PsychoTea

import idaapi
import idautils
import idc

content = ""

with open("/path/to/joker/file", "r") as f:
    content = f.readlines()

for line in content:

PsychoTea

    r = mkdir("/tmp/bash", 0700);
    if(r != 0)
    {
        NSLog(@"Failed to create /tmp/bash: %s", strerror(errno));
        goto out;
    }
    pid_t pid = fork();
    if(pid == -1)
    {
        NSLog(@"fork: %s", strerror(errno));

PsychoTea

#!/bin/bash

lang=text

# See if language arg is given
if [ "$#" -eq "1" ]; then
  lang=$1
fi

echo "Using language: $lang"

PsychoTea

## Global Variables

KernelSlide = 0x0

## Helper Functions

def isHex(val):
    try:
        int(val, 16)
        return True

PsychoTea

import sys
import json

if len(sys.argv) < 2:
  print("Usage: PanicParser.py [file path]")
  exit()

filePath = sys.argv[1]

fileData = ""

PsychoTea

## Builds an IPA from the first found .xcarchive file in the current directory

currDir=$(dirname $0)

archiveName=$(ls $currDir | grep -m1 .xcarchive)

appName=$(echo "${archiveName%% *}")
echo Building an IPA for $appName...

archivePath=$currDir/$archiveName

PsychoTea

Keybase proof

I hereby claim:

• I am psychotea on github.
• I am psychotea (https://keybase.io/psychotea) on keybase.
• I have a public key ASChk3b2bHn9s4W3FEv3bpHC9D-_NgC4dDdKyGout3tOWQo

To claim this, I am signing this object: