Thanks to Google for sharing the sample.
The int uname(struct utsname *); function retrieves the current device information, containing info such as iPhone13,2\x00 to identify the device model.
| [ | |
| { | |
| "name": "DSPSR", | |
| "enc": [3, 3, 4, 5, 0], | |
| "minel": 0, | |
| "width": 32, | |
| "fields": [ | |
| { | |
| "name": "N", | |
| "lsb": 31, |
| [ | |
| { | |
| "name": "DSPSR", | |
| "enc": [3, 3, 4, 5, 0], | |
| "minel": 0, | |
| "width": 32, | |
| "fields": [ | |
| { | |
| "name": "N", | |
| "lsb": 31, |
| // | |
| // ViewController.m | |
| // JBDetectTest | |
| // | |
| // Created by seo on 3/27/25. | |
| // | |
| #import "ViewController.h" | |
| #import <dlfcn.h> |
| #import <Foundation/Foundation.h> | |
| #import <mach/mach.h> | |
| #import <stdio.h> | |
| #import <stdlib.h> | |
| #import <string.h> | |
| #include <libkern/OSCacheControl.h> | |
| const int REGION_SIZE = 0x4000*1; | |
| void write_instructions(void* page) |
| The `chkdatecc` field was set during Operation Triangulation. | |
| 0x206140008: | |
| b[63]: rsvd_63 Reserved | |
| b[62]: cfgerren Enable error register locking and asynchronous reporting when CfgErrESV is set. | |
| b[61]: chksnphit Deprecated | |
| (If set, check that snoops hit in L2C tag, and if they miss, log an error. | |
| If clear, trust the way info from AF and do not read the tags for snoops.) |
| The `ready` and `enablesize` fields were set during Operation Triangulation. | |
| 0x206140108: | |
| b[63]: ready RAM available for use | |
| b[62:30]: rsvd_62_30 Reserved | |
| b[29:24]: regionbase Base region within LLC (starting way). | |
| Base address does not change. | |
| (EnableSize+RegionBase) must be less than or equal to (RegionNum+1) and | |
| EnableSize must be less than or equal to RegionNum. | |
| b[23:22]: rsvd_23_22 Reserved |
| // | |
| // pplrw.m | |
| // kfd | |
| // | |
| // Created by Lars Fröder on 29.12.23. | |
| // | |
| #import <Foundation/Foundation.h> | |
| #import <dlfcn.h> | |
| #import <mach-o/dyld.h> |
| #!/bin/zsh | |
| # WARNING! The script is meant to show how and what can be disabled. Don’t use it as it is, adapt it to your needs. | |
| # Credit: Original idea and script disable.sh by pwnsdx https://gist.github.com/pwnsdx/d87b034c4c0210b988040ad2f85a68d3 | |
| # Disabling unwanted services on macOS Big Sur (11), macOS Monterey (12), macOS Ventura (13) and macOS Sonoma (14) | |
| # Disabling SIP is required ("csrutil disable" from Terminal in Recovery) | |
| # Modifications are written in /private/var/db/com.apple.xpc.launchd/ disabled.plist, disabled.501.plist | |
| # To revert, delete /private/var/db/com.apple.xpc.launchd/ disabled.plist and disabled.501.plist and reboot; sudo rm -r /private/var/db/com.apple.xpc.launchd/* | |
| # user |
| Day | Title | link |
|---|---|---|
| 1 | Apple Source code | https://www.youtube.com/watch?v=WxOZgr0Ld9o |
| 2 | Mach-O Binaries | https://www.youtube.com/watch?v=G_bDl5hv8kY |
| 3 | PAC (Pointer Authentication Codes) | https://www.youtube.com/watch?v=9neXmcwtCF8 |
| 4 | dyld_shared_cache | https://www.youtube.com/watch?v=I1ZkONfyHG4 |
| 5 | Userspace Memory Layout | https://www.youtube.com/watch?v=MUr7qg7iqKE |
| 6 | SIP | https://www.youtube.com/watch?v=HeOVKe0xpW0 |
| 7 | Kernel Boot Arguments | https://www.youtube.com/watch?v=gjOKlBpJWoc |
| 8 | XNU Source Code Overview | https://www.youtube.c |