Skip to content

Instantly share code, notes, and snippets.

@djeraseit
Forked from Proteas/macos-kern-info.d
Created July 15, 2020 03:00
Show Gist options
  • Save djeraseit/25ce2d7dc89cc11828b83c13645e078b to your computer and use it in GitHub Desktop.
Save djeraseit/25ce2d7dc89cc11828b83c13645e078b to your computer and use it in GitHub Desktop.
#! /usr/sbin/dtrace -C -s
/*
requirement: disable SIP
*/
#pragma D option quiet
BEGIN {
printf("vm_kernel_slide: 0x%p\n", (`vm_kernel_slide));
printf("vm_kernel_base: 0x%p\n", (`vm_kernel_base));
printf("vm_kernel_top: 0x%p\n", (`vm_kernel_top));
printf("kernel virtual base: 0x%x\n", (`vm_kernel_slide) + 0xffffff8000200000);
printf("vm_kernel_addrperm: 0x%p\n", (`vm_kernel_addrperm));
printf("vm_kernel_addrperm_ext: 0x%p\n", (`vm_kernel_addrperm_ext));
printf("vm_min_kernel_address: 0x%p\n", (`vm_min_kernel_address));
printf("vm_max_kernel_address: 0x%p\n", (`vm_max_kernel_address));
printf("\n");
printf("kernel_task: 0x%p\n", (`kernel_task));
printf("kernel_object: 0x%p\n", (`kernel_object));
printf("kernel_map: 0x%p\n", (`kernel_map));
printf("kernel_pmap: 0x%p\n", (`kernel_pmap));
printf("\n");
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment