com.apple.coremedia.figcpecryptor
com.apple.coremedia.formatreader.xpc
com.apple.coremedia.mediaparserd.formatreader.xpc
com.apple.coremedia.mediaparserd.mutablemovie.xpc
com.apple.coremedia.mutablecomposition.xpc
com.apple.coremedia.mutablemovie.xpc
com.apple.coremedia.player.xpc
com.apple.coremedia.remaker
com.apple.coremedia.remotequeue
com.apple.coremedia.routediscoverer.xpc
com.apple.coremedia.routingcontext.xpc
com.apple.coremedia.routingsessionmanager.xpc
com.apple.coremedia.samplebufferaudiorenderer.xpc
com.apple.coremedia.samplebufferrendersynchronizer.xpc
com.apple.coremedia.samplegenerator.xpc
com.apple.coremedia.sandboxserver.xpc
com.apple.coremedia.sts
com.apple.coremedia.systemcontroller.xpc
com.apple.coremedia.videocompositor
com.apple.coremedia.videoqueue
com.apple.coremedia.videotarget.xpc
com.apple.coremedia.visualcontext.xpc
com.apple.coremedia.volumecontroller.xpc
com.apple.corerecents.recentsd
com.apple.coreservices.lsuseractivitymanager.xpc
com.apple.corespotlightservice
com.apple.coresymbolicationd
com.apple.ctkd.slot-client
com.apple.ctkd.token-client
com.apple.cvhwa.xpc
com.apple.dasd.end-prewarm
com.apple.devicecheckd
com.apple.diagnosticd
com.apple.distributed_notifications@0v3
com.apple.distributed_notifications@1v3
com.apple.dnssd.service
com.apple.donotdisturb.appconfiguration.service
com.apple.donotdisturb.availability.service
com.apple.dt.automationmode.reader
com.apple.duetactivityscheduler
com.apple.fairplayd
com.apple.fairplayd.versioned
com.apple.fileprovider.pushkit
com.apple.fontservicesd
com.apple.frontboard.systemappservices
com.apple.fullkeyboardaccess.drag.xpc
com.apple.gamed
com.apple.geod
com.apple.gpumemd.source
com.apple.handwritingd.pkanalytics
com.apple.handwritingd.pksettings
com.apple.handwritingd.remoterecognition
com.apple.hangtracerd
com.apple.healthd.server
com.apple.homed.xpc
com.apple.homed.xpc.accessory-setup
com.apple.iTunesStore.daemon.notifications.public
com.apple.iTunesStore.daemon.public
com.apple.iap2d.ExternalAccessory.distributednotification.server
com.apple.iap2d.distributednotification.server
com.apple.iap2d.xpc
com.apple.iapauthd
com.apple.iapauthd.xpc
com.apple.iapd
com.apple.iapd.xpc
com.apple.iaptransportd.xpc
com.apple.iconservices
com.apple.identityservicesd.idquery.embedded.auth
com.apple.imagent.embedded.auth
com.apple.iohideventsystem
com.apple.iokit.powerdxpc
com.apple.iphone.axserver-systemwide
com.apple.itunescloudd.tcchelper
com.apple.itunescloudd.xpc
com.apple.itunesstored.xpc
com.apple.kvsd
com.apple.linkd.autoShortcut
com.apple.linkd.transcript
com.apple.locationd.registration
com.apple.locationd.spi
com.apple.locationd.synchronous
com.apple.logd
com.apple.logd.events
com.apple.lsd.advertisingidentifiers
com.apple.lsd.icons
com.apple.lsd.mapdb
com.apple.lsd.open
com.apple.lsd.openurl
com.apple.managedconfiguration.mdmdservice
com.apple.managedconfiguration.profiled.public
com.apple.matter.support.xpc
com.apple.mediaanalysisd.analysis
com.apple.mediaanalysisd.service.public
com.apple.medialibraryd.xpc
com.apple.mediaremoted.xpc
com.apple.mediaserverd
com.apple.mediastream.sharing
com.apple.metrickit.xpc
com.apple.midiserver
com.apple.mobile.installd
com.apple.mobileassetd
com.apple.mobileassetd.v2
com.apple.mobilecheckpoint.checkpointd
com.apple.mobilegestalt.xpc
com.apple.mobilemail.services.xpc
com.apple.nano.nanoregistry.paireddeviceregistry
com.apple.nanoprefsync
com.apple.naturallanguaged
com.apple.nearbyd.xpc.nearbyinteraction
com.apple.nehelper
com.apple.nesessionmanager
com.apple.networking.captivenetworksupport
com.apple.networkserviceproxy.fetch-token
com.apple.notificationcenter.widgetcontrollerconnection
com.apple.nsurlsessiond
com.apple.ondemandd.client
com.apple.parsecd
com.apple.passd.assertions
com.apple.passd.in-app-payment
com.apple.passd.library
com.apple.pasteboard.pasted
com.apple.pegasus
com.apple.photos.service
com.apple.pluginkit.pkd
com.apple.powerlog.plxpclogger.xpc
com.apple.privacyaccountingd
com.apple.progressd
com.apple.ptpcamerad
com.apple.quicklook.ThumbnailsAgent
com.apple.relatived.public
com.apple.remindd
com.apple.replayd
com.apple.revisiond
com.apple.runningboard
com.apple.safarifetcherd
com.apple.scrod
com.apple.securityd
com.apple.server.bluetooth
com.apple.server.bluetooth.le.att.xpc
com.apple.server.bluetooth.le.pipe.xpc
com.apple.sessionservices
com.apple.sharing.sharesheet
com.apple.sharingd.nsxpc
com.apple.shazamd
com.apple.siri.VoiceShortcuts.xpc
com.apple.spotlight.IndexAgent
com.apple.spotlight.SearchAgent
com.apple.springboard.backgroundappservices
com.apple.springboard.blockableservices
com.apple.springboard.services
com.apple.storekit.configuration.xpc
com.apple.storekitd
com.apple.storekitservice
com.apple.symptoms.symptomsd.managed_events
com.apple.synapse.backlink-service
com.apple.system.libinfo.muser
com.apple.system.notification_center
com.apple.tccd
com.apple.telephonyutilities.callservicesdaemon.callcapabilities
com.apple.telephonyutilities.callservicesdaemon.voip
com.apple.timesync.expositor
com.apple.timesync.manager
com.apple.timesync.ptp.manager
com.apple.translation.text
com.apple.triald.namespace-management
com.apple.trustd
com.apple.usernotifications.remotenotificationservice
com.apple.usernotifications.usernotificationservice
com.apple.usymptomsd
com.apple.videoconference.avconference
com.apple.videoconference.camera
com.apple.voiceservices.keepalive
com.apple.voiceservices.tts
com.apple.wapi.client
com.apple.watchconnectivity.complication
com.apple.wcd
com.apple.webinspector
NSDictionary<NSString*, id>* dict = [NSDictionary dictionaryWithContentsOfFile:@"/System/Library/xpc/launchd.plist"];
NSDictionary<NSString*, id>* launchDaemons = dict[@"LaunchDaemons"];
for (NSString* key in launchDaemons) {
NSDictionary<NSString*, id>* job = launchDaemons[key];
NSDictionary<NSString*, id>* machServices = job[@"MachServices"];
for (NSString* serviceName in machServices) {
mach_port_t service_port = MACH_PORT_NULL;
kern_return_t err = bootstrap_look_up(bootstrap_port, serviceName.UTF8String, &service_port);
if (!err) {
printf("%s\n", serviceName.UTF8String);
mach_port_deallocate(mach_task_self_, service_port);
}
}
}
@xooxo
Copy link

xooxo commented Mar 7, 2023

Hmm, I can't send a message to com.apple.tccd,though. I'm getting XPC_ERROR_CONNECTION_INVALID from an app with a sandbox set on Mac 13.1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment