Skip to content

Instantly share code, notes, and snippets.

View arm64eabi's full-sized avatar

arm64eabi

View GitHub Profile
@WHW0x455
WHW0x455 / public.md
Last active December 23, 2025 07:13

2023 predator sample

Thanks to Google for sharing the sample.

VersionDispatcher

The int uname(struct utsname *); function retrieves the current device information, containing info such as iPhone13,2\x00 to identify the device model.

VersionDispatcher::OffsetsVersionByDeviceInit

@justtryingthingsout
justtryingthingsout / acce-h17g-core-sysregs.json
Last active October 16, 2025 11:23
System Registers for the M5 efficiency core, complete with field names (bitranges are inclusive on both ends)
This file has been truncated, but you can view the full file.
[
{
"name": "DSPSR",
"enc": [3, 3, 4, 5, 0],
"minel": 0,
"width": 32,
"fields": [
{
"name": "N",
"lsb": 31,
@justtryingthingsout
justtryingthingsout / accp-h17g-core-sysregs.json
Last active October 19, 2025 04:47
System Registers for the M5 performance core, complete with field names (bitranges are inclusive on both ends)
This file has been truncated, but you can view the full file.
[
{
"name": "DSPSR",
"enc": [3, 3, 4, 5, 0],
"minel": 0,
"width": 32,
"fields": [
{
"name": "N",
"lsb": 31,
@wh1te4ever
wh1te4ever / TrollDetector.m
Last active November 29, 2025 10:50
TrollStore Detector
//
// ViewController.m
// JBDetectTest
//
// Created by seo on 3/27/25.
//
#import "ViewController.h"
#import <dlfcn.h>
@JJTech0130
JJTech0130 / debugger_jit_improved.m
Last active October 30, 2025 09:09
Improved method of using a debugger for JIT on iOS... Uses split rx/rw regions, and works on iOS 18.4b1
#import <Foundation/Foundation.h>
#import <mach/mach.h>
#import <stdio.h>
#import <stdlib.h>
#import <string.h>
#include <libkern/OSCacheControl.h>
const int REGION_SIZE = 0x4000*1;
void write_instructions(void* page)
@justtryingthingsout
justtryingthingsout / l2c_sts.txt
Last active June 2, 2025 08:05
Graphics AGX L2C Error Status (0x206140008 in Operation Triangulation)
The `chkdatecc` field was set during Operation Triangulation.
0x206140008:
b[63]: rsvd_63 Reserved
b[62]: cfgerren Enable error register locking and asynchronous reporting when CfgErrESV is set.
b[61]: chksnphit Deprecated
(If set, check that snoops hit in L2C tag, and if they miss, log an error.
If clear, trust the way info from AF and do not read the tags for snoops.)
@justtryingthingsout
justtryingthingsout / l2cramcfg.txt
Last active June 1, 2025 22:03
Graphics AGX L2C RAM Configuration (0x206140108 in Operation Triangulation)
The `ready` and `enablesize` fields were set during Operation Triangulation.
0x206140108:
b[63]: ready RAM available for use
b[62:30]: rsvd_62_30 Reserved
b[29:24]: regionbase Base region within LLC (starting way).
Base address does not change.
(EnableSize+RegionBase) must be less than or equal to (RegionNum+1) and
EnableSize must be less than or equal to RegionNum.
b[23:22]: rsvd_23_22 Reserved
@opa334
opa334 / pplrw.m
Last active September 30, 2024 18:45
PPLRW on iOS < 16.6 (Needs mapping primitive) (Credits: Operation Triangulation by @oct0xor, @bzvr_, @kucher1n)
//
// pplrw.m
// kfd
//
// Created by Lars Fröder on 29.12.23.
//
#import <Foundation/Foundation.h>
#import <dlfcn.h>
#import <mach-o/dyld.h>
#!/bin/zsh
# WARNING! The script is meant to show how and what can be disabled. Don’t use it as it is, adapt it to your needs.
# Credit: Original idea and script disable.sh by pwnsdx https://gist.github.com/pwnsdx/d87b034c4c0210b988040ad2f85a68d3
# Disabling unwanted services on macOS Big Sur (11), macOS Monterey (12), macOS Ventura (13) and macOS Sonoma (14)
# Disabling SIP is required ("csrutil disable" from Terminal in Recovery)
# Modifications are written in /private/var/db/com.apple.xpc.launchd/ disabled.plist, disabled.501.plist
# To revert, delete /private/var/db/com.apple.xpc.launchd/ disabled.plist and disabled.501.plist and reboot; sudo rm -r /private/var/db/com.apple.xpc.launchd/*
# user
@matteyeux
matteyeux / f.md
Last active July 21, 2025 05:13
macOS and iOS Security Internals Advent Calendar