Skip to content

Instantly share code, notes, and snippets.

@saagarjha
saagarjha / CreateGhidraApp.sh
Last active July 9, 2024 15:53
Creates a Ghidra.app bundle for macOS
#!/bin/sh
set -eu
create_iconset() {
mkdir -p Ghidra.iconset
cat << EOF > Ghidra.iconset/Contents.json
{
"images":
[
{
"iOS": {
"iOS release": "01c1d682-6e8f-4908-b724-5501fe3f5e5c",
"iOS alternate": "c724cb61-e974-42d3-a911-ffd4dce11eda",
"iOS generic": "0c88076f-c292-4dad-95e7-304db9d29d34",
"iOS 11 developer beta": "b7580fda-59d3-43ae-9488-a81b825e3c73",
"iOS 11 AppleSeed beta": "f23050eb-bdfa-4b23-9eca-453e3b1a247c",
"iOS 11 public beta": "5839f7cf-9610-483a-980f-6c4266a22f17",
"iOS 12 developer beta": "ef473147-b8e7-4004-988e-0ae20e2532ef",
"iOS 12 public beta": "94bf0742-38e6-4379-adf9-ec9995dde586",
@saagarjha
saagarjha / library_injector.cpp
Last active July 20, 2024 14:30
Load a library into newly spawned processes (using DYLD_INSERT_LIBRARIES and EndpointSecurity)
// To compile: clang++ -arch x86_64 -arch arm64 -std=c++20 library_injector.cpp -lbsm -lEndpointSecurity -o library_injector,
// then codesign with com.apple.developer.endpoint-security.client and run the
// program as root.
#include <EndpointSecurity/EndpointSecurity.h>
#include <algorithm>
#include <array>
#include <bsm/libbsm.h>
#include <cstddef>
#include <cstdint>