Skip to content

Instantly share code, notes, and snippets.


Block or report user

Report or block snowleopardw

Hide content and notifications from this user.

Learn more about blocking users

Contact Support about this user’s behavior.

Learn more about reporting abuse

Report abuse
View GitHub Profile
View inject_trusts-iOS-v12.1.2-16C104-iPhone11,x.c
void inject_trusts(int pathc, const char *paths[])
printf("[+] injecting into trust cache...\n");
extern uint64_t g_kern_base;
static uint64_t tc = 0;
if (tc == 0) {
// loaded_trust_caches: 0xFFFFFFF008F702C8
tc = g_kern_base + (0xFFFFFFF008F702C8 - 0xFFFFFFF007004000);
snowleopardw / unlocknvram.c
Created Dec 28, 2017 — forked from stek29/unlocknvram.c
async_wake nvram
View unlocknvram.c
// iOS 11 moves OFVariables to const
// however, if we:
// 1) Can find IODTNVRAM service
// 2) Have tfp0 / kernel read|write|alloc
// 3) Can leak kernel address of mach port
// then we can fake vtable on IODTNVRAM object
// async_wake satisfies those requirements
// however, I wasn't able to actually set or get ANY nvram variable
// not even userread/userwrite
  1. 找到对应版本的命令
  2. 打开终端(terminal) 或者 iterm2
  3. 关闭软件
  4. 执行命令
  5. 重新打开软件
Sublime Text

| 版本 | 命令 |

You can’t perform that action at this time.