San sandin

## kpc_demo.c
// =============================================================================
// XNU kperf/kpc demo
// Available for 64-bit Intel/Apple Silicon, macOS/iOS, with root privileges
//
//
// Demo 1 (profile a function in current thread):
// 1. Open directory '/usr/share/kpep/', find your CPU PMC database.
//    M1 (Pro/Max/Ultra): /usr/share/kpep/a14.plist
//    M2 (Pro/Max):       /usr/share/kpep/a15.plist
//    M3:                 /usr/share/kpep/as1.plist

## analyzer.cpp
// analyzer.cpp : This file contains the 'main' function. Program execution begins and ends there.
// compile:
//   https://stackoverflow.com/questions/35116327/when-g-static-link-pthread-cause-segmentation-fault-why
//   g++ analyzer.cpp  --std=c++17 -lstdc++fs -O3 -o analyzer -g -static -lrt -pthread -Wl,--whole-archive -lpthread -Wl,--no-whole-archive
//

#include "httplib.h"
#include <assert.h>
#include <iostream>
#include <fstream>

## ubuntu-MBP-16.md

      
              1 file
            
          
              19 forks
            
          
              49 comments
            
          
              146 stars
            
          
                gbrow004
                / ubuntu-MBP-16.md
            
            
              Last active
              July 12, 2024 21:40
            
              
                Ubuntu on Apple Macbook Pro 16-inch (2019)
              
          
    Update!

This gist is out of date and I can no longer help much, as I got rid of my Mac.
Please visit T2 Linux website for more and better information:
https://t2linux.org/
Acknowledgements

This gist is just a compilation of the hard work that others have put in. I'm not a software developer, so if there are any mistakes or better ways of doing things, I'd appreciate any suggestions. Here's a list of the real heroes who made this possible:

  
## idapython_cheatsheet.md

      
              1 file
            
          
              51 forks
            
          
              6 comments
            
          
              254 stars
            
          
                icecr4ck
                / idapython_cheatsheet.md
            
            
              Last active
              July 22, 2024 12:10
            
              
                Cheatsheet for IDAPython
              
          
    IDAPython cheatsheet

Important links


Porting IDAPython plugins to IDA 7.4
Hex-Rays IDAPython official documentation

Basic commands

Get informations on the binary


## apollo.txt
This bug was also called moonshine in the beginning
Basically the following bug is present in all bootroms I have looked at:
1. When usb is started to get an image over dfu, dfu registers an interface to handle all the commands and allocates a buffer for input and output
2. if you send data to dfu the setup packet is handled by the main code which then calls out to the interface code
3. the interface code verifies that wLength is shorter than the input output buffer length and if that's the case it updates a pointer passed as an argument with a pointer to the input output buffer
4. it then returns wLength which is the length it wants to recieve into the buffer
5. the usb main code then updates a global var with the length and gets ready to recieve the data packages
6. if a data package is recieved it gets written to the input output buffer via the pointer which was passed as an argument and another global variable is used to keep track of how many bytes were recieved already
7. if all the data was recieved th

## ida_mc_notes.md

      
              1 file
            
          
              7 forks
            
          
              2 comments
            
          
              33 stars
            
          
                icecr4ck
                / ida_mc_notes.md
            
            
              Last active
              July 4, 2024 08:08
            
              
                Some notes about the IDA Microcode (intermediate language).
              
          
    IDA Microcode notes

References


Ilfak's presentation at Recon 2018
Microcode in pictures
Hex-Rays Microcode API vs. Obfuscating Compiler
Scripts vds10, vds11, vds12 and vds13 from Hex-Rays SDK

Implementation


## .gitconfig
# Linux
# add the following to "~/.gitconfig" file

[merge]
    tool = intellij
[mergetool "intellij"]
    cmd = /usr/local/bin/idea merge $(cd $(dirname "$LOCAL") && pwd)/$(basename "$LOCAL") $(cd $(dirname "$REMOTE") && pwd)/$(basename "$REMOTE") $(cd $(dirname "$BASE") && pwd)/$(basename "$BASE") $(cd $(dirname "$MERGED") && pwd)/$(basename "$MERGED")
    trustExitCode = true

[diff]

## ffmpeg_tutorial05.c
// tutorial05.c
// A pedagogical video player that really works!
//
// Code based on FFplay, Copyright (c) 2003 Fabrice Bellard,
// and a tutorial by Martin Bohme (boehme@inb.uni-luebeckREMOVETHIS.de)
// Tested on Gentoo, CVS version 5/01/07 compiled with GCC 4.1.1
// With updates from https://github.com/chelyaev/ffmpeg-tutorial
// Updates tested on:
// LAVC 54.59.100, LAVF 54.29.104, LSWS 2.1.101, SDL 1.2.15
// on GCC 4.7.2 in Debian February 2015

## ffmpeg_tutorial04.c
// tutorial04.c
// A pedagogical video player that will stream through every video frame as fast as it can,
// and play audio (out of sync).
//
// Code based on FFplay, Copyright (c) 2003 Fabrice Bellard,
// and a tutorial by Martin Bohme (boehme@inb.uni-luebeckREMOVETHIS.de)
// Tested on Gentoo, CVS version 5/01/07 compiled with GCC 4.1.1
// With updates from https://github.com/chelyaev/ffmpeg-tutorial
// Updates tested on:
// LAVC 54.59.100, LAVF 54.29.104, LSWS 2.1.101, SDL 1.2.15

## signal.c
/**
 * More info?
 * a.dotreppe@aspyct.org
 * http://aspyct.org
 *
 * Hope it helps :)
 */

#include <stdio.h>
#include <stdlib.h>
	// =============================================================================
	// XNU kperf/kpc demo
	// Available for 64-bit Intel/Apple Silicon, macOS/iOS, with root privileges
	//
	//
	// Demo 1 (profile a function in current thread):
	// 1. Open directory '/usr/share/kpep/', find your CPU PMC database.
	// M1 (Pro/Max/Ultra): /usr/share/kpep/a14.plist
	// M2 (Pro/Max): /usr/share/kpep/a15.plist
	// M3: /usr/share/kpep/as1.plist
	// analyzer.cpp : This file contains the 'main' function. Program execution begins and ends there.
	// compile:
	// https://stackoverflow.com/questions/35116327/when-g-static-link-pthread-cause-segmentation-fault-why
	// g++ analyzer.cpp --std=c++17 -lstdc++fs -O3 -o analyzer -g -static -lrt -pthread -Wl,--whole-archive -lpthread -Wl,--no-whole-archive
	//

	#include "httplib.h"
	#include <assert.h>
	#include <iostream>
	#include <fstream>
	This bug was also called moonshine in the beginning
	Basically the following bug is present in all bootroms I have looked at:
	1. When usb is started to get an image over dfu, dfu registers an interface to handle all the commands and allocates a buffer for input and output
	2. if you send data to dfu the setup packet is handled by the main code which then calls out to the interface code
	3. the interface code verifies that wLength is shorter than the input output buffer length and if that's the case it updates a pointer passed as an argument with a pointer to the input output buffer
	4. it then returns wLength which is the length it wants to recieve into the buffer
	5. the usb main code then updates a global var with the length and gets ready to recieve the data packages
	6. if a data package is recieved it gets written to the input output buffer via the pointer which was passed as an argument and another global variable is used to keep track of how many bytes were recieved already
	7. if all the data was recieved th
	# Linux
	# add the following to "~/.gitconfig" file

	[merge]
	tool = intellij
	[mergetool "intellij"]
	cmd = /usr/local/bin/idea merge $(cd $(dirname "$LOCAL") && pwd)/$(basename "$LOCAL") $(cd $(dirname "$REMOTE") && pwd)/$(basename "$REMOTE") $(cd $(dirname "$BASE") && pwd)/$(basename "$BASE") $(cd $(dirname "$MERGED") && pwd)/$(basename "$MERGED")
	trustExitCode = true

	[diff]
	// tutorial05.c
	// A pedagogical video player that really works!
	//
	// Code based on FFplay, Copyright (c) 2003 Fabrice Bellard,
	// and a tutorial by Martin Bohme (boehme@inb.uni-luebeckREMOVETHIS.de)
	// Tested on Gentoo, CVS version 5/01/07 compiled with GCC 4.1.1
	// With updates from https://github.com/chelyaev/ffmpeg-tutorial
	// Updates tested on:
	// LAVC 54.59.100, LAVF 54.29.104, LSWS 2.1.101, SDL 1.2.15
	// on GCC 4.7.2 in Debian February 2015
	// tutorial04.c
	// A pedagogical video player that will stream through every video frame as fast as it can,
	// and play audio (out of sync).
	//
	// Code based on FFplay, Copyright (c) 2003 Fabrice Bellard,
	// and a tutorial by Martin Bohme (boehme@inb.uni-luebeckREMOVETHIS.de)
	// Tested on Gentoo, CVS version 5/01/07 compiled with GCC 4.1.1
	// With updates from https://github.com/chelyaev/ffmpeg-tutorial
	// Updates tested on:
	// LAVC 54.59.100, LAVF 54.29.104, LSWS 2.1.101, SDL 1.2.15
	/**
	* More info?
	* a.dotreppe@aspyct.org
	* http://aspyct.org
	*
	* Hope it helps :)
	*/

	#include <stdio.h>
	#include <stdlib.h>