Skip to content

Instantly share code, notes, and snippets.

View rickmark's full-sized avatar
🔬
Decoding iOS Formats

Rick Mark rickmark

🔬
Decoding iOS Formats
244 followers · 29 following
View GitHub Profile
@rickmark
rickmark / gist:d96f299f8cd5abff95888adccc3944f3
Created March 19, 2024 02:26
https://github.com/hack-different/apple-knowledge/pull/129
2024-02-02T06:36:41.9751935Z Current runner version: '2.312.0'
2024-02-02T06:36:41.9775842Z ##[group]Operating System
2024-02-02T06:36:41.9776482Z Ubuntu
2024-02-02T06:36:41.9776951Z 22.04.3
2024-02-02T06:36:41.9777275Z LTS
2024-02-02T06:36:41.9777600Z ##[endgroup]
2024-02-02T06:36:41.9778009Z ##[group]Runner Image
2024-02-02T06:36:41.9778498Z Image: ubuntu-22.04
2024-02-02T06:36:41.9778891Z Version: 20240126.1.0
2024-02-02T06:36:41.9779955Z Included Software: https://github.com/actions/runner-images/blob/ubuntu22/20240126.1/images/ubuntu/Ubuntu2204-Readme.md
@rickmark
rickmark / joined.tbd
Created March 12, 2024 07:03
TBD Entries
This file has been truncated, but you can view the full file.
--- !tapi-tbd
tbd-version: 4
targets: [ x86_64-macos, arm64-macos, arm64e-macos ]
install-name: '/usr/lib/ACIPCBTLib.dylib'
exports:
- targets: [ x86_64-macos, arm64-macos, arm64e-macos ]
symbols: [ __ZN12ACIPCBTClass10writeAsyncEPKvjPFvPviS2_ES2_, __ZN12ACIPCBTClass12readRegisterEjPvPj,
__ZN12ACIPCBTClass14clearIteratorsEv, __ZN12ACIPCBTClass14sendImageAsyncEPKvjPFvPviS2_S2_ES2_,
__ZN12ACIPCBTClass16interfaceMatchedEPvj, __ZN12ACIPCBTClass17abortChannelAsyncE14acipcDirectionPFvPviES1_,
@rickmark
rickmark / fixup.txt
Created March 5, 2024 02:55
dyld symbolic fixup
/usr/lib/dyld [arm64e]:
-symbolic_fixups:
0x00098000 __DATA_CONST __auth_ptr
+0x98000 rebase pointer ___chkstk_darwin (div=0x0000 ad=0 key=IA)
+0x98008 rebase pointer ___chkstk_darwin (div=0x0000 ad=0 key=IA)
+0x98010 rebase pointer ___chkstk_darwin (div=0x0000 ad=0 key=IA)
+0x98018 rebase pointer ___chkstk_darwin (div=0x0000 ad=0 key=IA)
+0x98020 rebase pointer ___chkstk_darwin (div=0x0000 ad=0 key=IA)
+0x98028 rebase pointer ___chkstk_darwin (div=0x0000 ad=0 key=IA)
+0x98030 rebase pointer ___chkstk_darwin (div=0x0000 ad=0 key=IA)
@rickmark
rickmark / TargetList.txt
Created March 5, 2024 02:46
TargetedAppList
__ZN5dyld4L27dataConstApps_iOS14_5_arm64E:
+0x0000 rebase pointer "WeChat"
+0x0008 rebase pointer "True Skate"
+0x0010 rebase pointer "imeituan"
+0x0018 rebase pointer "DPScope"
+0x0020 rebase pointer "PCDBank"
+0x0028 rebase pointer "AirChina"
+0x0030 rebase pointer "ceair_iOS_branch"
+0x0038 rebase pointer "WeRead"
+0x0040 rebase pointer "osee2unifiedRelease"
@rickmark
rickmark / gist:497c081d9725c0cf6ccab66ba4bbcdb9
Created February 12, 2024 08:30
[ 0.000000] Booting Linux on physical CPU 0x0000000000 [0x411fd073]
[ 0.000000] Linux version 4.19.152-alpine-unvr (bdd@builder) (gcc version 10.2.1 20210110 (Debian 10.2.1-6)) #2 SMP Fri Jan 26 02:09:27 CST 2024
[ 0.000000] Machine model: Annapurna Labs Alpine V2 UBNT
[ 0.000000] efi: Getting EFI parameters from FDT:
[ 0.000000] efi: UEFI not found.
[ 0.000000] On node 0 totalpages: 2097152
[ 0.000000] DMA32 zone: 12288 pages used for memmap
[ 0.000000] DMA32 zone: 0 pages reserved
[ 0.000000] DMA32 zone: 786432 pages, LIFO batch:63
[ 0.000000] Normal zone: 20480 pages used for memmap
@rickmark
rickmark / as_header.h
Created February 3, 2024 14:24
AppleOLYHAL
//------------------------------------------------------------------------------
// Types for /Users/rickmark/BootKernelCollection.development.kc.bin.bndb
//
// This header file generated by Binary Ninja 3.6.4811-dev
//------------------------------------------------------------------------------
#ifndef BN_TYPE_PARSER
#include <stdint.h>
#include <stddef.h>
#include <stdlib.h>
@rickmark
rickmark / symbols
Created February 3, 2024 14:22
AppleOLYHAL
This file has been truncated, but you can view the full file.
sub_fffffe0008fd3a0c
sub_fffffe0008fd3c8c
sub_fffffe0008fd3f24
sub_fffffe0008fd4480
sub_fffffe0008fd4730
sub_fffffe0008fd4970
sub_fffffe0008fd4aac
sub_fffffe0008fd4d30
sub_fffffe0008fd522c
@rickmark
rickmark / bbupdate.log
Created May 18, 2022 21:58
Baseband updates
[02:57:35.0961-GMT]{3>5} CHECKPOINT BEGIN: FIRMWARE:[0x1303] update_baseband
ota-step-ids = {0x1103053F:94;0x11031303:107}
executing /usr/sbin/nvram ramrod-nvram-sequence=609
nvram successfully persisted to the filesystem
ota-step-names = {0x1103053F:wait_firmware_update_thread;0x11031303:update_baseband}
executing /usr/sbin/nvram ramrod-nvram-sequence=610
nvram successfully persisted to the filesystem
ota-step-uptime = 116
executing /usr/sbin/nvram ramrod-nvram-sequence=611
nvram successfully persisted to the filesystem
@rickmark
rickmark / ota_tolerated_failures.plist
Last active February 15, 2022 15:18
Tolerated Failures - IoC
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>0x1303</key>
<dict>
<key>InitialAttempted</key>
<true/>
<key>InitialFailureNumber</key>
<integer>2</integer>
@rickmark
rickmark / files.txt
Created December 14, 2021 05:56
Case sensitive files in the linux tree...
include/uapi/linux/netfilter/xt_CONNMARK.h
include/uapi/linux/netfilter/xt_DSCP.h
include/uapi/linux/netfilter/xt_MARK.h
include/uapi/linux/netfilter/xt_RATEEST.h
include/uapi/linux/netfilter/xt_TCPMSS.h
include/uapi/linux/netfilter_ipv4/ipt_ECN.h
include/uapi/linux/netfilter_ipv4/ipt_TTL.h
include/uapi/linux/netfilter_ipv6/ip6t_HL.h
net/netfilter/xt_DSCP.c
net/netfilter/xt_HL.c