cashtony

cashtony / configure-xcode-for-embedded-development.py

Created April 30, 2022 14:21 — forked from Lessica/configure-xcode-for-embedded-development.py

iOS Jailbreak Development: Add Command-Line Tool

	#!/usr/bin/env python3
	#
	# Copyright (C) 2014-2020 Apple Inc. All rights reserved.
	#
	# Redistribution and use in source and binary forms, with or without
	# modification, are permitted provided that the following conditions
	# are met:
	#
	# 1. Redistributions of source code must retain the above copyright
	# notice, this list of conditions and the following disclaimer.

cashtony / patchfinder64.c

Created March 17, 2022 17:26 — forked from jakeajames/patchfinder64.c

"kppless" sandbox profile patch for iOS 12

	addr_t Find_platform_profile() {
	uint64_t string = Find_strref("\"failed to initialize platform sandbox", 1, 0, false);
	if (!string) {
	string = Find_strref("\"failed to initialize platform sandbox", 1, 1, false);
	if (!string) {
	return 0;
	}
	}
	string -= KernDumpBase;

cashtony / patch.sh

Created March 17, 2022 17:25 — forked from jakeajames/patch.sh

Make h3lix work when installed not-via-Impactor. To be used with the latest h3lix.

	if [ $# != 2 ]; then
	echo "Usage: $0 /path/to/input_ipa /path/to/output_ipa"
	exit 1
	fi

	if ! [ -f $1 ]; then
	echo "'$1' does not exist"
	exit 1
	fi

cashtony / exploit.c

Created March 17, 2022 17:25 — forked from jakeajames/exploit.c

leak address of segment_list in oob_timestamp

	//
	// exploit.c
	// extra_time
	//
	// Created by Jake James on 2/8/20.
	// Copyright © 2020 Jake James. All rights reserved.
	//

	#include "exploit.h"
	#include "IOAccelerator_stuff.h"

cashtony / poc.c

Created March 17, 2022 17:25 — forked from jakeajames/poc.c

CVE-2021-30955 PoC

	#include <stdlib.h>
	#include <stdio.h>
	#include <pthread/pthread.h>
	#include <mach/mach.h>

	struct ool_msg {
	mach_msg_header_t hdr;
	mach_msg_body_t body;
	mach_msg_ool_ports_descriptor_t ool_ports[];
	};

cashtony / IOSurface_stuff.c

Created March 17, 2022 17:24 — forked from jakeajames/IOSurface_stuff.c

WIP CVE-2021-30955 exploit

	//
	// IOSurface_stuff.c
	// time_waste
	//
	// Created by Jake James on 2/22/20.
	// Copyright © 2020 Jake James. All rights reserved.
	//

	#import "IOSurface_stuff.h"