Skip to content

Instantly share code, notes, and snippets.

View blacktop's full-sized avatar
🗺️

blacktop

🗺️
720 followers · 268 following
View GitHub Profile
@blacktop
blacktop / Ghidra-OSX-Launcher-Script.scpt
Created August 14, 2021 20:02 — forked from yifanlu/Ghidra-OSX-Launcher-Script.scpt
Ghidra.app launcher for OSX
@blacktop
blacktop / mappings.md
Last active June 22, 2021 02:03
iOS 15/macOS 12 dyld_shared_cache [RESEARCH]

Header

Magic             = "dyld_v1  arm64e"
UUID              = F5097CDC-9388-382F-8D13-AAE184497224
Platform          = iOS
Max Slide         = 0x036F8000 (ASLR entropy: 12-bits)
Num SubCaches     = 1
SubCache Group ID = 0x25228
Sym SubCache UUID = 2C153791-3C17-3CB4-9AC0-5999740689AA
@blacktop
blacktop / DeviceTree.vma2macosap.md
Last active January 30, 2022 17:46
AssetData/boot/Firmware/all_flash/DeviceTree.vma2macosap.im4p 
❯ brew install blacktop/tap/ipsw
❯ ipsw download ota -V --macos --device Macmini9,1 --model J274AP
❯ unzip -l 8093b01ee46664b82427188ff61334501fd1b0d8.zip | grep DeviceTree
@blacktop
blacktop / rsync-home-exclude-osx.txt
Last active June 24, 2023 23:56
things to exclude from homedir rsync on osx
*.ipsw
*.nobackup
*.tmp
**/.atom
**/.cache
**/.cargo
**/.cocoapods
**/.config/yarn
**/.docker
**/.DS_Store
@blacktop
blacktop / zeek error
Created August 29, 2019 21:19
-- Configuring done
-- Generating done
-- Build files have been written to: /tmp/zeek/build
make -C build all
make[1]: Entering directory '/tmp/zeek/build'
make[2]: Entering directory '/tmp/zeek/build'
make[3]: Entering directory '/tmp/zeek/build'
make[3]: Entering directory '/tmp/zeek/build'
Scanning dependencies of target binpac_lib
[ 0%] [FLEX][PACScanner] Building scanner with flex 2.6.4
@blacktop
blacktop / stars.sh
Last active August 17, 2019 01:32
Github Stars
http https://api.github.com/users/blacktop/repos | jq -r '.[] | [.stargazers_count, .name] | @csv' | sort -rn
@blacktop
blacktop / kaitai.py
Last active November 24, 2018 22:10
from macho import MachO
m = MachO.from_file('kernelcache.release.iphone11.decompressed')
print('CPU: {}, Subtype: {}'.format(m.header.cputype.name.upper(), m.header.cpusubtype))
print('Build Version: {}'.format(m.load_commands[22].body))
print('Source Version: {}'.format(m.load_commands[23].body))
for lc in m.load_commands:
if hasattr(lc.type, 'segment_64'):
if hasattr(lc.body, 'sections'):
@blacktop
blacktop / keybase.md
Created January 7, 2015 03:00

Keybase proof

I hereby claim:

  • I am blacktop on github.
  • I am blacktop (https://keybase.io/blacktop) on keybase.
  • I have a public key whose fingerprint is 69F9 FB68 ED3F 4141 6976 EA46 20B7 DA2D 9518 38C4

To claim this, I am signing this object: