Skip to content

Instantly share code, notes, and snippets.

@Proteas
Created May 5, 2017 09:42
Show Gist options
  • Star 3 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save Proteas/a32b88e7be85446185d8e48537439bd3 to your computer and use it in GitHub Desktop.
Save Proteas/a32b88e7be85446185d8e48537439bd3 to your computer and use it in GitHub Desktop.
#! /usr/sbin/dtrace -C -s
/*
requirement: disable SIP
*/
#pragma D option quiet
BEGIN {
printf("vm_kernel_slide: 0x%p\n", (`vm_kernel_slide));
printf("vm_kernel_base: 0x%p\n", (`vm_kernel_base));
printf("vm_kernel_top: 0x%p\n", (`vm_kernel_top));
printf("kernel virtual base: 0x%x\n", (`vm_kernel_slide) + 0xffffff8000200000);
printf("vm_kernel_addrperm: 0x%p\n", (`vm_kernel_addrperm));
printf("vm_kernel_addrperm_ext: 0x%p\n", (`vm_kernel_addrperm_ext));
printf("vm_min_kernel_address: 0x%p\n", (`vm_min_kernel_address));
printf("vm_max_kernel_address: 0x%p\n", (`vm_max_kernel_address));
printf("\n");
printf("kernel_task: 0x%p\n", (`kernel_task));
printf("kernel_object: 0x%p\n", (`kernel_object));
printf("kernel_map: 0x%p\n", (`kernel_map));
printf("kernel_pmap: 0x%p\n", (`kernel_pmap));
printf("\n");
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment