| #!/bin/sh | |
| cat << "EOF" > /etc/hotplug.d/dhcp/90-newdev | |
| [ "$ACTION" == "add" ] || exit 0 | |
| # [ "$ACTION" == "add" -o "$ACTION" == "update" ] || exit 0 | |
| known_macs="/etc/known_macs" | |
| user_key="your-user-key" | |
| api_key="your-api-key" |
| #!/usr/bin/env bash | |
| # checck if pidof exists | |
| PIDOF="$(which pidof)" | |
| # and if not - install it | |
| (test "${PIDOF}" && test -f "${PIDOF}") || brew install pidof | |
| # find app in default paths | |
| CO_PWD=~/Applications/CrossOver.app/Contents/MacOS | |
| test -d "${CO_PWD}" || CO_PWD=/Applications/CrossOver.app/Contents/MacOS |
| import puppeteer from 'puppeteer-extra'; | |
| import pluginStealth from 'puppeteer-extra-plugin-stealth'; // Use v2.4.5 instead of latest | |
| import * as readline from 'readline'; | |
| puppeteer.use(pluginStealth()); | |
| // Use '-h' arg for headful login. | |
| const headless = !process.argv.includes('-h'); | |
| // Prompt user for email and password. |
| version: '3' | |
| services: | |
| unbound: | |
| image: mvance/unbound-rpi:latest #use 'mvance/unbound:latest' if not on a raspberry pi | |
| container_name: unbound | |
| network_mode: service:vpn | |
| restart: unless-stopped | |
| vpn: |
This is a kernel exploit targeting iOS 12.0-12.2 and 12.4. It exploits a dangling kernel pointer to craft a fake task port corresponding to the kernel task and gets a send right to it.
This code is not readily compilable — some common sense is a prerequisite. If you do get it going though, it is extremely reliable on any device with more than a gigabyte of RAM. Interested readers may want to investigate how reallocations can be prevented -- this might improve reliability even more.
